Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: q7kdAnmng0PRY14IIBOaHMnZgM/hhGotS7q7+VGPqoA=
Subject key identifier: EB:C9:44:95:06:63:A3:8E:95:4F:A4:CE:A6:59:94:62:FC:B5:C8:A7
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 019655379F2CE6DE2AAC0F1E91333282E286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 13FE
Signing time: Sun 20 Apr 2025 22:00:30 +0000
Manifest this update: Sun 20 Apr 2025 22:00:30 +0000
Manifest next update: Mon 21 Apr 2025 22:00:30 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: i4pULiyJ6h+J5wLVNx7LiB29iB8gkAXu3U4W0EC7rts=)
2: shBm13sVD-3FD9e1R6_cr96dhfU.roa (hash: n/xarPDtIVC1p+Buc2MZvYZnuxYBvdgfF2U0DRag658=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:9f:2c:e6:de:2a:ac:0f:1e:91:33:32:82:e2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Apr 20 22:00:30 2025 GMT
Not After : Apr 21 22:00:30 2025 GMT
Subject: CN=ebc944950663a38e954fa4cea6599462fcb5c8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:6a:33:43:26:4b:82:82:cd:d8:1a:90:9e:
2c:50:94:bf:37:4d:11:92:51:9a:a6:2e:71:fd:7d:
29:55:37:75:e1:15:c2:62:82:0d:76:fa:64:e8:92:
46:fa:60:c3:39:c7:d2:90:2d:32:b2:1a:99:a5:21:
61:9a:3b:9a:2c:aa:3c:5b:59:3c:56:84:5e:b8:62:
2e:2c:b4:7b:3b:ad:03:c5:c4:3b:79:bd:da:9e:35:
1b:ec:17:68:d6:34:c9:f0:1e:18:02:31:10:0d:04:
75:60:ec:89:fc:f9:03:d2:c0:b7:78:d8:91:5f:c6:
e5:4b:76:46:44:2b:da:2d:8f:48:cb:5b:2d:e6:fa:
fa:7f:51:0e:7c:9e:b4:be:aa:4a:64:80:eb:02:38:
d4:85:41:85:97:d1:c2:be:71:c6:1e:d9:8f:c0:5a:
c3:bf:35:b9:f6:59:09:93:79:f6:d5:fe:b3:80:86:
f1:11:83:08:c1:51:35:ca:cb:40:e2:3c:d2:89:27:
a2:bd:c4:e8:15:04:b4:a6:38:84:50:dc:54:c1:c6:
b5:27:3b:d8:46:ad:ff:0a:77:59:51:56:fe:91:4b:
74:bf:a4:eb:e8:8d:5b:df:93:79:30:09:d6:d3:4c:
10:2b:53:17:cc:2d:73:d1:f6:8f:10:4c:c2:ca:f5:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C9:44:95:06:63:A3:8E:95:4F:A4:CE:A6:59:94:62:FC:B5:C8:A7
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a5:3d:e2:37:34:16:92:4a:ee:d6:9c:07:bb:71:70:f2:18:
5f:bd:96:dd:4a:1a:c2:59:aa:d8:c4:b8:4e:61:74:d3:07:9b:
75:1e:f1:02:9c:88:c1:d2:e5:c9:ac:e8:6b:dd:c3:e2:16:c9:
6b:d2:fb:46:37:96:4f:f4:6a:09:30:c9:78:04:de:b5:7b:4e:
6a:9f:a8:c4:de:7d:e0:6a:a6:f8:b9:9e:97:78:09:15:db:2c:
f1:ac:c9:84:a7:a0:52:c5:0f:dd:68:e8:8a:e8:d3:c5:cb:d6:
94:c2:c3:e6:46:f5:f3:26:4b:76:12:7b:5f:ae:6e:ee:4c:b2:
f3:e5:57:a2:d6:3a:43:ca:46:1b:f9:6b:29:27:2c:86:fa:d9:
36:5e:b4:df:ad:c9:43:55:43:a4:a7:a0:1e:72:30:2a:a2:89:
c6:3c:0c:af:9b:f5:90:ac:ae:11:f4:46:01:35:24:69:37:03:
c8:37:27:7d:08:bd:8e:38:69:7c:48:96:40:c6:32:cb:fe:56:
ce:95:c4:9a:e1:a1:a6:b9:5b:b8:30:7b:0c:53:64:1b:47:a5:
c7:ce:9c:f4:4d:b5:be:fa:de:71:12:e3:63:3a:5e:d8:cf:f5:
73:5f:36:96:2c:33:50:dc:d6:9d:87:45:d2:cc:ce:97:18:ab:
da:d3:5d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:00:08 2025 by rpki-client