Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier: HuCNaMuiFIjUHKiWVn6rqqWy+tSMNwC54gDKIczfEEc=
Subject key identifier: A4:3B:E3:D6:B6:22:0E:28:04:75:9C:63:6A:DB:85:C5:F0:0B:7B:E6
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial: 01963E0BCFF43982A1B2A8091A15E93AD1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number: 0B4F
Signing time: Wed 16 Apr 2025 10:01:23 +0000
Manifest this update: Wed 16 Apr 2025 10:01:23 +0000
Manifest next update: Thu 17 Apr 2025 10:01:23 +0000
Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: Vo6aNudSJFvYKtH/N3oPqPS5uZBr5rPZ+tQ6OiQKL0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:cf:f4:39:82:a1:b2:a8:09:1a:15:e9:3a:d1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Validity
Not Before: Apr 16 10:01:23 2025 GMT
Not After : Apr 17 10:01:23 2025 GMT
Subject: CN=a43be3d6b6220e2804759c636adb85c5f00b7be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:a0:f1:a9:c5:83:a0:70:88:1c:7c:2f:eb:
7d:8c:d8:31:bf:95:a8:84:98:b6:c1:7f:5b:5a:d8:
7d:0d:7c:af:be:7f:60:30:20:75:cb:f8:7b:b7:4b:
b1:df:c5:86:70:4a:0e:2d:2a:b2:da:d6:77:4e:61:
63:02:76:7d:4b:df:9d:19:ff:8d:60:9e:d9:84:0b:
61:34:da:bd:7d:18:76:3c:e4:8a:4f:ec:a5:77:d5:
84:32:25:3a:9a:32:23:83:79:51:11:09:3a:b2:6e:
bf:63:4c:85:5d:f7:37:b8:16:50:a3:d0:00:06:64:
3b:6d:10:78:89:57:c6:78:f2:af:00:8f:21:e1:d8:
29:de:a2:b2:4d:5d:03:ae:93:7e:5d:eb:63:ff:f2:
8c:cd:cb:2e:83:4c:af:5d:08:99:ce:9f:05:60:71:
ca:bb:f6:22:12:75:f1:e8:f4:f7:01:a3:d9:d2:43:
90:04:bf:bf:cf:e2:41:63:a0:91:c7:c9:48:95:a4:
3d:d0:2f:42:6c:08:85:95:28:bb:d2:b2:ed:79:56:
1f:90:cd:4a:20:42:16:71:a5:e3:4a:c6:2d:47:8c:
39:2c:83:f6:1d:89:21:6b:67:8d:6c:6e:9b:b0:01:
cb:ac:1c:dc:16:9b:ee:02:49:c1:fc:fc:eb:61:45:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3B:E3:D6:B6:22:0E:28:04:75:9C:63:6A:DB:85:C5:F0:0B:7B:E6
X509v3 Authority Key Identifier:
keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:36:33:34:58:8f:90:3b:f7:14:72:c3:87:2d:03:a1:27:
91:1d:17:6a:bc:b5:06:c1:b0:1f:8f:0e:9c:a8:bf:af:9e:57:
5e:31:3d:69:94:78:be:7f:bb:e2:51:c4:6e:cf:67:87:01:4b:
c2:96:bd:f7:e2:fa:a1:84:98:7c:83:ea:04:8a:5e:2f:0c:5c:
c9:21:11:d9:23:55:5c:45:af:2a:e2:03:84:fd:98:c2:f8:86:
d8:d6:40:95:e0:07:9e:e9:91:56:8f:99:4e:e0:ba:56:aa:46:
94:53:09:91:c2:2a:91:6e:0f:33:96:23:de:71:11:fa:11:27:
90:84:76:29:43:a3:a5:45:38:0b:8e:c5:b9:c2:94:69:40:da:
16:77:81:55:7f:d9:16:68:d0:20:4d:27:b9:c6:6c:36:70:7f:
e9:a4:2c:c3:d2:84:29:f5:2f:b4:f1:1a:a9:77:13:ae:60:60:
b2:e3:00:af:e6:42:15:59:45:48:da:b7:a8:a6:38:18:df:05:
61:bd:b8:af:a7:d9:02:cf:95:36:a1:39:7b:db:56:fd:ca:71:
e0:e1:30:df:70:4e:e6:ee:a4:16:3a:ce:75:84:bf:eb:13:00:
36:9e:20:72:ca:30:43:61:94:ea:35:56:da:5d:3c:94:31:66:
7c:73:fe:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:41:28 2025 by rpki-client