Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
File: TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft (raw, json)
Hash identifier: M1loWsgY4x9gvDG4gHE0M7FZFavTIfWf2iekXg14XTk=
Subject key identifier: E3:2C:27:33:85:25:33:6E:C4:65:35:B7:8E:DA:1A:57:B6:0E:EB:DB
Authority key identifier: 4D:0F:25:7F:33:9C:FB:9E:27:54:B6:CC:24:36:4F:0F:12:90:58:DB
Certificate issuer: /CN=4d0f257f339cfb9e2754b6cc24364f0f129058db
Certificate serial: 019655A5A99DA586F8C92E5B70018B62501A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
Manifest number: 1337
Signing time: Mon 21 Apr 2025 00:00:42 +0000
Manifest this update: Mon 21 Apr 2025 00:00:42 +0000
Manifest next update: Tue 22 Apr 2025 00:00:42 +0000
Files and hashes: 1: TQ8lfzOc-54nVLbMJDZPDxKQWNs.crl (hash: DGvvhmt+AiuxRPMI5cOAKhctVM6CDHtcNgt8UcXEV2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:a9:9d:a5:86:f8:c9:2e:5b:70:01:8b:62:50:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0f257f339cfb9e2754b6cc24364f0f129058db
Validity
Not Before: Apr 21 00:00:42 2025 GMT
Not After : Apr 22 00:00:42 2025 GMT
Subject: CN=e32c27338525336ec46535b78eda1a57b60eebdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:69:48:0c:74:cf:25:c8:ac:28:21:7f:27:
08:07:f1:4c:d0:0a:c0:e6:72:21:b2:77:4a:d5:fa:
72:aa:62:6a:5a:4e:9d:30:a6:ed:8c:82:bb:e2:1c:
f9:71:66:03:03:83:e6:5d:95:94:97:d7:20:8b:cf:
02:9d:0e:a0:e3:a3:55:7b:ee:f0:f0:30:28:47:b5:
f4:41:3b:7c:4b:c8:a2:88:9c:e8:11:4f:7c:52:ff:
5c:c0:d1:4a:b5:4d:04:4f:4e:07:f3:a5:02:8c:e2:
37:12:35:8a:5a:27:54:9e:34:89:1b:98:0a:ae:c5:
0e:53:af:30:41:aa:11:cc:74:28:61:57:a9:90:6d:
ac:e2:49:36:6b:97:d6:54:aa:a1:04:7e:ee:c8:d6:
af:8e:e5:00:88:76:bb:54:fa:18:8f:f0:8b:4c:8f:
1b:5e:ad:17:91:43:43:ef:eb:5b:07:81:5f:f0:cd:
28:07:33:ca:7d:04:f1:fc:9d:df:90:f6:17:9f:a8:
46:dd:7f:b0:7f:95:04:5d:d2:28:5d:9a:64:bd:94:
c8:e7:0b:a0:57:e1:18:78:4e:ee:6b:47:11:a7:7a:
6f:cc:42:4c:6f:52:50:e9:a6:6d:b9:1c:50:70:d4:
9c:99:50:14:e8:95:5c:76:31:80:fe:b8:7d:54:8d:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2C:27:33:85:25:33:6E:C4:65:35:B7:8E:DA:1A:57:B6:0E:EB:DB
X509v3 Authority Key Identifier:
keyid:4D:0F:25:7F:33:9C:FB:9E:27:54:B6:CC:24:36:4F:0F:12:90:58:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8a:f6:00:dd:b9:50:d0:e3:0f:59:aa:a8:6b:ea:a2:25:3f:
f0:0f:8e:fe:79:96:a2:27:fe:03:09:76:6b:e7:75:ef:13:14:
ce:d7:4a:f2:42:b0:5a:26:91:c0:eb:18:54:1e:bb:51:4b:93:
de:1e:d6:a6:71:34:d9:b5:35:59:ff:4b:76:b0:9a:01:8d:1c:
f9:53:45:4f:13:fa:35:a4:45:4a:38:fb:72:59:2d:3e:f3:e3:
40:43:2c:9b:4f:e7:ae:76:f2:41:6f:3e:64:61:1f:9f:aa:c1:
fd:a3:07:aa:d6:90:bf:c7:7b:2f:23:7d:b1:c3:b9:8a:d5:c2:
1f:22:a1:de:e0:fc:42:3d:b2:99:27:86:44:f1:4f:f2:12:7c:
6d:bb:c1:22:70:11:ba:cb:5c:f5:7c:89:60:68:02:d6:f5:ac:
1a:69:eb:a1:b3:2c:c0:99:ec:c9:18:dc:bd:2f:f4:02:35:ce:
a4:22:c9:ed:f3:d4:fa:11:50:be:ff:48:77:15:97:1b:b0:c4:
61:4e:cd:8d:96:b5:77:95:1d:8b:24:31:5e:18:fa:3c:76:be:
2a:10:e8:01:97:86:93:ca:93:9d:9b:d6:ac:cc:bd:7c:09:ed:
64:ff:cf:ff:67:35:78:b1:45:33:e7:f2:f6:9f:0e:fb:3c:75:
e0:2b:17:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:14 2025 by rpki-client