Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
File: TORqOpla2FRclax7aSMcpiT8iJM.mft (raw, json)
Hash identifier: J+xSMK10M6lp489o+ByWQRuQw7OyGRFudPay2AMXSBI=
Subject key identifier: 98:8F:08:85:26:73:EB:D6:A3:04:E9:31:41:5F:0A:E5:97:DD:C2:60
Authority key identifier: 4C:E4:6A:3A:99:5A:D8:54:5C:95:AC:7B:69:23:1C:A6:24:FC:88:93
Certificate issuer: /CN=4ce46a3a995ad8545c95ac7b69231ca624fc8893
Certificate serial: 0196534A152F6FAE82BA69D8DF8C21439DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
Manifest number: 0FE2
Signing time: Sun 20 Apr 2025 13:01:26 +0000
Manifest this update: Sun 20 Apr 2025 13:01:26 +0000
Manifest next update: Mon 21 Apr 2025 13:01:26 +0000
Files and hashes: 1: TORqOpla2FRclax7aSMcpiT8iJM.crl (hash: 9PLpFJ38Dfna4/HL9J29epvvWsN17rDOK2S/pY/2qxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:15:2f:6f:ae:82:ba:69:d8:df:8c:21:43:9d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce46a3a995ad8545c95ac7b69231ca624fc8893
Validity
Not Before: Apr 20 13:01:26 2025 GMT
Not After : Apr 21 13:01:26 2025 GMT
Subject: CN=988f08852673ebd6a304e931415f0ae597ddc260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bd:7d:c6:f7:62:bd:86:bf:d0:ab:fc:a3:72:
41:f2:f6:ff:18:a6:e9:72:5f:53:fb:0d:16:93:a7:
fe:7c:fa:9f:67:34:ff:47:33:cb:28:2a:53:58:e0:
21:b0:90:29:b6:c2:a0:7d:a5:5d:f5:c7:cc:7c:fa:
d3:ce:8a:82:c9:82:7e:8c:3e:6d:ff:87:d7:62:62:
6a:47:99:59:7f:93:fd:00:05:ca:23:9d:15:21:c9:
79:e2:6a:49:7a:3c:b7:14:8a:2c:fc:5d:ae:0e:65:
88:15:10:ea:8e:26:d6:05:22:63:9e:a3:52:1b:1b:
1a:e5:1f:a9:cd:0f:45:95:65:b2:ce:50:f1:ff:78:
41:d0:c6:45:a1:c9:8b:59:c3:a5:ed:84:e2:c4:c1:
a1:a6:74:29:90:ab:4c:d9:4f:78:9c:32:a2:77:5b:
9c:4f:35:d4:7b:a4:85:75:ce:28:6c:88:ae:30:f7:
40:dd:53:bc:76:bb:32:92:6b:77:98:6b:42:eb:7e:
a9:9d:af:59:f7:93:f5:27:3d:60:9d:e2:24:da:24:
50:c6:d7:e3:61:39:7b:08:dc:e0:8c:ad:b9:11:f7:
54:2b:d2:be:f1:62:e0:2a:5d:9b:90:a9:af:9a:13:
c5:59:3a:d1:3f:7e:cd:79:98:92:54:e3:28:c4:87:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8F:08:85:26:73:EB:D6:A3:04:E9:31:41:5F:0A:E5:97:DD:C2:60
X509v3 Authority Key Identifier:
keyid:4C:E4:6A:3A:99:5A:D8:54:5C:95:AC:7B:69:23:1C:A6:24:FC:88:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:44:d5:6f:df:f1:cc:95:8a:57:08:6b:32:4a:7c:c5:59:44:
db:bc:ef:6d:28:aa:41:dc:43:50:74:11:79:24:64:9d:a9:be:
a3:04:26:37:ad:ba:63:ce:39:87:ec:d3:5a:ce:89:c7:d7:40:
0c:5c:0e:c1:0b:b1:4f:5a:73:cf:58:4d:98:e0:94:9c:56:82:
41:27:b8:ff:71:6a:ff:d4:82:a0:cb:f8:2e:26:fa:e0:50:cb:
bd:29:66:7a:08:4a:3c:de:7b:7c:2f:8b:9a:2d:77:35:29:cb:
43:3d:4c:97:07:9b:01:c8:03:e0:83:5f:85:ce:a2:9f:f7:4b:
32:c2:99:d7:f0:bd:bb:30:2f:af:e1:c7:f7:ea:89:f6:9c:d1:
1a:7b:5d:69:6b:51:23:e4:de:82:1a:ff:33:dd:3e:9b:a2:ec:
24:57:c2:75:73:3d:0a:d1:03:05:2f:f2:4d:cd:64:26:39:0d:
08:0d:89:69:62:55:c9:10:7a:6f:09:de:41:6c:9a:ed:05:ad:
35:b4:c7:50:4e:ba:99:0b:e2:c3:0f:87:1a:ae:ce:ad:0d:07:
e1:09:85:4f:9a:72:0a:2b:5c:1a:61:81:45:41:e5:6a:bc:22:
b8:ad:f3:61:b5:01:7b:52:8b:d5:0e:29:7f:27:38:54:78:ba:
ee:c4:c9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:14 2025 by rpki-client