Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: RXI9SpeIckwLVeghd114rO079my91FmNy9I4jD0+2Fw=
Subject key identifier: 7E:FA:13:3B:B9:38:A2:B2:3D:9D:8D:2A:5B:56:12:0B:BC:BC:67:4A
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 01958F98131F986B6DDD9B27F8793E8EBCF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 0967
Signing time: Thu 13 Mar 2025 13:01:02 +0000
Manifest this update: Thu 13 Mar 2025 13:01:02 +0000
Manifest next update: Fri 14 Mar 2025 13:01:02 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: 85OEytyA4CzHPp6DhD5HWF32peg7z1L3N0WRM01pPLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:13:1f:98:6b:6d:dd:9b:27:f8:79:3e:8e:bc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Mar 13 13:01:02 2025 GMT
Not After : Mar 14 13:01:02 2025 GMT
Subject: CN=7efa133bb938a2b23d9d8d2a5b56120bbcbc674a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:a5:b4:d2:b5:ff:94:5f:0d:71:f6:cc:0f:
c6:03:3f:5a:cc:97:f4:f6:3a:55:14:05:b2:3d:4e:
28:39:cd:02:e1:13:24:bb:aa:f1:07:af:c7:8d:e7:
9b:41:58:30:4c:c0:0f:36:49:03:bb:b6:99:cf:bf:
0f:86:38:38:58:22:7c:dd:17:65:63:d9:dd:4c:f7:
17:ab:0b:00:31:52:9b:3d:01:84:ad:d2:eb:3f:75:
bc:a7:c0:50:74:70:d4:e9:51:5f:1e:78:ff:8e:59:
f8:af:af:7d:3a:28:99:55:db:cf:07:3d:0e:39:25:
58:0d:fa:cb:7b:e7:c7:89:6b:55:96:db:8b:09:d6:
e8:88:19:b1:42:58:a0:c2:34:c0:3f:ef:19:52:98:
d0:6a:c6:fb:12:83:c2:53:97:1b:62:55:de:06:87:
9d:0a:7c:14:9d:f4:b4:96:45:ac:0d:a5:85:d6:90:
01:a2:79:3b:bf:c7:b4:1a:9f:32:4f:de:97:9f:0d:
aa:dc:aa:67:5f:3d:44:e2:20:60:25:42:85:5c:16:
78:2f:65:35:51:69:90:fd:44:46:5f:b1:8b:db:f9:
0a:c9:ee:3d:73:cc:29:85:29:d6:74:9b:1a:88:4a:
32:8d:31:b8:54:61:53:cc:00:b4:be:67:33:d6:63:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FA:13:3B:B9:38:A2:B2:3D:9D:8D:2A:5B:56:12:0B:BC:BC:67:4A
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:77:bb:db:a3:fd:21:a2:9f:1a:30:d2:b0:3a:5f:70:81:86:
eb:03:8d:8a:0f:ed:7b:7c:93:b5:a7:af:ab:9b:61:74:1e:c2:
92:e3:2e:d1:d5:57:b1:48:ea:e0:7a:84:ca:ed:f6:eb:44:f4:
32:a8:00:cf:57:47:a2:98:1a:69:dd:70:1e:8d:c1:e5:03:97:
59:09:69:a6:70:5f:af:e7:32:27:3d:2c:56:53:cd:58:47:05:
36:70:e6:64:de:43:ff:01:6e:73:51:1a:c1:21:6b:b4:3c:79:
82:77:8b:fa:32:b8:58:8a:bb:21:5f:f3:75:9b:2d:4e:c9:f6:
ae:34:b0:47:e8:a1:70:f6:ff:75:98:5a:f7:7b:3f:7c:c3:55:
d7:39:47:aa:86:44:aa:a0:df:f3:1a:6d:56:38:8f:1d:a2:38:
3b:d0:bf:5e:96:b6:b5:ae:63:fd:5e:0c:10:4d:fe:98:f5:37:
40:c4:a6:e0:14:e1:2d:c5:63:22:73:41:dd:11:01:84:01:64:
49:35:36:12:61:4f:9a:ef:ca:20:7d:54:11:9d:5f:0b:52:d8:
ae:9d:bc:87:d2:0e:44:95:97:31:3a:7e:de:45:ee:12:87:81:
41:44:2c:7b:46:b9:79:7e:f7:bf:0f:8e:a8:87:a0:5a:4b:05:
c2:71:8b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:13 2025 by rpki-client