Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
File: tTk77GZMj073jtxIvs1jnIKlOgU.mft (raw, json)
Hash identifier: kUwjsViE2e2vClweNhd91jpXENx8QSFnmFW5QclTX5s=
Subject key identifier: CA:20:DE:BF:3C:BF:FA:7B:C7:82:96:BA:8E:74:FD:2D:EC:3E:3B:C6
Authority key identifier: B5:39:3B:EC:66:4C:8F:4E:F7:8E:DC:48:BE:CD:63:9C:82:A5:3A:05
Certificate issuer: /CN=b5393bec664c8f4ef78edc48becd639c82a53a05
Certificate serial: 0196553885BD341AA242300900960532323A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
Manifest number: 12A4
Signing time: Sun 20 Apr 2025 22:01:29 +0000
Manifest this update: Sun 20 Apr 2025 22:01:29 +0000
Manifest next update: Mon 21 Apr 2025 22:01:29 +0000
Files and hashes: 1: tTk77GZMj073jtxIvs1jnIKlOgU.crl (hash: ieTojFBGnhqf+KVQenJr5x5VsvnvTbRCLOVal/QIgjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:85:bd:34:1a:a2:42:30:09:00:96:05:32:32:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5393bec664c8f4ef78edc48becd639c82a53a05
Validity
Not Before: Apr 20 22:01:29 2025 GMT
Not After : Apr 21 22:01:29 2025 GMT
Subject: CN=ca20debf3cbffa7bc78296ba8e74fd2dec3e3bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:55:81:64:1b:aa:d6:9b:a4:80:90:31:ff:4f:
b5:70:dd:3a:de:56:14:9b:2d:3e:13:4e:1e:c9:64:
51:bf:22:ce:e2:44:46:e1:b6:99:95:21:49:f3:17:
23:31:73:e9:f9:a9:71:d9:6d:15:e8:7c:1e:52:a2:
0a:b0:7d:1e:f7:93:ee:3a:0d:37:0d:1d:8a:b1:33:
d9:6b:9b:30:5a:38:d3:31:2a:b3:3d:95:54:5a:ec:
4f:b0:80:64:32:db:ee:37:21:5b:c6:6f:c1:04:e5:
a8:97:0f:59:37:39:97:76:2a:a2:f7:08:12:44:9c:
39:a4:22:78:81:10:7b:b6:71:d5:9c:a7:34:99:1d:
d5:e2:d1:65:0e:c6:f0:f3:28:7e:4b:54:ac:8b:b3:
73:fe:2d:81:0a:ed:7c:92:11:dd:c8:6b:71:a3:f2:
02:26:e3:66:cf:ab:5b:38:73:a3:49:e0:6c:01:0e:
94:96:32:a4:27:18:b4:41:a5:8f:2f:f4:08:39:b2:
89:2f:35:77:b1:71:50:cf:07:7a:27:a6:be:dc:99:
79:81:61:c2:51:e2:39:5a:20:de:79:2c:bc:1d:e8:
19:ee:5d:2f:c0:00:c7:8a:4b:e7:f9:40:22:a7:c1:
6f:a2:d6:ad:6e:35:0d:47:fa:5c:45:36:9c:43:19:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:20:DE:BF:3C:BF:FA:7B:C7:82:96:BA:8E:74:FD:2D:EC:3E:3B:C6
X509v3 Authority Key Identifier:
keyid:B5:39:3B:EC:66:4C:8F:4E:F7:8E:DC:48:BE:CD:63:9C:82:A5:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTk77GZMj073jtxIvs1jnIKlOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/94c3c5-c9b1-46e0-a05e-4764bd00d310/1/tTk77GZMj073jtxIvs1jnIKlOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f0:cb:9d:d3:71:7a:b2:6d:5e:fc:62:84:84:2a:05:a6:38:
f2:a5:8b:71:1f:b7:55:82:e8:f8:84:85:ea:aa:2f:7b:4f:5a:
fd:79:2f:14:9e:8f:83:af:32:58:43:8e:2a:55:b3:f1:a0:b0:
30:7e:50:a2:f6:8b:7f:df:30:7e:d2:a6:e3:67:a4:6d:3f:16:
ba:fb:71:77:e3:f5:29:43:e2:29:28:38:e0:cd:f7:d4:a9:8a:
12:b3:2e:94:68:c0:cb:1b:d3:59:9b:73:e4:40:65:7c:8f:b0:
45:d6:8c:ad:c8:ca:57:cd:52:8e:5b:eb:be:93:17:6f:34:7c:
01:89:09:8e:4d:57:2a:e0:ba:25:b0:da:f4:8c:fd:35:8f:20:
22:3e:d3:33:da:6c:66:50:c3:74:e8:42:cf:78:34:11:f8:79:
c2:62:ea:0b:a7:7c:60:58:6b:83:d5:b5:83:53:f7:8a:7b:79:
cc:b0:18:28:60:4d:75:82:3b:46:1f:6c:9f:b9:ea:68:42:fd:
cd:76:c1:de:db:7a:12:39:fe:ab:8c:ea:5a:52:98:c1:3c:4b:
79:21:e1:11:f9:89:fa:e1:71:15:69:ee:fc:bb:21:d7:f0:22:
11:26:81:00:89:fd:99:79:ba:d8:49:65:ad:e9:f3:91:0a:8b:
b9:43:0a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:09:01 2025 by rpki-client