Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
File: TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft (raw, json)
Hash identifier: 0TH8JdH3BIJz9UrfCmMp6o331sM7aJjD7THiKA3kx5E=
Subject key identifier: 78:48:5F:73:88:9A:CA:84:C7:FF:A0:06:AF:D4:4E:27:93:24:B2:EF
Authority key identifier: 4D:49:27:A1:41:FB:25:B7:58:24:C6:BE:AE:F0:67:9D:34:FC:49:BD
Certificate issuer: /CN=4d4927a141fb25b75824c6beaef0679d34fc49bd
Certificate serial: 0196542516EDDCD84284C0EC0AF50BCE89F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
Manifest number: 01F2
Signing time: Sun 20 Apr 2025 17:00:38 +0000
Manifest this update: Sun 20 Apr 2025 17:00:38 +0000
Manifest next update: Mon 21 Apr 2025 17:00:38 +0000
Files and hashes: 1: TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl (hash: n6BsWHQ9s4ghOozRTnH1YUG6IObn4N7Cs0nAo5CA4BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:16:ed:dc:d8:42:84:c0:ec:0a:f5:0b:ce:89:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4927a141fb25b75824c6beaef0679d34fc49bd
Validity
Not Before: Apr 20 17:00:38 2025 GMT
Not After : Apr 21 17:00:38 2025 GMT
Subject: CN=78485f73889aca84c7ffa006afd44e279324b2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:26:5d:2f:7e:7a:57:b1:32:72:fb:97:7d:
1c:9e:05:68:d4:e3:d1:a7:c3:2a:51:0e:14:7b:ba:
af:c7:10:44:c3:9e:8a:20:a5:a5:4a:0e:c9:5a:8c:
0c:8e:f8:85:e5:a5:b0:b3:1b:46:a7:2c:26:cb:03:
33:2c:33:02:7c:f0:1f:57:71:04:06:51:5a:23:ee:
76:a2:ef:c5:63:ef:44:0e:62:9e:41:1b:fb:df:40:
ef:cd:dd:df:97:1c:9a:f2:9b:87:54:27:62:dd:f9:
7f:49:82:67:ec:de:a7:12:ef:c6:c7:27:ff:94:73:
cb:eb:91:26:ec:22:de:94:ec:c0:19:c6:f7:49:71:
8c:0f:5d:ce:cc:8b:8c:9e:a1:9c:94:de:c8:e0:67:
49:10:6f:20:c1:42:d0:52:6a:b2:b8:0a:f0:7f:61:
db:ec:28:94:58:90:7f:8b:ef:70:20:22:2d:28:2e:
ce:2d:59:b1:7d:66:6f:9d:e1:07:f2:08:8c:74:d0:
a6:5c:fc:25:34:14:36:53:0b:1a:ae:2c:d3:e1:37:
26:48:73:6d:13:d7:aa:c6:c8:c7:34:3a:17:42:86:
26:1d:c6:f5:df:f7:62:f4:ae:1c:82:b6:56:3d:3c:
5c:71:73:8a:5a:7c:ab:89:7d:e7:a2:3b:29:42:81:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:48:5F:73:88:9A:CA:84:C7:FF:A0:06:AF:D4:4E:27:93:24:B2:EF
X509v3 Authority Key Identifier:
keyid:4D:49:27:A1:41:FB:25:B7:58:24:C6:BE:AE:F0:67:9D:34:FC:49:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bf:dd:f5:5e:45:ef:0e:dc:a3:24:ba:c3:b9:53:0a:10:18:
cb:c3:71:29:65:aa:4c:75:36:11:0e:59:71:1b:81:d6:29:c9:
58:ca:95:d2:c7:c4:9b:5c:63:5c:05:d7:c1:a3:c1:06:13:2c:
18:c3:e7:91:f4:fb:f9:a8:81:e5:ba:39:10:fb:5e:c4:27:b8:
5a:40:ce:2d:1b:46:d1:c4:08:fa:b7:88:25:91:bf:33:ca:56:
cf:30:38:de:32:04:8f:9e:f2:98:0b:29:87:3d:3e:fb:d0:73:
2b:7e:45:7f:40:75:80:1c:dc:61:ac:19:c7:f9:bd:37:09:9e:
2a:90:ac:6f:5b:12:f5:2c:4e:48:47:ef:83:fb:09:0f:aa:4a:
62:05:78:fb:e8:b1:6a:2c:b0:7c:1f:52:b1:4e:c2:e8:91:b6:
9b:07:e9:d3:7a:63:f6:b6:1b:6f:43:3d:f2:d8:86:4f:75:aa:
65:27:b0:ff:77:3b:05:f9:6a:45:76:64:d0:4a:e4:41:ab:72:
ae:10:08:6c:b7:4c:60:4d:12:18:b6:40:2f:b0:85:a5:6a:20:
55:76:b9:f6:62:fe:10:a8:1a:ce:f3:07:fe:3a:07:59:21:90:
c4:9a:81:9e:6e:53:c9:e2:17:f4:82:a4:22:5c:94:25:26:a2:
ad:84:a7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:03 2025 by rpki-client