Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier: 2MSO+xO2n5pGF6UdaP914BjK32G36Ltrz7c94mjCA/M=
Subject key identifier: 13:B1:8D:B1:0A:B4:DD:6E:09:F7:42:62:03:7A:0E:78:4D:BF:B6:43
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 019657939DD102053373480B8A9012C0D899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number: 13FC
Signing time: Mon 21 Apr 2025 09:00:13 +0000
Manifest this update: Mon 21 Apr 2025 09:00:13 +0000
Manifest next update: Tue 22 Apr 2025 09:00:13 +0000
Files and hashes: 1: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: gYs+lkHDwQEgGQ1NPDRv6YpHhEsvLrWXlv+pw2kZ0xM=)
2: gLQdUENVXGMq4s0E2-s0exbZJTQ.roa (hash: qPXxxb8wbYIQ57DIruVSOJKF4C7lGWbN67ERbUHU99A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:9d:d1:02:05:33:73:48:0b:8a:90:12:c0:d8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: Apr 21 09:00:13 2025 GMT
Not After : Apr 22 09:00:13 2025 GMT
Subject: CN=13b18db10ab4dd6e09f74262037a0e784dbfb643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:5a:6d:f5:b4:75:1a:3d:d0:4b:e3:fa:f3:
b3:8a:e4:45:64:38:27:0b:ab:1b:03:b7:1e:aa:10:
ca:7d:72:de:df:2a:38:01:0f:af:c9:54:19:fa:07:
42:6a:bb:00:4a:77:1a:b6:a9:ac:8a:4a:02:dd:01:
7c:db:33:40:18:bb:cd:fd:57:54:84:ba:5d:7a:58:
0e:bd:8d:1d:de:ce:a4:69:88:f7:d9:35:f7:5b:a3:
10:b2:76:9c:5a:d7:aa:14:68:96:21:21:4d:d4:84:
78:94:b8:4a:0d:b1:db:20:93:b0:af:1f:b9:5c:be:
48:ee:8e:39:02:44:f2:a4:2d:b5:c6:41:1b:5e:de:
a4:a6:f6:6f:cb:82:9c:ed:3b:fd:d0:2f:4a:ab:ec:
bb:b0:a9:e8:bd:a7:0a:19:2f:7e:e2:a5:c7:90:8d:
ed:58:cc:45:9b:81:6e:22:4e:64:bd:e6:d2:26:18:
b5:fc:fe:3c:13:cb:6b:f4:eb:c6:5a:46:e5:37:0d:
c3:91:91:ae:7d:08:ad:e4:93:80:ff:fa:c6:8a:91:
0a:6e:a0:73:93:bf:3c:7a:65:24:fa:5c:10:85:67:
0e:18:71:4f:01:50:2e:b8:4b:67:4c:7c:b4:ce:02:
b5:7a:96:0b:60:97:c5:10:24:14:45:2c:b6:9b:01:
dc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B1:8D:B1:0A:B4:DD:6E:09:F7:42:62:03:7A:0E:78:4D:BF:B6:43
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4e:4e:9b:69:df:89:4b:f2:96:29:5e:14:3e:bb:34:1b:19:
57:f6:29:55:5a:c7:88:b6:54:86:03:44:d7:e6:b5:5d:aa:5b:
57:2a:b2:92:bc:c3:ef:8e:33:e7:2d:92:ef:24:27:6d:e1:8d:
cf:21:18:83:95:d9:24:2d:31:65:e3:85:de:60:d6:09:fd:b6:
16:59:30:98:7d:37:5f:ef:58:b6:fa:76:c7:8c:f2:43:ae:0b:
48:74:4a:06:0b:8c:19:30:ff:da:24:92:e5:36:df:37:0d:51:
da:85:7f:24:77:b2:95:8a:5b:8f:86:81:43:be:d2:a3:a4:7a:
56:39:d4:0b:7a:14:9a:2e:4b:3f:de:d9:88:62:26:16:15:89:
74:9c:56:d7:c0:e1:ef:a7:2b:36:8a:8c:dd:df:3b:fd:ce:97:
25:b0:21:a6:d3:8d:ee:92:74:c6:98:64:79:4b:0c:b9:88:a2:
e0:35:08:22:7f:40:96:5b:a8:43:df:a6:58:e6:89:d5:df:8a:
72:ab:50:6e:57:8e:1c:8a:1f:13:f7:62:90:88:d0:aa:82:75:
de:7d:34:b8:e4:22:74:7a:5f:19:1f:18:9e:6b:3f:5c:5c:9e:
cc:ab:e0:75:08:c3:e5:42:a2:ee:a3:9a:87:6f:d0:e2:7d:a1:
06:b0:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:00:56 2025 by rpki-client