Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
File: tyC-m1eyWx7aP4EJLgC0U4vosp0.mft (raw, json)
Hash identifier: 0JPijXLXW4jmFnVNRiDtTQ9dHYzjYF6kTlE8xDRCWLU=
Subject key identifier: D5:B8:AB:A8:23:BA:6E:68:08:A0:A9:E4:7C:CF:D8:B2:2C:3B:D5:8E
Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
Certificate issuer: /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Certificate serial: 01965725E2B7AAC07ACDB7E66FD8A9154C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
Manifest number: 148B
Signing time: Mon 21 Apr 2025 07:00:22 +0000
Manifest this update: Mon 21 Apr 2025 07:00:22 +0000
Manifest next update: Tue 22 Apr 2025 07:00:22 +0000
Files and hashes: 1: tyC-m1eyWx7aP4EJLgC0U4vosp0.crl (hash: GO/uU61fmSQnHTW3lg5ztSwQKvz0Z5PDB0IC23cXAsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:e2:b7:aa:c0:7a:cd:b7:e6:6f:d8:a9:15:4c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d
Validity
Not Before: Apr 21 07:00:22 2025 GMT
Not After : Apr 22 07:00:22 2025 GMT
Subject: CN=d5b8aba823ba6e6808a0a9e47ccfd8b22c3bd58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:eb:c0:8d:f0:7d:fb:75:2c:d2:49:b3:ef:
77:18:68:c3:77:95:36:41:09:85:58:61:cf:60:ab:
ff:34:94:b2:e6:15:ec:a0:27:b3:f6:5f:b7:12:14:
e2:8a:53:03:be:b0:53:75:b4:26:27:ea:cb:34:a0:
b6:d4:8f:e8:1c:57:1b:3e:0c:61:bf:37:ac:8c:a0:
37:17:f4:2f:d1:ba:78:c7:3c:ad:b5:8f:da:44:08:
35:ac:c2:b4:06:99:cc:ab:c5:f2:4b:7b:a6:52:b4:
1d:30:42:65:b1:d3:58:b7:fa:40:55:56:a2:a3:8d:
2f:ed:62:6d:7c:3d:cb:86:54:5b:c6:b4:8b:f7:3c:
6c:b3:3e:2c:5e:ac:f1:f2:fd:5e:f7:4c:ac:31:ff:
6d:91:3d:f1:7a:5f:ca:21:d8:2a:c6:34:72:f4:ee:
a5:84:92:0d:be:ec:44:03:75:67:e9:7b:02:12:69:
e3:59:f1:29:99:63:a5:7d:29:d7:e1:b3:1e:0c:fb:
36:3d:c6:67:65:fb:ea:84:3f:68:58:25:ab:75:e1:
d3:fa:30:d5:27:c0:2e:ae:91:b9:29:57:0a:70:26:
cc:e9:3e:bc:9c:f2:5d:74:23:59:f5:c2:0c:02:e4:
10:e5:36:d5:61:65:2a:55:ad:63:77:ef:15:17:19:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B8:AB:A8:23:BA:6E:68:08:A0:A9:E4:7C:CF:D8:B2:2C:3B:D5:8E
X509v3 Authority Key Identifier:
keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:30:d0:c7:ab:df:b5:84:ed:96:02:2e:e6:e1:de:c6:83:fd:
24:d6:6c:63:de:2f:0e:cb:62:f4:93:b5:d7:9f:88:e8:6b:fe:
17:14:db:75:af:ba:4f:8b:a9:b0:88:b2:02:03:17:99:97:12:
03:b3:18:18:bd:b2:13:23:e4:37:cb:f4:7b:3f:68:1c:6f:3d:
a9:b3:db:9a:70:17:89:82:db:f2:31:68:9e:f1:5d:3b:ef:40:
81:fa:3d:0e:65:0c:16:69:5d:98:c8:95:d7:91:0b:f9:f5:35:
48:38:c4:51:b0:44:23:08:d3:18:06:bd:f9:42:9d:b8:6f:1c:
f1:50:65:cc:02:a8:90:a4:81:c2:69:cb:fd:e6:5a:51:08:e0:
48:1d:5a:f9:fb:0b:2d:6f:83:ff:9a:cb:7e:31:97:5f:9d:58:
f1:d5:ce:cf:5b:d1:8a:18:25:81:42:bc:fa:73:32:93:d7:28:
91:98:6f:46:ed:f4:d5:f7:47:50:c6:bc:e9:45:af:2d:84:b8:
27:8c:f6:55:ad:3b:6d:14:3e:7c:22:dd:a4:c0:f4:a7:be:68:
44:62:b7:57:30:72:1e:0d:e8:e0:85:76:fe:8b:e6:51:ba:18:
82:b1:64:b1:d5:5f:30:93:f3:2b:84:f6:34:e6:99:2d:3d:30:
b8:07:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:00:10 2025 by rpki-client