Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
File: txUfGUo-UkyCxne44TIFgUPI6-4.mft (raw, json)
Hash identifier: xkIiojECuhgdwm0Tkd32gJj3qY/xblsUUizlHtW5rTQ=
Subject key identifier: 4B:6F:C0:12:20:20:92:09:CD:6E:9D:C1:35:43:CF:BB:E2:4E:58:33
Authority key identifier: B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
Certificate issuer: /CN=b7151f194a3e524c82c677b8e132058143c8ebee
Certificate serial: 01964A7D3E81EDFF34D47B2BD71E812918F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
Manifest number: 10BA
Signing time: Fri 18 Apr 2025 20:00:44 +0000
Manifest this update: Fri 18 Apr 2025 20:00:44 +0000
Manifest next update: Sat 19 Apr 2025 20:00:44 +0000
Files and hashes: 1: n19PNekuUxk2MsanZv6k9gKadQg.roa (hash: YnWY6CP2zX/4Z5tMuISlijBU7Qx6tns7hQdNcVBZ1XI=)
2: txUfGUo-UkyCxne44TIFgUPI6-4.crl (hash: 5/hP0VaooXSPTTA6L45ihVDeLUmQCgkgJ5lFM696axY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:3e:81:ed:ff:34:d4:7b:2b:d7:1e:81:29:18:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7151f194a3e524c82c677b8e132058143c8ebee
Validity
Not Before: Apr 18 20:00:44 2025 GMT
Not After : Apr 19 20:00:44 2025 GMT
Subject: CN=4b6fc01220209209cd6e9dc13543cfbbe24e5833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:26:c4:66:73:8a:24:ca:16:f6:9b:6f:3d:
60:17:58:fd:7b:d2:93:9e:1a:32:03:d3:c9:2c:8f:
64:65:50:16:b4:ae:52:aa:bf:08:b2:9f:ac:c4:76:
5a:c8:3f:a5:9a:96:20:74:fe:95:d9:b9:89:ed:d0:
3c:03:0d:b4:1d:f3:a4:a3:ee:ec:23:3a:25:fa:ff:
9b:c5:40:19:81:21:a6:ad:1f:98:5f:ad:83:b0:9f:
01:58:b9:ea:14:a3:fe:44:6c:57:01:c5:fd:b1:5e:
0c:3c:58:bf:fc:fc:4e:a9:c6:1f:5a:33:94:7e:f0:
c1:75:85:6f:3f:b4:23:f5:52:24:51:49:2b:55:54:
c4:f9:25:ce:5c:12:02:25:9f:af:31:45:98:3e:66:
70:64:1c:85:5c:f4:68:ab:a8:d2:90:23:1b:71:3c:
fa:64:16:e3:52:0a:d5:3e:c7:d4:b4:53:59:98:be:
75:cf:c7:5a:df:8f:b7:ba:c9:18:a8:e3:16:81:cb:
7a:f3:63:80:35:d9:52:7a:49:f3:15:7e:ee:97:1f:
1a:25:ef:e6:a8:30:ac:89:9e:47:84:58:ed:7c:be:
02:37:e5:a6:27:39:ed:30:24:f8:9d:2c:0d:43:37:
e2:84:b5:55:ba:d9:95:62:07:eb:3c:4d:c1:41:f2:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6F:C0:12:20:20:92:09:CD:6E:9D:C1:35:43:CF:BB:E2:4E:58:33
X509v3 Authority Key Identifier:
keyid:B7:15:1F:19:4A:3E:52:4C:82:C6:77:B8:E1:32:05:81:43:C8:EB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txUfGUo-UkyCxne44TIFgUPI6-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/49a32d-d0f2-481a-9791-c9a49f70e23b/1/txUfGUo-UkyCxne44TIFgUPI6-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9c:ab:dc:25:91:1e:39:9e:a2:58:c8:c7:77:79:50:e0:d9:
90:6c:04:20:8a:88:05:08:07:25:24:3f:e9:c2:3e:62:37:60:
49:3c:3b:cb:2f:05:c5:57:bc:45:cd:24:ea:84:9a:78:69:df:
cb:e9:d8:18:19:7f:96:4b:58:45:67:95:91:05:9d:60:b7:fc:
03:38:25:d5:c0:c0:42:45:15:cb:85:74:9b:71:6f:4a:5e:09:
13:a9:0b:00:60:5a:61:03:72:95:da:a2:33:7a:48:fd:c3:26:
c1:b8:fa:ab:55:65:e3:3b:75:21:0c:fc:e1:ab:eb:c4:d8:d7:
39:d6:63:b9:e4:69:5f:ad:18:d6:36:84:59:70:2c:63:6c:53:
76:ec:a5:39:ec:98:06:f9:a9:c0:9b:60:7e:a8:d6:09:77:98:
06:5c:91:9f:90:ea:99:ed:9e:3b:c3:22:86:a6:06:22:24:39:
1c:c5:9a:ef:00:c4:e7:7c:02:0f:cf:90:3e:7f:6f:21:6b:20:
5e:18:45:83:28:71:13:d0:64:9a:94:b4:f2:1c:46:6f:4f:3c:
8b:33:62:f8:fd:31:30:00:d5:39:2a:26:f3:7f:bd:cc:86:29:
5e:39:b9:96:37:d2:51:b2:8e:20:a6:33:33:54:37:04:1f:cf:
13:d7:1e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:41:53 2025 by rpki-client