Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
File: TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json)
Hash identifier: /J7Qnr1cAKOicJlRg9va+M9S+IB0DBEhqW0emXZTXrw=
Subject key identifier: 5B:EC:9D:5B:1D:54:BC:DA:18:12:05:3B:F1:DF:7F:B8:B3:BD:42:D0
Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
Certificate issuer: /CN=4d21374da731314f0a05175d25b0d89a76f6e081
Certificate serial: 01964C34E01730B77970E45D71B009151E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
Manifest number: 0468
Signing time: Sat 19 Apr 2025 04:00:55 +0000
Manifest this update: Sat 19 Apr 2025 04:00:55 +0000
Manifest next update: Sun 20 Apr 2025 04:00:55 +0000
Files and hashes: 1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: EruBVxp6tavFSSDBhQWOwAnCQX+ZI6IUnvC8FnHEmK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:e0:17:30:b7:79:70:e4:5d:71:b0:09:15:1e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081
Validity
Not Before: Apr 19 04:00:55 2025 GMT
Not After : Apr 20 04:00:55 2025 GMT
Subject: CN=5bec9d5b1d54bcda1812053bf1df7fb8b3bd42d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:17:e0:3f:90:60:bb:d5:35:b3:35:ab:a1:
07:49:ae:19:e3:ba:83:b7:be:bc:d4:05:92:28:3a:
31:d7:ef:df:eb:ee:0e:62:c1:af:fb:1c:b9:96:ea:
92:ce:e3:b0:26:74:ad:77:ac:63:aa:3c:86:b2:a5:
27:d3:e7:12:b5:bf:71:26:65:db:02:f5:85:cc:26:
bd:13:ca:aa:df:bc:31:03:a9:fb:8f:0a:a8:b1:7b:
f8:b7:cb:f7:ee:41:d9:c0:b3:75:54:0c:78:30:c6:
06:64:3e:4a:1c:a8:a1:68:62:93:39:4f:67:e9:1a:
07:85:2f:e6:45:33:8d:4f:78:62:2a:7a:7c:20:c0:
2f:9a:d9:71:03:6d:15:80:fb:5e:99:1a:90:82:a9:
de:c3:a2:3b:7d:f7:7d:bf:9b:88:a0:21:20:9a:78:
19:6d:76:94:34:de:f8:f2:6b:c1:82:36:e1:cd:83:
82:61:c2:f2:ed:58:6f:d4:be:63:80:b4:a6:5b:e1:
21:34:d7:ad:53:5b:f2:82:ed:a6:1d:c3:63:63:11:
0d:c3:a6:94:d7:4f:e3:d9:7a:71:bf:58:a6:98:e5:
6b:19:e5:96:da:2c:4c:73:62:00:da:8d:6d:2c:4f:
34:b1:c9:23:01:2e:d2:1d:30:0d:2b:96:db:98:eb:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EC:9D:5B:1D:54:BC:DA:18:12:05:3B:F1:DF:7F:B8:B3:BD:42:D0
X509v3 Authority Key Identifier:
keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5b:7c:21:75:44:79:da:d2:66:67:9e:4e:a2:29:c1:9e:d6:
13:af:35:e9:33:9e:d6:b9:22:92:7c:70:7e:ea:2b:43:0a:d8:
56:ba:2c:fa:3e:d9:08:b1:97:4c:c0:04:5e:c9:9a:d0:af:88:
d4:9e:14:69:b9:28:f0:31:a2:94:91:14:e2:f8:e9:91:64:d3:
e5:1c:1c:d6:30:5c:ad:be:d4:74:43:15:3a:77:f6:db:b7:ec:
fa:80:2f:44:ad:15:f6:b3:35:3c:03:ec:bb:6e:93:fc:93:54:
60:2e:84:d8:92:65:c3:fd:99:56:ee:82:b7:bf:75:18:43:72:
51:06:c6:dd:7f:a7:81:88:64:b2:71:8e:60:c8:81:e0:db:a2:
8a:ed:ea:06:c1:58:65:df:0d:8a:2d:85:d5:7f:49:35:61:8e:
2a:d0:5c:72:bb:60:eb:3d:af:0b:5d:d2:06:8d:c6:0a:b6:5c:
d3:86:13:fb:61:1b:4e:75:f2:28:34:bf:0d:e9:d9:8c:29:50:
2f:0f:e1:b4:ba:ad:2a:bb:e1:76:1b:13:50:62:18:a9:45:ca:
93:89:88:01:ac:7f:28:a4:8f:e9:f4:7f:c8:4a:09:57:20:ab:
34:c8:6f:60:22:2d:14:4a:d7:68:e4:4c:38:88:10:e7:1f:4b:
c1:5b:f6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:23:41 2025 by rpki-client