Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
File: tt41SvltyILzXBLU9fpnUHY6tyA.mft (raw, json)
Hash identifier: rnS/mAR6/c6gtLsS74DjRGaqthHammKZvNOZWMUSNWE=
Subject key identifier: 27:6B:25:74:14:54:11:94:BD:79:80:59:22:F6:FA:08:CF:56:B1:B1
Authority key identifier: B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
Certificate issuer: /CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Certificate serial: 0196553862CCE7623BA5BCD91C5E24535973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
Manifest number: 0C24
Signing time: Sun 20 Apr 2025 22:01:20 +0000
Manifest this update: Sun 20 Apr 2025 22:01:20 +0000
Manifest next update: Mon 21 Apr 2025 22:01:20 +0000
Files and hashes: 1: tt41SvltyILzXBLU9fpnUHY6tyA.crl (hash: elVcqSF7PGZEK2FfEsDIsLUE6GHzWZU2T7p/iidDF8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:62:cc:e7:62:3b:a5:bc:d9:1c:5e:24:53:59:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6de354af96dc882f35c12d4f5fa6750763ab720
Validity
Not Before: Apr 20 22:01:20 2025 GMT
Not After : Apr 21 22:01:20 2025 GMT
Subject: CN=276b257414541194bd79805922f6fa08cf56b1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:78:4b:71:9c:90:43:86:38:b3:97:ef:4a:
b7:13:78:5f:a7:d2:a9:2a:40:dd:e1:ce:7a:74:7a:
80:b9:58:74:6e:1a:dc:87:72:9d:c2:b7:1b:6c:39:
17:cf:66:c6:86:ea:6d:28:de:14:0c:40:89:bb:17:
cc:a8:4a:17:ed:30:7a:fe:20:6b:da:e0:f5:1f:24:
b8:65:5c:58:e2:2e:e4:f0:3e:6b:ee:e8:3b:58:99:
fc:f6:76:9d:ba:7b:27:4b:3e:66:67:f1:ee:be:b4:
f7:15:19:5d:ec:8d:31:1a:25:bf:8d:d7:20:c9:fb:
2e:51:3a:3a:24:a6:72:c9:39:41:bb:b7:3c:ae:48:
fb:50:7a:4f:d4:92:ed:15:2e:c5:50:bb:06:b2:48:
af:62:aa:ca:c0:34:18:bb:d3:0d:48:bb:cc:59:cb:
38:07:d6:fe:d0:8e:37:bf:89:74:e7:0a:5c:a3:38:
48:24:1a:54:2a:e5:0e:bf:47:ee:60:63:3e:2a:73:
76:b2:1b:a8:34:2c:24:20:ba:b1:43:e1:00:48:d3:
16:1e:ad:2f:84:a6:21:d5:1e:54:62:ea:aa:75:b9:
9d:57:b5:09:9f:f1:37:11:c9:67:96:71:04:c4:f2:
42:38:9a:6c:31:b7:15:46:d2:a7:66:7c:38:68:b2:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6B:25:74:14:54:11:94:BD:79:80:59:22:F6:FA:08:CF:56:B1:B1
X509v3 Authority Key Identifier:
keyid:B6:DE:35:4A:F9:6D:C8:82:F3:5C:12:D4:F5:FA:67:50:76:3A:B7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tt41SvltyILzXBLU9fpnUHY6tyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6e000e-e755-47e6-99a8-354871a85c7a/1/tt41SvltyILzXBLU9fpnUHY6tyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f3:f3:e9:63:6b:7c:d5:d2:02:dc:fb:c3:92:66:66:d7:d8:
ea:23:59:4e:95:2e:52:27:8e:0a:5e:38:ad:b4:7e:bd:68:66:
81:0f:19:87:5f:78:76:1a:05:4c:a8:a6:d9:d2:53:9a:64:45:
46:f1:1a:2c:4e:70:19:f9:19:b5:c1:ed:09:d7:7b:b1:02:3a:
56:b6:99:02:4d:a1:28:cd:84:ef:b0:e6:12:ee:0b:a3:0b:01:
c0:6a:51:69:d7:d6:f8:73:fd:4b:f2:a0:c2:66:53:5f:08:12:
13:b8:dc:01:12:fd:ad:e7:8b:2f:9f:9b:f4:26:4a:fc:1b:31:
25:0d:18:e2:f8:bf:8a:15:f0:e1:68:49:42:4d:b0:06:dd:29:
03:32:08:74:cc:8f:d8:17:6d:3a:f2:12:0f:25:a1:3b:af:6d:
5e:c8:b5:cf:ce:35:73:ae:f7:c3:3e:a8:4e:47:a3:cd:a1:2d:
03:f0:a3:de:8e:71:6e:05:d8:2e:87:4d:66:c5:75:ba:69:d9:
75:26:a3:3e:48:31:42:74:39:60:9b:ca:31:00:82:98:96:a9:
79:95:7a:72:8f:e3:5c:62:2c:88:2f:72:2b:b2:9b:65:8f:6b:
74:22:ff:71:8d:f3:b6:c0:87:52:51:fd:ba:64:ac:5d:af:17:
e4:03:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:04 2025 by rpki-client