Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
File: tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft (raw, json)
Hash identifier: MexKYSKE/Cr+dFEzy32jKGnLY2LT9k1+ci3lQXSAusA=
Subject key identifier: 99:79:43:C6:37:55:11:4D:6C:F6:FF:A4:80:6A:BF:3B:0E:57:69:8B
Authority key identifier: B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
Certificate issuer: /CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
Certificate serial: 0196591456BF169FDCB7DE1A888C728344A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 16:00:27 +0000
Manifest this update: Mon 21 Apr 2025 16:00:27 +0000
Manifest next update: Tue 22 Apr 2025 16:00:27 +0000
Files and hashes: 1: tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl (hash: S24Nywa87s9gMsqBRyFLPZFN0MjvZoe9Lu731Ml0oRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:56:bf:16:9f:dc:b7:de:1a:88:8c:72:83:44:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
Validity
Not Before: Apr 21 16:00:27 2025 GMT
Not After : Apr 22 16:00:27 2025 GMT
Subject: CN=997943c63755114d6cf6ffa4806abf3b0e57698b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a2:32:62:de:25:ca:1b:c5:56:a1:32:d5:16:
fc:af:09:67:31:6c:99:7d:e7:20:8e:c9:e6:8a:7f:
e9:98:38:d9:48:3b:f2:63:06:16:34:33:85:40:2c:
27:e4:60:25:ba:bf:20:c9:80:7d:7c:ee:67:39:2c:
0c:99:9a:13:5e:d5:36:29:f3:a9:24:fd:a5:95:fe:
3c:67:91:02:f1:69:c4:a6:90:ae:64:b3:58:a1:ad:
e3:5d:c9:c1:0a:5d:8e:88:1b:3d:cb:05:40:57:03:
45:00:aa:62:91:13:26:c3:4a:19:2c:b4:d7:b3:7d:
2e:2c:33:8c:07:23:8a:e1:51:a8:25:b5:be:ac:4f:
91:a0:95:ae:1f:fd:e8:35:5a:65:01:74:1e:b5:47:
aa:57:43:7f:34:ae:58:6e:0e:79:59:cf:45:f1:df:
80:2a:03:7e:ee:22:40:b0:d5:c4:9b:7c:9c:56:35:
6b:44:80:08:03:51:19:16:9a:46:3c:6d:99:bf:21:
b3:ad:f3:66:a6:af:ee:76:56:40:bf:26:a7:e5:59:
69:80:a6:cc:ab:6d:57:b5:d6:3b:a2:11:33:03:4e:
11:4d:a6:cd:f0:1b:41:d9:d8:9d:09:e0:54:5b:4f:
84:9f:4b:61:31:7c:95:bd:66:03:7c:39:ca:94:49:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:79:43:C6:37:55:11:4D:6C:F6:FF:A4:80:6A:BF:3B:0E:57:69:8B
X509v3 Authority Key Identifier:
keyid:B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ec:69:4a:66:60:a2:bb:3d:c9:5b:bd:0c:a3:4b:84:6c:46:
b0:0a:a0:a9:f5:7b:2f:a5:bc:c8:95:65:7f:18:47:2e:65:21:
fa:92:02:30:8e:28:62:6f:f8:28:36:e5:e4:d4:f5:cd:fc:f2:
fd:69:ea:d5:9c:f1:d6:ef:bc:6c:90:23:2b:44:fa:cd:4e:a1:
2a:6f:5a:54:15:ef:e4:65:14:57:a4:de:26:a1:06:f2:c2:95:
79:d1:ae:46:ec:4b:38:70:8e:82:3a:c1:99:58:86:b5:c9:b1:
c8:01:d7:86:8b:81:e2:e9:e0:2f:d8:69:1c:97:d3:7b:2b:91:
10:85:cc:b9:af:6c:ab:ee:c4:00:b2:af:d0:38:cd:35:17:2a:
27:ea:64:7d:ac:4a:76:1b:5d:78:f2:a5:2a:e3:ad:b1:4c:e3:
88:54:e5:fd:ef:78:18:42:10:83:0e:b2:a7:30:43:2c:9b:54:
38:0e:10:81:b7:13:cb:38:c3:f5:01:52:ed:5b:b6:d4:1a:92:
1f:43:ac:5e:b9:3e:55:60:d6:78:11:e0:bb:89:ab:63:e8:05:
92:47:0c:01:e5:58:21:38:65:00:3f:c8:c7:1d:6f:15:b1:ef:
8d:2a:e2:a1:48:d9:28:bd:28:1b:64:ba:37:8f:58:07:89:af:
f0:a8:24:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:43 2025 by rpki-client