Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
File: tsaaSiFb3h0yk03chd6vj9nJRHk.mft (raw, json)
Hash identifier: z7+/e6un8GAn2IiDz8xBdHOupy3ar1Jb5ALANyDaPmc=
Subject key identifier: 86:9A:2C:E7:83:E0:78:FF:63:6C:42:A2:D6:0E:1E:47:4A:65:19:97
Authority key identifier: B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79
Certificate issuer: /CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
Certificate serial: 0196579402CC823258BBDEF4D1F1AE85A7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
Manifest number: 0CAB
Signing time: Mon 21 Apr 2025 09:00:39 +0000
Manifest this update: Mon 21 Apr 2025 09:00:39 +0000
Manifest next update: Tue 22 Apr 2025 09:00:39 +0000
Files and hashes: 1: tsaaSiFb3h0yk03chd6vj9nJRHk.crl (hash: gipjAXNZDGfTQ+fdJELd6XabgSr2ZcwI2roEXKX9VXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:02:cc:82:32:58:bb:de:f4:d1:f1:ae:85:a7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
Validity
Not Before: Apr 21 09:00:39 2025 GMT
Not After : Apr 22 09:00:39 2025 GMT
Subject: CN=869a2ce783e078ff636c42a2d60e1e474a651997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1f:b3:c6:50:94:08:f9:8e:73:6f:1f:f5:03:
a1:c4:ee:87:9a:28:6c:fd:1a:77:a2:22:ed:67:ee:
47:da:b6:a0:95:28:3b:36:f4:80:54:37:f5:e2:63:
e1:d9:fd:b1:c1:08:ff:7d:26:9d:67:bf:a6:53:68:
3d:e7:67:6a:08:ab:4a:60:d2:3b:26:78:bf:0c:2c:
65:2e:15:b9:b7:fa:a5:46:1f:6f:a2:06:ec:46:21:
49:3b:10:95:05:a0:12:94:b2:43:05:b8:36:47:84:
96:69:fa:28:0b:89:98:29:86:9e:15:3b:78:08:86:
09:f5:8e:6a:3d:53:6c:6e:51:fa:8e:0e:5d:f5:4a:
bb:2b:1c:20:8d:f9:0a:32:c9:b6:30:21:74:39:73:
0f:6b:7a:13:ad:56:98:1c:3b:48:57:b0:5c:ca:7e:
e8:30:1d:54:5e:44:5a:88:0d:12:c4:75:f9:a1:16:
c1:3a:d4:1a:88:7a:a0:80:f5:e5:09:f1:fe:05:a5:
63:91:a8:10:cf:38:e8:be:93:ed:5d:fa:2a:af:2a:
e9:69:a0:88:5c:32:bd:ff:4c:a4:b7:d8:18:28:a5:
00:0b:9e:77:ef:58:49:0b:f6:ab:f0:77:e7:8b:a5:
f6:67:29:34:98:2d:f5:31:72:32:fd:10:c6:31:2c:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9A:2C:E7:83:E0:78:FF:63:6C:42:A2:D6:0E:1E:47:4A:65:19:97
X509v3 Authority Key Identifier:
keyid:B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fa:ee:a9:e7:34:5a:6c:52:59:47:15:0f:aa:7f:5b:c3:ab:
89:f4:bb:f4:08:97:16:8f:01:9c:86:1d:9b:c9:72:53:b7:a9:
1c:8a:ba:f0:45:d7:57:e8:2e:48:35:eb:2c:b1:0b:8a:65:2e:
b0:51:fa:ec:bb:3b:68:f5:50:9f:80:5e:4e:58:92:cd:d2:af:
43:1f:32:20:6f:eb:1d:9f:4b:7e:16:25:2f:79:af:65:75:f0:
45:f5:8a:db:de:8b:98:ec:42:be:0a:d6:c6:f6:5f:ab:77:38:
dd:33:41:3d:9f:18:9a:64:5c:93:38:c3:32:d7:72:f7:0b:92:
af:25:85:f0:19:07:99:40:d4:f1:61:9a:1a:94:76:e1:08:ff:
c5:86:20:74:03:7b:55:65:47:41:4f:a3:b5:d6:53:67:d0:66:
5b:ee:3f:20:8a:01:cb:74:c9:cd:b7:f6:a3:7e:68:a7:e0:65:
6a:ed:16:61:ae:58:d4:25:c7:a6:29:52:17:11:c1:6f:c4:a1:
03:43:e9:14:52:74:90:6f:cc:49:50:51:d0:b1:e3:b3:a4:1d:
06:76:82:9c:46:c1:2c:e0:96:eb:2a:68:69:c7:ae:e8:2a:e3:
b3:71:97:43:01:92:83:f3:95:88:c2:d8:8f:c6:f7:e2:f5:57:
b6:2e:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:35 2025 by rpki-client