Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File: RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier: VrTwUWgsxW3hqFoUK64QS2+MBlYoQZNB8Kee/PDUIfE=
Subject key identifier: F1:42:C4:9C:B7:6C:DF:04:E4:10:58:82:6E:82:E4:87:12:DC:17:E5
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01965538300183E4187F2693F3EC267C79C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 22:01:07 +0000
Manifest this update: Sun 20 Apr 2025 22:01:07 +0000
Manifest next update: Mon 21 Apr 2025 22:01:07 +0000
Files and hashes: 1: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: lrgvgyrwByC47OIH2tOgNjigHPqj6jUegmRD9Eoz26U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:30:01:83:e4:18:7f:26:93:f3:ec:26:7c:79:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Apr 20 22:01:07 2025 GMT
Not After : Apr 21 22:01:07 2025 GMT
Subject: CN=f142c49cb76cdf04e41058826e82e48712dc17e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:0d:11:8c:0a:3e:1c:3c:67:eb:d2:d5:f8:
81:f7:b7:fc:1d:b2:7c:bf:7e:11:eb:5a:5e:eb:94:
eb:72:40:02:21:61:ad:fb:e6:7a:69:3b:ef:ed:52:
c1:96:82:e1:ee:a7:89:9c:87:5d:93:9d:fc:95:bb:
56:07:c6:1e:30:c0:81:7c:81:39:b7:02:92:96:7a:
5f:ec:7f:38:ba:b2:6c:e0:96:ed:a7:07:4e:36:d9:
11:2c:f1:89:89:e5:b1:a1:bf:5a:e1:3b:17:9d:8b:
4e:53:23:96:df:4b:dd:de:c7:52:c4:09:9e:10:03:
81:4b:c9:14:55:e9:26:93:3c:88:56:62:9c:c6:fc:
c7:48:54:4d:bd:6a:a4:99:1f:32:97:02:f6:41:87:
16:f3:3b:c7:65:70:69:7d:4b:4a:86:22:79:34:70:
f7:db:11:c8:b0:a9:44:c1:e8:25:7b:81:ad:3f:05:
7a:82:17:2d:a2:bf:d8:dc:e8:2c:2a:f8:63:83:e7:
67:4a:9c:2a:e6:5e:f0:9f:0e:c0:41:17:58:77:df:
68:e8:94:a3:76:fa:cb:f0:dc:44:bc:df:51:77:24:
a7:8e:bc:f4:fd:1d:52:1e:80:24:07:f0:dd:85:fe:
d3:bb:33:5a:91:fe:48:af:b4:fd:0b:cd:78:67:bb:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:42:C4:9C:B7:6C:DF:04:E4:10:58:82:6E:82:E4:87:12:DC:17:E5
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:35:1f:b6:7f:1f:04:ef:1c:1e:0c:5c:fd:b3:8c:f2:af:f9:
ab:a4:c0:5d:e5:46:36:85:9b:89:80:02:e6:f9:4c:21:dd:21:
50:d8:32:4b:d1:b7:ee:46:e5:62:d9:22:91:0e:cf:41:e6:91:
2f:31:db:0c:bc:69:03:00:0f:da:dd:e1:27:7b:02:dc:47:3c:
92:b7:56:d0:94:68:88:66:41:ef:5d:e4:a8:d5:db:ab:d2:e3:
63:4d:94:60:c8:7c:fb:3d:df:98:c0:42:6f:76:81:c0:0a:2f:
58:ef:17:cc:02:cb:b0:92:39:11:e0:a7:f4:0a:28:79:f2:f4:
25:24:67:97:e9:dd:a8:c9:fa:a8:53:61:f6:37:ca:52:b4:ea:
fe:17:c5:23:6f:97:4b:4e:5c:4f:98:d3:4e:08:2a:ca:bf:a6:
3c:ea:9c:ed:6a:b3:fc:c4:d8:ee:24:7f:e6:95:30:d6:b2:9f:
d3:97:5b:8a:1d:13:7f:7b:74:e1:45:da:3e:44:1d:fb:9a:23:
0f:cc:16:2c:96:6a:af:d2:4a:7f:03:eb:17:e0:04:44:e5:74:
03:eb:d3:b1:67:80:0d:fb:96:b7:1d:61:31:3b:e5:7c:59:3c:
98:1f:5e:c2:81:67:5c:87:23:d5:48:92:16:e6:4f:aa:eb:d5:
38:1d:ea:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:01 2025 by rpki-client