Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
File: v_tlOi9T2WcLP5GEAgnz8seKwbI.mft (raw, json)
Hash identifier: csWEmZM4QuskrpXUoZtLqo2IsoQwmzATvm75spQc2es=
Subject key identifier: 87:A7:01:08:EC:46:F9:18:26:9D:42:CD:57:00:A9:04:C7:7F:78:3C
Authority key identifier: BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
Certificate issuer: /CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Certificate serial: 01965B02BCA822C2D1C24636643B30831ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 01:00:28 +0000
Manifest this update: Tue 22 Apr 2025 01:00:28 +0000
Manifest next update: Wed 23 Apr 2025 01:00:28 +0000
Files and hashes: 1: v_tlOi9T2WcLP5GEAgnz8seKwbI.crl (hash: kcscigpUrRUgbo2Ko2dBNW9J9qjblPdkS6DU4JpzwyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:bc:a8:22:c2:d1:c2:46:36:64:3b:30:83:1e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffb653a2f53d9670b3f91840209f3f2c78ac1b2
Validity
Not Before: Apr 22 01:00:28 2025 GMT
Not After : Apr 23 01:00:28 2025 GMT
Subject: CN=87a70108ec46f918269d42cd5700a904c77f783c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:c2:5f:77:f7:ee:ab:5c:ba:9c:b6:0d:51:
2f:98:5d:41:45:8b:53:6c:3d:75:31:fc:d8:a8:58:
72:77:19:ad:46:ce:8e:27:dc:cb:6c:d0:56:d5:1a:
a0:ac:61:e1:b0:02:b9:5d:b0:9d:4d:72:f3:cb:97:
d1:56:79:22:52:aa:b8:b7:bc:d8:36:d4:e4:75:70:
67:86:6c:be:43:0f:47:17:ce:80:9f:65:d0:4b:ab:
de:14:03:92:22:85:3f:b4:02:a1:fb:95:bb:46:56:
4e:5d:0a:73:53:44:95:cf:78:0c:75:b3:c3:71:52:
09:0a:95:e8:f0:44:d5:f5:38:eb:c4:a8:1b:14:a1:
59:42:aa:f4:62:28:6e:77:f3:17:b8:37:29:ea:1b:
82:f5:88:80:37:42:78:dc:aa:dd:4f:82:3f:79:16:
4f:89:97:4b:c6:c1:a7:5c:7d:d0:cc:c0:c6:62:6b:
74:55:06:84:9d:26:4e:05:08:e3:c3:05:d9:9f:06:
96:bf:aa:b2:c7:10:e8:cc:19:a3:d1:95:49:8c:bc:
e5:d1:be:fb:d0:dc:33:bb:8d:c2:3e:61:12:49:c9:
d2:9c:2f:41:77:99:7b:ca:f9:b9:6c:d0:50:2c:d9:
0a:49:a6:97:08:73:3d:03:b6:ca:68:b8:c8:ed:42:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A7:01:08:EC:46:F9:18:26:9D:42:CD:57:00:A9:04:C7:7F:78:3C
X509v3 Authority Key Identifier:
keyid:BF:FB:65:3A:2F:53:D9:67:0B:3F:91:84:02:09:F3:F2:C7:8A:C1:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tlOi9T2WcLP5GEAgnz8seKwbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/307e30-177d-4b3f-b564-bd2f8c6d5499/1/v_tlOi9T2WcLP5GEAgnz8seKwbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0e:6c:8c:28:cd:fc:ad:ff:06:c3:24:86:4f:1f:13:57:aa:
9f:a1:d8:f7:88:1e:f7:a6:2d:0f:a7:72:89:91:b2:05:a9:80:
c2:44:26:8d:50:09:cc:43:8a:05:35:69:55:d9:62:08:63:0c:
c5:cf:06:0c:75:41:0e:fa:fd:ab:7f:66:68:29:b2:a1:1a:f9:
93:04:3d:8b:09:1c:60:ac:b0:e5:9c:57:74:a2:4e:ef:79:2f:
6a:48:c9:bd:bf:e9:99:ba:7d:e2:78:d3:0f:34:0d:e8:f2:5d:
2c:e0:e4:5c:62:fc:c7:78:c0:41:46:22:cd:d8:d7:bb:e2:4c:
9a:c8:ca:1a:c1:87:12:f5:66:81:cb:7c:32:94:23:34:95:c3:
3d:6a:ca:e2:d4:8f:b0:cf:7b:91:76:b5:89:77:d9:9f:1b:c7:
ad:93:d6:2a:8d:91:18:11:15:7b:7d:a6:44:bd:bc:b9:3f:40:
6d:f3:f7:3c:64:f2:9c:5d:fa:5c:91:34:bf:73:21:3c:db:d4:
b8:03:ed:08:fc:b5:30:c5:2a:fe:9b:ac:ea:4b:8b:98:e1:02:
70:a8:02:7c:1b:91:72:f5:1a:5b:41:ed:f0:b8:ee:8b:6f:a2:
19:3a:9b:ff:93:cf:a9:6d:a0:d1:1d:4f:b3:7a:4f:ca:63:9a:
f7:50:8d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:09 2025 by rpki-client