
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier: 0TnllIHaMrzA9m9SMROp1HCHbCGmM5q7FfShOcNMWvc=
Subject key identifier: 33:42:54:9A:D2:94:21:86:F3:48:AD:AA:E8:13:3F:C0:C7:CA:E6:6E
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019643D5F3AF332D2FDF4B78144A61272DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number: 0DB0
Signing time: Thu 17 Apr 2025 13:00:16 +0000
Manifest this update: Thu 17 Apr 2025 13:00:16 +0000
Manifest next update: Fri 18 Apr 2025 13:00:16 +0000
Files and hashes: 1: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: SAdxFlsQfzskyD1pFBTxsuEzUAxEJVhVrabYTP28R7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d5:f3:af:33:2d:2f:df:4b:78:14:4a:61:27:2d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Apr 17 13:00:16 2025 GMT
Not After : Apr 18 13:00:16 2025 GMT
Subject: CN=3342549ad2942186f348adaae8133fc0c7cae66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:ea:cd:68:9e:db:33:20:72:0b:dc:6d:f8:
d2:0d:9f:21:d7:75:1c:15:22:f6:89:e7:97:51:e2:
f9:a5:07:49:ed:db:be:8e:cd:5a:a7:c4:09:48:dc:
2b:b8:e9:c6:f4:de:cb:45:d0:1a:5f:21:3f:ec:99:
41:5a:19:2c:7c:59:d5:c9:10:77:bc:c6:d5:19:c9:
8f:b4:a9:e6:cc:90:a8:26:dd:9f:b6:99:c9:45:b5:
87:ff:e3:d6:f3:bd:9c:43:ab:70:7c:76:34:50:86:
e3:74:ef:43:45:06:8a:57:e5:03:33:5e:59:b6:0f:
3c:0c:2d:22:db:55:f8:1e:5a:ae:96:dc:e7:8f:2f:
ac:09:7c:c6:43:18:b8:b9:bb:e4:7c:dd:01:52:06:
3f:e1:89:56:47:85:06:08:94:67:32:8f:48:29:9a:
bb:45:0a:8b:93:47:71:d9:a0:cb:65:77:42:87:b2:
e3:15:7d:c8:9f:1e:0e:54:e6:4d:36:97:41:21:59:
ed:1f:50:e4:5f:fc:fb:9e:97:5f:b9:ca:08:c9:5f:
55:5a:2d:da:d2:ed:ae:78:50:12:29:5e:4c:32:2b:
99:16:3c:6e:cc:c0:79:62:c8:c1:9d:ab:84:6e:e4:
4b:e4:21:07:cf:8b:5a:c3:69:a4:f4:80:c1:50:3d:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:42:54:9A:D2:94:21:86:F3:48:AD:AA:E8:13:3F:C0:C7:CA:E6:6E
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:42:10:9b:75:d2:4a:59:fc:9e:ef:86:08:f0:c2:fe:d8:a9:
69:a5:c7:7e:54:31:54:e6:d4:96:59:0d:ec:f3:a4:77:1b:6e:
9d:cc:e4:1f:fd:8d:4b:44:b4:bd:96:38:4e:a4:00:e1:95:58:
f4:60:3f:10:88:bb:40:c6:66:ae:e5:30:50:29:5d:85:64:f6:
f9:f2:0f:4c:79:84:2d:55:fc:4b:f4:4b:0e:62:e8:f6:8e:02:
af:fb:e4:3a:d3:3a:31:f8:72:72:45:38:fe:e0:47:bc:0a:00:
73:4e:3b:ca:6d:3f:dc:f9:1f:5a:2a:24:48:65:80:ea:86:94:
e4:7d:c1:80:44:5d:6c:61:99:b6:38:52:cb:b5:58:11:87:d3:
e1:cc:ad:8b:8a:13:f6:eb:f0:db:4e:6d:20:e7:6c:8a:49:c4:
5b:b3:55:fc:dc:bf:d6:07:ad:46:08:72:47:60:c9:4e:31:fb:
2f:f4:cf:f4:11:fe:8f:89:89:a3:ee:1b:8d:e7:63:dd:99:14:
60:06:74:e0:1e:d2:f3:64:55:cb:93:25:6a:65:12:3d:12:a7:
55:eb:96:85:a2:ee:c5:70:ad:63:d5:07:7a:d9:5b:86:8f:7a:
6a:00:25:e1:8d:7a:9c:a8:3d:e5:fa:7a:58:d8:04:b7:0f:59:
1a:c8:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:58:41 2025 by rpki-client