Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
File: TEYfg3hoy-rKF670hnhPYfSSQ-0.mft (raw, json)
Hash identifier: Xxgzrr47mZLIrAUOcf8mavK1KR6GolRtSp/DKpJKy0U=
Subject key identifier: 06:44:CB:D2:C4:CD:09:F5:48:98:88:B5:1B:DC:B7:73:F3:9C:E8:2F
Authority key identifier: 4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
Certificate issuer: /CN=4c461f837868cbeaca17aef486784f61f49243ed
Certificate serial: 01958CCE49C75A6A01FE8C4FFF020E4F788B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
Manifest number: 1425
Signing time: Thu 13 Mar 2025 00:01:24 +0000
Manifest this update: Thu 13 Mar 2025 00:01:24 +0000
Manifest next update: Fri 14 Mar 2025 00:01:24 +0000
Files and hashes: 1: TEYfg3hoy-rKF670hnhPYfSSQ-0.crl (hash: CDWiG8iZm0CF0lkDD08aZ9h4NSM+j7TqAljk4YCyOuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:49:c7:5a:6a:01:fe:8c:4f:ff:02:0e:4f:78:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c461f837868cbeaca17aef486784f61f49243ed
Validity
Not Before: Mar 13 00:01:24 2025 GMT
Not After : Mar 14 00:01:24 2025 GMT
Subject: CN=0644cbd2c4cd09f5489888b51bdcb773f39ce82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:94:13:ac:07:b8:32:27:13:bd:e6:e2:9d:f0:
83:36:48:a1:5d:fe:ab:c5:e4:ea:0b:e6:eb:ec:3f:
02:75:03:06:4a:79:bf:1b:40:96:9d:b4:fd:a6:68:
1c:8d:3f:e6:09:b4:39:3c:3f:dc:8c:0a:e1:ca:4e:
af:8a:ef:e6:4b:4c:3b:da:23:0c:5f:bc:8b:c7:18:
1a:12:81:49:49:d5:4f:76:a0:de:82:12:6c:96:b8:
06:24:f3:1a:c6:36:5f:f5:c0:39:f9:6f:85:ea:e9:
a5:1a:28:20:a3:82:6e:1d:62:23:fe:09:6c:25:29:
28:06:cc:00:7d:17:22:4d:17:85:43:27:05:3a:5e:
0a:7d:94:f5:44:f2:cc:a5:ec:d0:0f:29:cd:a9:14:
84:e6:41:cf:24:86:9c:42:ef:3e:c7:e8:0f:de:ca:
4c:d3:8f:ad:d4:6c:2d:30:79:85:ce:1f:5c:3b:5c:
7b:7e:6e:0c:e2:ba:f6:a8:c1:18:0a:70:ce:cb:8c:
3a:a3:62:15:b7:6e:51:bd:d8:a5:4b:61:fc:96:d1:
83:c5:b4:58:c5:9f:69:ae:1d:ac:d5:ca:7d:c2:8e:
48:fb:b8:04:9a:93:19:27:8b:5f:ea:90:cf:60:2d:
f3:bb:0d:d2:66:dc:a8:4c:19:52:1c:4f:54:5d:ed:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:44:CB:D2:C4:CD:09:F5:48:98:88:B5:1B:DC:B7:73:F3:9C:E8:2F
X509v3 Authority Key Identifier:
keyid:4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:01:4e:a0:3e:91:05:c4:ab:00:b1:09:b8:04:ea:58:42:9c:
29:86:ea:fe:12:c6:38:01:94:22:31:c7:2f:bb:e4:d1:d0:1a:
cd:96:88:a6:9f:f8:a3:bf:30:93:3c:47:49:6b:39:3f:75:e9:
d6:0f:b2:03:8c:c4:e5:ee:c8:d0:13:2c:38:26:ba:31:21:cf:
00:2a:10:cd:fb:34:dc:70:67:d8:50:77:0c:d1:34:33:10:f1:
eb:c8:c7:9e:8f:a2:23:12:1b:05:83:f5:91:b7:fc:1c:c5:ca:
37:9c:37:d7:91:61:16:25:e9:0f:a9:3a:fd:6e:bd:1b:45:b3:
15:38:2f:0f:df:39:15:cc:3c:2b:c6:52:5e:b1:5e:a6:3d:2a:
42:45:e0:c5:32:1f:50:cc:19:2d:ed:4c:60:35:c9:9f:0d:0c:
f0:45:c8:9e:49:88:ac:85:83:bc:de:ef:95:49:d4:2e:cc:6b:
62:e0:79:c2:fe:ad:66:aa:1a:5d:2c:18:3e:48:61:38:63:37:
69:fa:7d:fd:6b:72:9d:17:4e:31:93:40:b3:95:8f:06:2a:25:
35:8a:d7:9e:83:97:5d:7f:b2:8d:96:41:63:b5:ec:d5:24:66:
e9:eb:03:38:2e:4e:2c:8b:27:72:5b:b1:38:04:a2:94:83:ca:
bc:19:3e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:33 2025 by rpki-client