Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
File: TUQhxgZa4gAa_NgtotDbIRISRag.mft (raw, json)
Hash identifier: 159d0fXfyqEBPNI+Dq9HmmhJptaDhF39QUKPSlSmHzY=
Subject key identifier: 75:4E:EF:27:B4:C8:55:53:9C:95:BA:3A:2C:EF:A1:B4:C5:8D:26:96
Authority key identifier: 4D:44:21:C6:06:5A:E2:00:1A:FC:D8:2D:A2:D0:DB:21:12:12:45:A8
Certificate issuer: /CN=4d4421c6065ae2001afcd82da2d0db21121245a8
Certificate serial: 019645C4AF25C6B21EAED5FE7B37BB3F2D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
Manifest number: 02A1
Signing time: Thu 17 Apr 2025 22:00:39 +0000
Manifest this update: Thu 17 Apr 2025 22:00:39 +0000
Manifest next update: Fri 18 Apr 2025 22:00:39 +0000
Files and hashes: 1: TUQhxgZa4gAa_NgtotDbIRISRag.crl (hash: YTeyFH8UTMr/AF5Z/RRBbputh1OpaPLatH+FEdbLwuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:af:25:c6:b2:1e:ae:d5:fe:7b:37:bb:3f:2d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4421c6065ae2001afcd82da2d0db21121245a8
Validity
Not Before: Apr 17 22:00:39 2025 GMT
Not After : Apr 18 22:00:39 2025 GMT
Subject: CN=754eef27b4c855539c95ba3a2cefa1b4c58d2696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:a3:27:0e:56:1e:12:bc:4c:53:7b:7e:c0:
ee:99:b2:40:f3:47:02:2c:90:3c:c2:23:40:27:b2:
2d:85:4b:4a:dd:aa:90:0e:e9:1b:d8:bf:19:93:45:
46:09:be:9e:9d:95:57:2d:02:a3:6c:70:d6:f4:c2:
f8:a0:c9:41:ec:9f:c2:5b:ef:cc:87:b3:67:c4:09:
e9:86:b0:7b:d6:be:44:41:41:9f:59:b9:b4:e3:7c:
ac:81:0e:05:e7:84:b2:21:da:3e:f8:94:65:e9:b0:
4b:49:ee:f5:8e:5d:44:13:8c:8f:be:a7:a3:04:31:
52:05:7e:e5:df:9c:63:e8:5a:f7:c2:ec:14:83:18:
16:0b:28:90:db:2a:c8:9f:69:30:bb:01:36:f0:d9:
61:e1:ad:df:eb:5e:4a:7f:4d:65:1b:ce:90:b1:9f:
7a:f6:9a:b3:fc:59:23:25:94:c5:02:17:d6:c8:a3:
f8:b6:ee:36:bd:8f:2b:82:ce:81:cb:9d:56:26:b4:
63:db:89:f8:df:a2:f1:8e:8c:e9:fa:15:51:c3:ca:
14:05:d3:fe:e9:e2:da:93:04:6e:b9:e7:45:1d:d4:
f5:22:f8:1c:b2:81:d4:cd:10:8a:b5:34:68:ab:2e:
6d:db:e4:88:9c:85:5f:f8:74:68:18:9f:9a:9f:88:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4E:EF:27:B4:C8:55:53:9C:95:BA:3A:2C:EF:A1:B4:C5:8D:26:96
X509v3 Authority Key Identifier:
keyid:4D:44:21:C6:06:5A:E2:00:1A:FC:D8:2D:A2:D0:DB:21:12:12:45:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c3:64:23:2d:58:d8:eb:01:f0:b7:cd:70:44:3c:27:4a:ba:
a5:35:b6:16:44:1a:3e:c4:e2:58:77:8d:52:33:f1:b4:91:41:
37:c3:fc:46:a9:4e:3a:e3:54:7b:cc:17:02:2c:e5:af:3f:c1:
ee:a2:f2:f3:09:c2:34:a3:43:72:3e:ee:2e:9e:77:d0:fd:b6:
14:f6:2a:68:9c:b3:13:ef:2c:cb:5b:0d:bd:de:94:8f:df:9b:
f1:54:6c:93:b0:49:7c:eb:bb:05:d3:a9:ee:bb:b3:d2:8b:3b:
aa:cb:3c:2e:59:92:f3:c9:b7:b0:b2:35:73:22:4f:bc:36:74:
0d:a9:e7:7f:48:58:d5:23:4b:bb:2d:df:3c:3b:62:c6:3c:79:
82:05:24:fc:78:6b:c9:d1:07:1e:2f:e9:16:c0:c8:89:9c:8a:
72:02:5c:b4:91:e6:16:7f:45:86:b7:1c:f5:9a:0f:cc:46:08:
d5:28:e6:20:0d:c3:2b:19:98:e9:0d:f2:be:49:82:8f:a5:92:
48:b7:82:02:52:0c:9b:24:c3:51:59:27:74:1a:30:92:05:4c:
f0:38:62:e9:4e:89:f9:1d:ee:13:25:9a:11:af:fc:29:6a:ad:
0d:80:fd:23:73:f0:dd:d3:64:bf:de:5c:32:4d:3a:22:7c:9d:
65:45:8a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:08:56 2025 by rpki-client