Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
File: v1Tb8A10WQyJE97Isc8ITY_PaTw.mft (raw, json)
Hash identifier: 4W6EJ2cYAiwu4O21S2cJaz9Z3chUkVgGefeLwKTVUYw=
Subject key identifier: 4E:3E:D9:14:98:50:B3:96:E9:BA:46:AD:6B:08:AC:EA:29:17:C6:DF
Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
Certificate issuer: /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Certificate serial: 01965424ED717855422F6768C1C567122039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
Manifest number: 0336
Signing time: Sun 20 Apr 2025 17:00:28 +0000
Manifest this update: Sun 20 Apr 2025 17:00:28 +0000
Manifest next update: Mon 21 Apr 2025 17:00:28 +0000
Files and hashes: 1: v1Tb8A10WQyJE97Isc8ITY_PaTw.crl (hash: 1TBEgd+eQLKG0sN//C/xeP73Z4NWDdblvPO4B1/au5s=)
2: wvpX23IN2w8d2-KXP6RepnCHP3g.roa (hash: hX6rM9w+qzbC1N6GJKikByFvvKJf6X+cuAHLvYTMLZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:ed:71:78:55:42:2f:67:68:c1:c5:67:12:20:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Validity
Not Before: Apr 20 17:00:28 2025 GMT
Not After : Apr 21 17:00:28 2025 GMT
Subject: CN=4e3ed9149850b396e9ba46ad6b08acea2917c6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:97:02:6e:13:bf:d5:40:74:78:97:5b:df:
f2:74:9a:0b:62:cd:e8:37:cc:2d:d0:ab:d8:9b:14:
4e:97:7a:18:77:17:f2:ff:a3:1f:3c:b4:aa:7c:95:
8a:2a:8a:28:1c:e4:fa:67:cf:89:cc:27:69:34:52:
c9:7b:0f:1c:31:0b:2e:55:09:d3:5d:90:f9:85:b5:
c0:a9:9b:64:52:e3:3d:bd:8b:c7:31:b5:6a:b6:22:
a9:99:16:8f:14:de:0a:13:d0:e1:7b:b5:96:08:6d:
d1:54:11:51:64:c8:af:41:d8:cd:b0:20:ac:0d:02:
f0:ff:f3:20:89:16:4c:97:63:23:57:18:6c:fb:f8:
dd:8f:d8:9e:18:31:38:fc:e6:86:3f:59:65:ca:89:
b2:be:04:c9:86:3a:aa:3c:22:c9:ed:9d:f6:34:3c:
b3:60:3c:b1:2e:d2:22:c0:c4:a2:61:a1:27:5b:1f:
7a:77:52:c8:66:54:5d:27:50:03:df:f3:ef:5d:8d:
2a:3f:6f:17:66:bb:d6:2b:67:19:9c:cb:0a:70:e3:
51:97:8b:04:b1:31:ac:61:b8:82:cd:d6:39:09:b6:
07:96:c5:7c:a2:d0:73:98:a0:85:75:9b:e3:81:ee:
5e:ec:e3:7c:75:f2:01:51:9f:d9:01:62:10:8c:e2:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3E:D9:14:98:50:B3:96:E9:BA:46:AD:6B:08:AC:EA:29:17:C6:DF
X509v3 Authority Key Identifier:
keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a9:98:c3:cc:0f:17:34:cd:90:33:f3:7e:cc:79:eb:75:bd:
19:92:3c:78:12:ed:4b:7e:33:72:13:fa:bd:81:56:5c:3a:11:
47:2e:e5:b0:ce:77:ea:ea:d3:30:e6:ec:1e:dc:0e:4f:28:0d:
e0:52:cf:9c:64:7e:7e:00:7c:6e:34:4f:b4:6b:37:c1:6b:e7:
24:06:00:3a:43:5f:fc:4b:be:94:cb:c1:23:8b:f2:42:79:18:
19:04:89:3f:f2:67:42:7d:15:cd:2f:a7:95:cd:c5:d1:65:bd:
7d:20:c7:96:c6:e7:06:29:e4:33:1b:3e:38:34:c5:e9:00:4e:
ea:b2:01:2e:c0:b5:ee:e8:47:04:90:f0:fe:67:ad:92:a8:88:
90:d6:c4:39:e8:ea:7a:5e:57:17:99:21:09:85:c0:9e:58:09:
7e:75:35:21:fb:0b:dd:1c:ee:78:b8:8a:35:b8:43:68:2f:63:
9d:9f:95:e6:69:6d:78:9d:8a:62:3d:bd:c1:fa:85:94:28:b1:
d6:01:9f:16:99:7f:ac:96:8a:85:25:58:bf:e8:33:b3:c3:b3:
dd:b8:27:cf:5c:54:02:fd:c7:2a:b0:ce:96:78:81:14:d3:c9:
bf:c3:b2:04:84:52:62:b9:f6:3a:5c:fb:3d:30:32:83:b0:c5:
4b:72:59:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:08 2025 by rpki-client