Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
File: t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft (raw, json)
Hash identifier: fYsLRzFSvCD0TlJbyKbmjD4Mez4NvLlmYLmzBQV11VQ=
Subject key identifier: 25:02:2F:EB:9D:F6:8D:12:35:D4:7E:22:FE:06:B1:6C:38:C6:F9:4E
Authority key identifier: B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
Certificate issuer: /CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Certificate serial: 019655389CF91F7FB6733B30D45E1A1F5997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
Manifest number: 08A3
Signing time: Sun 20 Apr 2025 22:01:35 +0000
Manifest this update: Sun 20 Apr 2025 22:01:35 +0000
Manifest next update: Mon 21 Apr 2025 22:01:35 +0000
Files and hashes: 1: t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl (hash: ePPDz8peTMG9t7XYvOdfjGH4/qWrTQASwGACg12jzJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:9c:f9:1f:7f:b6:73:3b:30:d4:5e:1a:1f:59:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b789a30cd6f6c18205fd9aca14adb42bf0dc92ec
Validity
Not Before: Apr 20 22:01:35 2025 GMT
Not After : Apr 21 22:01:35 2025 GMT
Subject: CN=25022feb9df68d1235d47e22fe06b16c38c6f94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:9b:79:d8:20:6e:3b:a7:ee:fb:c3:bb:cc:
50:6e:4c:41:7b:74:19:09:4d:a1:cc:fb:49:a9:79:
07:90:d0:1a:76:79:e0:3b:11:bc:92:45:90:fb:39:
81:0f:03:b4:7e:21:5a:95:ab:ac:49:27:45:fe:93:
7d:3a:e4:89:99:a2:33:d9:0e:a8:6b:cd:d5:f1:b1:
4a:9e:0f:f0:d7:c9:a7:74:57:b5:3c:07:2c:82:c0:
ff:0b:43:b6:0e:8b:73:db:a1:a8:cb:65:84:a9:c9:
59:3a:e9:44:d9:78:36:8f:81:1a:de:14:c8:80:86:
7c:83:92:dc:0c:32:25:34:22:a1:50:cf:5d:e7:26:
4a:c9:fd:01:32:34:bb:36:81:49:bd:8f:b1:68:4b:
80:fa:f5:cf:d7:2e:8c:e5:50:38:90:71:85:be:f8:
32:5e:9b:5e:c8:ba:c0:d5:3d:7e:e4:64:7e:d7:da:
d1:f1:53:78:0f:e6:8c:38:c4:78:b5:1b:2c:ed:7d:
87:cf:d1:0d:22:49:04:5a:ef:c9:cd:57:a3:84:d9:
e6:61:07:6f:15:eb:12:a5:3a:b2:98:6a:cf:9e:12:
6f:07:76:08:c2:13:b7:38:e3:d7:bc:b0:5b:62:b0:
69:fb:1c:e4:34:0f:40:79:12:9b:81:c2:51:94:1f:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:02:2F:EB:9D:F6:8D:12:35:D4:7E:22:FE:06:B1:6C:38:C6:F9:4E
X509v3 Authority Key Identifier:
keyid:B7:89:A3:0C:D6:F6:C1:82:05:FD:9A:CA:14:AD:B4:2B:F0:DC:92:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4mjDNb2wYIF_ZrKFK20K_Dckuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b2b311-2e32-4b0d-b86c-67135d316e8c/1/t4mjDNb2wYIF_ZrKFK20K_Dckuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:67:fd:f6:be:e2:f6:ca:d3:b3:69:c3:79:97:70:cb:1a:62:
b9:3b:7f:c9:82:ff:92:2c:51:2d:dd:23:07:1a:0e:18:38:df:
59:5c:64:cb:c3:6c:ce:86:67:a5:01:8a:20:8c:1b:c3:4e:b4:
3c:27:ff:e6:fe:00:5f:4b:f5:8d:af:b2:52:76:b6:0d:61:f7:
4f:61:18:2d:99:9f:31:2d:16:a5:88:4d:9e:6c:f2:cb:db:ef:
89:79:81:4f:c0:66:04:f4:34:75:88:7b:c6:d1:7c:bc:e8:4e:
5c:5c:63:04:df:d2:e1:fa:31:2c:d8:09:83:0f:96:13:60:c0:
2a:ab:80:37:76:e7:06:d3:af:60:f5:5a:27:b8:df:86:09:68:
a6:40:59:46:55:68:6e:6c:37:58:2b:d5:81:0c:b7:da:3d:fe:
a8:a4:08:2f:ed:0f:31:1b:6b:7a:91:7d:43:f6:f4:e5:26:66:
bd:9f:c1:1d:7e:11:dc:73:cf:54:1f:3c:4c:2d:e8:1f:f4:5e:
1d:a2:b0:df:19:5f:98:94:3e:52:d2:fd:dd:66:d3:8b:58:2b:
75:ef:b3:f1:4d:32:08:77:07:c7:b8:88:15:70:17:db:7d:a9:
f2:89:ff:90:8a:25:ee:28:32:04:72:41:db:be:c8:1c:e8:27:
c8:39:f9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:58 2025 by rpki-client