Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: 5wcM/6zfDt3s46JxsE+ZEnjX2aApAt2B121ywDw8pDg=
Subject key identifier: EA:A0:13:CA:87:A8:CA:56:F5:4F:CD:A1:46:46:98:63:D2:DC:9C:E5
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 01965801B7ED106C7DD570EEC6BB83B3E709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 14FB
Signing time: Mon 21 Apr 2025 11:00:29 +0000
Manifest this update: Mon 21 Apr 2025 11:00:29 +0000
Manifest next update: Tue 22 Apr 2025 11:00:29 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: ZagUBrk+V4DRoAvTM/uVaj+9fVvxMmM9lKaCc96IS9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:b7:ed:10:6c:7d:d5:70:ee:c6:bb:83:b3:e7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Apr 21 11:00:29 2025 GMT
Not After : Apr 22 11:00:29 2025 GMT
Subject: CN=eaa013ca87a8ca56f54fcda146469863d2dc9ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:17:4f:a9:d4:82:47:09:b9:11:9f:94:8d:
2b:04:c7:8a:af:16:06:97:98:e5:75:e9:c0:8d:0b:
cf:db:59:43:ea:42:20:f5:17:28:3c:8a:d3:5f:4a:
ce:e2:1e:5d:de:52:4b:5a:eb:5d:cf:45:04:0d:30:
f4:a8:0e:db:48:90:e3:a6:f5:28:ec:91:09:7f:e0:
ea:6e:0a:cb:38:fd:ba:40:e8:c9:d4:2e:6a:b3:25:
df:1c:de:77:e1:79:39:30:5c:2d:29:a8:0b:b8:ad:
97:90:f4:f6:f8:77:54:ee:03:be:e4:14:a7:d8:3f:
85:d6:ac:d1:02:77:0f:b7:eb:8b:32:a9:fc:37:8c:
71:69:61:c4:3e:6a:46:a6:d9:74:12:07:e9:3d:ef:
ac:05:58:4f:db:48:d2:31:18:af:a8:65:82:c5:5f:
0b:28:7d:2a:b8:d0:8a:42:bf:27:b6:d4:d8:f3:2b:
81:58:a6:73:a7:d0:4c:dd:0b:33:25:e7:1d:44:3a:
21:a3:52:de:67:cf:41:e8:b6:c9:2d:b9:a5:4d:8d:
1c:c0:f6:da:ca:5b:4b:31:bb:4d:be:46:40:66:da:
3a:42:ef:19:90:0c:0d:52:03:7c:40:5d:9c:e5:84:
25:2d:81:54:8c:32:7e:88:25:06:c6:7d:91:1c:13:
f4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:13:CA:87:A8:CA:56:F5:4F:CD:A1:46:46:98:63:D2:DC:9C:E5
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e9:24:63:27:e6:15:92:f1:f6:68:88:33:da:b9:33:41:93:
23:d8:34:0a:84:07:55:ed:d0:38:08:d4:bc:f4:db:88:b1:54:
4f:c8:ca:85:1f:51:28:ab:a0:4f:82:9b:3c:8f:50:3b:11:2b:
0d:95:48:35:71:94:12:bb:33:88:93:aa:2a:6f:46:87:1b:80:
77:c7:d5:00:c1:9e:30:90:80:97:a9:1c:8b:5d:28:62:b1:94:
7f:61:cd:00:17:ee:c1:7a:e6:03:09:85:46:d6:84:c9:75:ca:
86:e2:6a:16:64:d5:db:0d:9b:af:1a:a7:a2:b6:4b:02:ba:e9:
99:d9:d2:72:bd:47:4c:39:07:85:0b:23:b0:7c:ba:98:2f:af:
99:ca:bb:94:0c:43:30:3a:ee:a5:a2:b9:f6:59:4b:2c:11:e0:
25:e4:80:26:a5:60:8e:39:56:0a:36:31:21:c4:32:b4:84:99:
0b:47:22:65:bc:c1:0f:3b:2c:ab:11:e0:64:5f:2d:e4:39:d6:
0f:be:79:e0:97:79:23:04:54:08:85:12:ff:dd:a0:e7:0b:b2:
c8:3a:4c:b1:23:77:6a:25:e9:33:75:21:37:aa:92:c5:5a:fb:
b7:d8:0d:ed:b9:1d:db:e4:e9:8c:80:40:c4:26:99:44:92:95:
94:dc:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:02 2025 by rpki-client