Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
File: TE38e6TewmWW3IrCMFqR7Y6SnGk.mft (raw, json)
Hash identifier: QQffCmrr8skJIlliIyRmouu8aZqpWBBN7+e7WEeU7As=
Subject key identifier: BF:D9:F8:B4:62:D9:93:8F:57:8A:64:EF:4D:54:CE:E0:AC:A7:36:03
Authority key identifier: 4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
Certificate issuer: /CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Certificate serial: 01965537525FB096FBC67A6A65C4FFFADD53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
Manifest number: 0F30
Signing time: Sun 20 Apr 2025 22:00:10 +0000
Manifest this update: Sun 20 Apr 2025 22:00:10 +0000
Manifest next update: Mon 21 Apr 2025 22:00:10 +0000
Files and hashes: 1: TE38e6TewmWW3IrCMFqR7Y6SnGk.crl (hash: JX9IUlD2HyNzmtFzNw6lJUFWHr5W3ef4uUpcyZku+gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:52:5f:b0:96:fb:c6:7a:6a:65:c4:ff:fa:dd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4dfc7ba4dec26596dc8ac2305a91ed8e929c69
Validity
Not Before: Apr 20 22:00:10 2025 GMT
Not After : Apr 21 22:00:10 2025 GMT
Subject: CN=bfd9f8b462d9938f578a64ef4d54cee0aca73603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:49:28:51:8f:8a:f7:1b:4a:ac:f8:54:e9:
79:07:d5:7f:3d:81:92:5d:16:23:41:94:2a:82:4f:
7a:41:2f:67:24:4a:e8:e9:99:66:02:cd:bb:80:f3:
bc:a9:c9:0f:87:72:ac:3d:6e:1e:1c:e3:15:34:92:
c0:e4:e9:e8:1d:14:77:c9:74:37:8c:3f:65:1c:27:
a6:a4:50:43:21:b6:9e:67:59:a7:fb:07:cf:af:a1:
58:5e:5f:40:d4:e9:c7:aa:67:cf:fa:f9:03:b8:ee:
61:ff:d1:86:57:b4:1d:97:ce:d0:cb:46:c4:ce:79:
4f:e8:51:6b:6e:aa:44:8d:c0:c6:e5:7f:52:75:82:
62:b8:7a:c2:1a:04:86:95:3d:a2:71:57:af:ef:8a:
31:3d:ac:52:23:f5:93:c8:7e:03:41:1e:d6:73:49:
4e:ff:ad:2f:80:aa:a3:f8:07:bb:9d:29:1d:19:c8:
f3:24:a2:b5:2b:0f:aa:b1:18:f6:fe:a5:78:f2:6f:
71:2b:f4:a3:c5:9c:ba:56:b4:db:a0:a3:2e:2f:7f:
ef:8c:a2:00:b0:9a:34:0b:c0:d8:b3:82:72:49:2e:
fe:f8:cb:c4:7d:28:0f:d5:76:48:10:a6:34:89:56:
c8:45:6d:b8:af:71:e0:1a:be:bb:68:e2:30:d5:f9:
21:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D9:F8:B4:62:D9:93:8F:57:8A:64:EF:4D:54:CE:E0:AC:A7:36:03
X509v3 Authority Key Identifier:
keyid:4C:4D:FC:7B:A4:DE:C2:65:96:DC:8A:C2:30:5A:91:ED:8E:92:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE38e6TewmWW3IrCMFqR7Y6SnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/e2e443-1462-4c4e-bc33-b29eff091bc6/1/TE38e6TewmWW3IrCMFqR7Y6SnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ab:41:3b:13:3c:04:dc:ff:c4:b8:72:97:d8:0e:fa:81:92:
a8:d2:a0:34:1c:49:8f:54:d2:d4:d0:b2:5f:2c:12:4c:f8:70:
56:af:c6:1b:0c:53:1c:d0:6a:03:68:8a:24:8a:c0:58:78:9b:
aa:17:ea:f5:59:93:46:94:7d:e4:72:90:95:d3:e6:a8:0d:54:
66:a3:bd:7c:25:c0:95:35:82:48:85:5e:ab:1f:43:0f:65:d9:
65:94:97:8f:03:95:58:30:6f:6a:ec:6f:7a:91:ed:0e:8a:b7:
21:29:b8:f4:a9:a8:31:5b:c7:f3:81:43:47:d5:db:02:b2:f0:
17:52:4e:7d:94:5d:65:21:65:c4:93:70:1b:f1:7b:e8:bd:f2:
7a:bf:16:b3:98:82:0d:97:c5:3a:5f:b9:fa:b3:51:b2:a1:c8:
41:7f:ef:8b:48:c2:35:66:eb:4a:b8:79:e1:8e:5d:fb:21:74:
35:a3:8c:b1:a3:e7:5d:99:66:c8:b9:4b:8e:3b:6c:f6:0b:10:
46:37:37:2a:f8:0f:18:e9:63:bf:48:1d:f9:04:cc:da:66:33:
02:4f:0f:fe:a9:0f:f0:f5:2f:da:68:35:ae:9a:99:68:f3:05:
89:25:d3:2f:5d:24:b3:6b:07:71:d7:cb:66:9c:90:f2:a8:27:
91:87:f6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:27:18 2025 by rpki-client