Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
File: tU0YlEyigIUFOR3pf6nWsrxhiZo.mft (raw, json)
Hash identifier: qg3SzseORZJ4Qj0WJrsOpUKXvLHSPq3Z4u/bb61l5Bk=
Subject key identifier: 52:EA:A9:18:33:4D:1B:A1:A1:F5:2C:EB:E9:C6:29:3B:54:E1:A0:32
Authority key identifier: B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
Certificate issuer: /CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Certificate serial: 019643D66B5642647387F3DF22F0CE23CD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
Manifest number: 0F92
Signing time: Thu 17 Apr 2025 13:00:47 +0000
Manifest this update: Thu 17 Apr 2025 13:00:47 +0000
Manifest next update: Fri 18 Apr 2025 13:00:47 +0000
Files and hashes: 1: tU0YlEyigIUFOR3pf6nWsrxhiZo.crl (hash: /wLKQ96HYLnND5pX0EjY0VkDCCxUe+zppGSy8uw77jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:6b:56:42:64:73:87:f3:df:22:f0:ce:23:cd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Validity
Not Before: Apr 17 13:00:47 2025 GMT
Not After : Apr 18 13:00:47 2025 GMT
Subject: CN=52eaa918334d1ba1a1f52cebe9c6293b54e1a032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:99:7a:6a:cf:cb:70:1a:1c:a6:75:67:58:
7f:30:6b:df:0e:0a:b7:2d:6b:f6:27:65:eb:b0:d8:
76:c2:d0:6b:02:a8:30:bb:3e:b6:9c:38:be:dc:6f:
fe:e0:1e:26:c6:e5:15:d5:fc:3b:9a:ff:84:b2:ce:
61:c8:66:e7:3b:fe:0a:6d:ca:57:2f:50:6a:4e:b7:
7d:c7:23:59:f0:94:0d:38:f6:a4:60:ac:2a:27:c9:
31:9e:94:f7:a2:75:ad:78:42:13:c8:54:ea:cc:8e:
93:49:0b:a1:58:d1:3b:9c:43:14:f7:da:82:9d:a9:
30:b4:93:18:06:1d:c5:a8:24:4c:ed:92:22:ef:57:
a9:c9:80:6d:79:aa:22:6c:ca:3b:c8:ca:a6:d5:9a:
12:4a:9e:a5:69:7c:77:3a:69:78:14:cd:6d:55:ea:
c1:50:8c:22:19:62:ea:a8:b1:ec:b2:5d:2e:cf:6b:
7d:74:1f:c5:66:19:9f:bd:e5:c7:14:c0:e7:0f:c4:
80:06:f7:5c:da:86:ea:14:ee:40:a4:54:20:30:3c:
94:89:ca:79:48:21:05:a3:44:f4:2f:5d:d1:89:4e:
39:44:eb:c0:a0:d5:3d:5f:94:f9:c8:7d:82:64:a8:
ff:74:b9:02:87:d9:5f:35:f6:a8:43:04:69:fa:22:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EA:A9:18:33:4D:1B:A1:A1:F5:2C:EB:E9:C6:29:3B:54:E1:A0:32
X509v3 Authority Key Identifier:
keyid:B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bf:e6:ce:94:f2:f4:b6:09:04:1c:28:43:38:82:8f:29:3a:
e2:f0:0d:df:6a:aa:f7:69:33:06:62:8d:9f:c7:04:43:ba:28:
29:65:78:f5:24:f2:ff:03:df:30:1f:d7:03:3d:f9:26:04:1f:
88:f8:c0:87:e5:65:90:cf:74:27:3a:c3:93:70:fe:f9:fd:da:
9d:8d:08:d5:95:05:fe:7a:00:1b:07:73:25:78:91:94:f0:e4:
3c:d3:75:9c:5d:17:f2:65:b7:63:bd:b1:bd:0d:84:ae:d4:48:
a2:bd:66:0e:23:75:f9:3b:74:2d:8b:d5:17:0c:92:2b:20:a0:
9e:c9:a9:ca:d4:59:5d:c8:ca:de:b4:05:92:1f:46:0a:54:b6:
d2:c0:77:3f:1b:da:97:89:bf:4a:e0:25:33:89:7e:9c:72:2e:
89:48:6c:e2:af:52:a0:19:88:b2:89:41:4e:78:93:e7:64:5a:
26:33:b9:51:33:4a:a4:95:06:d8:c7:66:78:b1:d1:86:3c:32:
0a:9e:45:ca:ef:ea:c7:81:34:b4:10:57:3c:8e:a0:7f:10:f2:
15:0f:10:5a:50:f0:eb:c8:13:5e:06:6d:3b:26:6e:03:64:87:
81:ae:f0:32:28:68:3a:44:f0:20:c7:80:8c:f1:8a:b8:8b:a6:
b7:02:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:41 2025 by rpki-client