Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
File: tDGAKt-CucbF8IagvPYLr9MnyGU.mft (raw, json)
Hash identifier: KCmQMGdZCT+chbwnVWmh1a58/f0hEjcJ9IhApiHAeOM=
Subject key identifier: B4:AE:B9:EC:69:A3:CA:B6:E0:CF:44:E6:9F:E0:0A:65:77:7F:E5:2F
Authority key identifier: B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
Certificate issuer: /CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Certificate serial: 0196501167A0EA9F4D1F16DCCD3C97E7E87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
Manifest number: 03F7
Signing time: Sat 19 Apr 2025 22:00:39 +0000
Manifest this update: Sat 19 Apr 2025 22:00:39 +0000
Manifest next update: Sun 20 Apr 2025 22:00:39 +0000
Files and hashes: 1: tDGAKt-CucbF8IagvPYLr9MnyGU.crl (hash: YHt8TtfiMK1xcKF2Uq9Yeh3vWjRvQwupUfLpOFMTUgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:67:a0:ea:9f:4d:1f:16:dc:cd:3c:97:e7:e8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b431802adf82b9c6c5f086a0bcf60bafd327c865
Validity
Not Before: Apr 19 22:00:39 2025 GMT
Not After : Apr 20 22:00:39 2025 GMT
Subject: CN=b4aeb9ec69a3cab6e0cf44e69fe00a65777fe52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:25:11:35:9f:15:20:57:73:bf:02:fb:cb:
d0:b5:35:dc:ac:71:a5:3b:c9:5c:26:0d:dc:56:63:
0d:8d:2f:3e:e3:17:19:89:75:c8:4f:e3:c6:13:68:
87:23:fc:34:02:3f:1a:6a:88:e1:6d:13:da:4c:08:
fa:ff:27:32:ce:6e:9b:05:e5:6c:e5:d7:a0:35:e0:
d9:fd:4e:2c:f2:b1:7d:85:16:9c:dd:a6:78:c3:34:
d1:65:dd:e9:65:a5:c4:bd:dc:10:39:d6:37:3f:26:
73:9e:86:3e:8c:d5:c2:fd:a5:93:68:2b:97:d8:53:
43:fa:4e:da:49:95:b4:bb:fe:c2:a5:4e:3d:d1:d7:
d8:06:53:2b:38:13:7c:60:18:db:3c:35:8b:28:fa:
b5:39:7b:5f:49:06:c6:f6:c4:93:7b:e4:62:69:06:
aa:96:60:65:e5:0c:63:27:8a:82:33:4e:2f:89:0d:
28:a2:ec:f1:f3:ab:3e:43:ab:7e:6a:87:da:0c:8c:
d9:7b:73:a0:7d:3d:af:0f:9c:4e:37:90:f5:b1:8a:
f0:bb:65:11:6d:8e:14:10:fd:80:68:9b:c0:4a:41:
a0:9b:ee:2f:c5:07:3c:e4:f0:84:61:cc:a7:7d:6a:
9c:63:ca:f0:ee:f5:7e:d0:85:7c:6e:e9:80:97:dd:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AE:B9:EC:69:A3:CA:B6:E0:CF:44:E6:9F:E0:0A:65:77:7F:E5:2F
X509v3 Authority Key Identifier:
keyid:B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e7:7f:ef:34:9b:ff:ff:42:bf:d4:44:e7:3b:9e:9e:1b:ad:
5d:f5:d9:60:35:bf:39:3c:9d:76:e9:23:20:14:c1:06:24:36:
cd:a0:a5:5c:52:6f:15:be:21:a2:9a:93:17:0c:a2:d0:0f:a8:
1d:ff:a4:b5:aa:18:f3:3d:46:af:67:3d:08:f5:ec:7d:96:84:
8e:8d:bf:ca:10:4a:13:93:b4:44:be:2a:20:69:11:91:7d:83:
93:38:c5:79:a2:f9:64:78:f3:3d:da:d4:73:45:8a:f4:8b:62:
25:a9:62:e3:1c:bb:9f:59:c4:a9:4a:55:ff:89:81:6f:ac:ee:
58:43:44:7d:cd:7e:c1:f1:2a:14:98:4b:d9:0b:b6:e3:27:5f:
cf:2b:e3:b4:f4:dd:dc:2e:c2:7d:15:79:d6:d4:88:60:c1:6e:
1a:89:fc:18:fa:65:db:b3:cb:45:98:ff:a2:c9:24:e1:54:44:
6e:5f:c8:bc:ec:a5:a9:d4:a5:7e:95:66:8b:b1:cf:85:f6:43:
09:8d:2e:75:2e:01:0c:b7:48:f1:ff:a3:78:8c:c7:ec:3f:34:
8f:4a:6e:5e:96:67:09:d2:30:9a:61:2b:45:58:e6:63:ff:16:
0d:25:c3:af:1f:da:56:8f:39:7e:f5:ab:fa:07:bd:d3:e3:7a:
ab:53:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:09 2025 by rpki-client