Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File: TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier: zEu+JpESzU0pLlemPgO8qN1w8vD/j9hpMLzp6NjQlUM=
Subject key identifier: 21:17:3B:80:DA:8D:2A:73:D9:61:63:A0:A8:DE:0C:58:EA:65:76:82
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer: /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial: 0196579421EA56F763CF2D7F9F782AC8D2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 09:00:47 +0000
Manifest this update: Mon 21 Apr 2025 09:00:47 +0000
Manifest next update: Tue 22 Apr 2025 09:00:47 +0000
Files and hashes: 1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: BCBzUvMja8iNTaiNTLpk5fVi4J+ya47iI6h+lhIaRhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:21:ea:56:f7:63:cf:2d:7f:9f:78:2a:c8:d2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Validity
Not Before: Apr 21 09:00:47 2025 GMT
Not After : Apr 22 09:00:47 2025 GMT
Subject: CN=21173b80da8d2a73d96163a0a8de0c58ea657682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:ea:73:5c:80:00:74:85:5a:ce:ec:08:8b:
80:fc:28:a8:e2:66:63:ed:94:9b:df:fc:a3:55:f1:
1d:eb:aa:13:a8:95:03:2e:64:64:a5:2f:3c:db:ef:
c3:8d:96:e2:bc:12:e4:c2:ec:db:d2:65:ee:a8:d0:
cc:7a:f9:9e:69:b3:b6:68:8c:1a:02:5a:dc:60:13:
85:fc:a4:23:df:90:2c:56:8e:28:c5:ec:7f:0a:ec:
92:19:d0:fe:4d:e0:55:06:b2:55:86:7b:0a:d6:15:
39:33:a2:59:3b:36:de:c3:a4:a7:97:99:46:8d:8b:
1c:63:7b:89:b2:c1:07:b6:4b:b7:7c:de:fb:a2:06:
f6:3c:71:4d:a1:68:5d:a0:19:70:d3:48:5b:72:de:
f6:7a:f1:b6:ae:12:ed:55:3b:fb:0a:e7:35:df:ae:
ac:b6:a4:e0:2c:03:4b:7e:2d:c7:51:b1:2f:a8:1c:
aa:3f:2d:09:89:1f:06:f2:da:ad:f2:64:be:d4:79:
40:ff:5e:e9:41:09:a7:5c:20:a8:09:53:50:8a:a3:
2e:54:ad:f4:78:bf:fb:ff:55:3a:9c:3a:85:5c:ac:
c0:e8:b5:a4:4b:91:6c:17:fd:9e:e3:c5:a9:7c:ac:
97:ea:61:a9:0d:38:a1:92:77:c4:46:c1:c4:2d:d0:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:3B:80:DA:8D:2A:73:D9:61:63:A0:A8:DE:0C:58:EA:65:76:82
X509v3 Authority Key Identifier:
keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:63:a1:e5:20:9c:e1:ae:8b:1b:a0:f8:92:6d:4b:7b:f0:5f:
95:d0:30:d7:43:97:61:70:c6:5f:e5:91:65:00:49:9a:20:c8:
16:f3:24:9a:73:31:66:32:57:a3:f6:5e:3f:b8:c2:d1:0c:13:
42:d6:d8:99:70:e3:ed:22:81:af:0f:33:0e:a3:2d:9b:7f:f8:
69:70:d3:28:ae:22:af:45:7d:e1:54:65:6b:a5:4b:0e:1e:55:
71:82:52:ba:ca:c4:b1:a8:c7:16:9e:31:8d:e7:c0:89:66:bf:
43:1b:28:15:75:8c:ab:99:95:db:c6:5d:65:1a:59:6c:cf:4a:
01:6f:1d:61:f0:2e:1f:5a:27:19:12:00:4d:8d:d0:2f:ec:41:
c4:ed:7f:a1:9b:06:9d:7d:b0:2a:ee:53:a5:5b:df:87:53:37:
a4:8d:fe:35:d9:ed:69:15:bc:46:5f:72:52:0e:4c:c4:bd:e6:
e0:45:76:42:a0:72:26:4c:99:58:de:5b:93:b0:f1:b9:a8:25:
a9:6d:5d:98:77:16:3d:1b:fe:cb:f0:e6:5b:23:75:0c:47:65:
06:a9:15:08:af:56:d5:59:24:34:f2:a9:7f:60:0a:d8:e7:ac:
ff:1d:9a:15:3b:5d:cb:48:bb:f9:9e:12:d3:e2:f2:f6:e6:e5:
4d:c7:3d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:04:51 2025 by rpki-client