Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
File: tme4cki-Ko4zew55BX2JQHmMd5o.mft (raw, json)
Hash identifier: gwjVKCc3SQBbNvTsj3rotkOPWzLDKspIGkj5bgMV990=
Subject key identifier: 93:84:6D:8C:A7:AD:CB:00:21:74:5D:4E:67:46:D7:1F:13:AF:4F:E7
Authority key identifier: B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A
Certificate issuer: /CN=b667b87248be2a8e337b0e79057d8940798c779a
Certificate serial: 01965011601468A4DC908EFC4644DE50FF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
Manifest number: 022A
Signing time: Sat 19 Apr 2025 22:00:37 +0000
Manifest this update: Sat 19 Apr 2025 22:00:37 +0000
Manifest next update: Sun 20 Apr 2025 22:00:37 +0000
Files and hashes: 1: tme4cki-Ko4zew55BX2JQHmMd5o.crl (hash: YuJvnFMX4yvXA0xb19/wLODSig8mQsY5651INxK080k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:60:14:68:a4:dc:90:8e:fc:46:44:de:50:ff:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b667b87248be2a8e337b0e79057d8940798c779a
Validity
Not Before: Apr 19 22:00:37 2025 GMT
Not After : Apr 20 22:00:37 2025 GMT
Subject: CN=93846d8ca7adcb0021745d4e6746d71f13af4fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:92:94:b6:b0:60:4a:a7:fc:52:5e:5b:f1:
4d:12:8f:9a:9b:02:43:36:2e:fb:74:69:08:fc:e8:
fa:11:c6:a1:17:41:93:79:9f:8e:9f:d9:37:09:81:
57:16:c9:2f:58:d4:04:7c:9d:b2:2f:0d:20:d7:25:
f7:75:86:84:ee:e7:cf:ee:c4:fd:63:3b:05:a8:b3:
13:47:fb:d3:81:68:be:25:ad:37:5e:32:94:1e:54:
fb:11:03:00:a4:e9:1c:f1:55:9a:de:89:89:6b:e5:
53:ca:91:6e:df:54:be:88:71:0c:79:e8:92:8a:ae:
22:e0:ca:19:68:df:6e:5f:00:ff:bd:51:e2:9d:7d:
a1:3d:4f:66:fd:ef:58:91:95:12:a9:8a:1c:9d:3c:
c2:b3:58:90:ed:a3:ca:82:c0:95:11:4c:ae:1e:5a:
96:dd:7d:df:26:ba:2e:df:cd:37:81:6e:ff:15:7e:
ab:30:2e:99:79:81:42:82:18:b6:10:32:5b:0d:15:
24:52:5a:34:8b:5d:df:56:e3:de:b6:6b:7f:b2:36:
07:bb:21:2a:4d:bd:ea:c2:09:83:c7:e1:33:dd:26:
07:03:df:f8:4c:89:64:74:f3:21:23:c1:3c:4e:57:
57:09:fe:27:90:d6:cb:b6:4d:55:3f:ae:a4:30:49:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:84:6D:8C:A7:AD:CB:00:21:74:5D:4E:67:46:D7:1F:13:AF:4F:E7
X509v3 Authority Key Identifier:
keyid:B6:67:B8:72:48:BE:2A:8E:33:7B:0E:79:05:7D:89:40:79:8C:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tme4cki-Ko4zew55BX2JQHmMd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ad2273-fa5c-47d9-8c3e-8c92b380ae58/1/tme4cki-Ko4zew55BX2JQHmMd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c5:59:cf:32:9b:c0:da:e9:c8:42:88:aa:f2:a4:a1:7f:00:
6e:47:f4:6c:47:8d:a6:cb:0d:c6:13:68:66:e8:bc:fd:5f:a3:
1b:5e:2a:fc:bb:d1:cb:39:94:16:ca:76:06:8a:58:be:2f:dc:
ef:1c:4d:48:5a:74:68:d3:62:c3:31:d4:f6:da:93:4f:09:03:
99:f4:aa:f0:37:31:4d:03:e3:b1:0c:6d:59:1c:2a:2a:87:7e:
15:71:39:3a:5b:75:b7:24:5c:43:df:f2:62:9e:81:6e:e6:1c:
0a:18:25:8e:e3:e5:cd:01:70:25:3b:a6:fc:36:6a:ac:40:7b:
2e:19:ec:ed:9d:d6:11:8a:5b:2e:0d:e0:4c:af:39:28:ae:bc:
40:a5:32:3c:0e:c3:ac:53:ef:b9:04:3f:6c:cd:5d:65:34:62:
71:93:ff:7d:6a:68:b2:83:f3:d9:5c:e4:72:d2:ba:45:3b:60:
26:89:25:0f:b7:d3:69:f4:fe:53:3c:0c:22:f1:63:c5:06:00:
43:22:78:0f:a5:b8:1c:86:ea:8e:7e:35:24:ab:9d:63:4e:08:
08:be:05:8a:91:8d:b0:d4:11:07:3a:9c:18:db:d5:f3:17:6d:
78:dc:dc:84:df:3c:ed:40:6d:89:ec:58:14:b6:e1:c5:17:ec:
fd:44:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:15:21 2025 by rpki-client