Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
File: TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft (raw, json)
Hash identifier: CGDhEQV4/klvc+aL9HgLFvx91erDM9nN6oWU3iJX77E=
Subject key identifier: A1:1B:96:9A:34:80:7C:AD:12:57:49:8C:95:A3:2D:8E:2E:00:C3:F8
Authority key identifier: 4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
Certificate issuer: /CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
Certificate serial: 0196556E8A32ED741C92FF6922E5180A7E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 23:00:29 +0000
Manifest this update: Sun 20 Apr 2025 23:00:29 +0000
Manifest next update: Mon 21 Apr 2025 23:00:29 +0000
Files and hashes: 1: TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl (hash: jXN/GQvjGCKohhijcE+EX195Rgx3Y58xXahZ5Ig55cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:8a:32:ed:74:1c:92:ff:69:22:e5:18:0a:7e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
Validity
Not Before: Apr 20 23:00:29 2025 GMT
Not After : Apr 21 23:00:29 2025 GMT
Subject: CN=a11b969a34807cad1257498c95a32d8e2e00c3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:ee:a4:3a:98:60:a3:22:fa:7f:58:06:eb:
26:b0:02:60:c5:a9:2a:97:17:1b:28:12:33:28:0a:
c2:fe:77:dd:77:72:4b:5e:e7:6f:e6:92:09:de:9c:
4b:fd:78:b7:da:c7:82:22:ec:4d:48:9f:f0:28:2d:
7b:3c:75:4c:2c:48:ec:3a:f8:75:31:e1:9c:66:4e:
58:72:cc:45:78:11:d8:50:b5:6a:ba:77:8b:d7:0e:
21:74:59:b9:b0:7f:47:43:96:f8:b0:38:53:a0:f7:
d0:bd:05:ee:07:e3:79:72:99:fd:b5:13:6a:b3:b2:
0e:b6:db:dd:10:e8:6b:51:ba:1f:97:95:be:eb:ef:
f2:3e:42:be:aa:fa:1b:0d:bc:13:46:6d:5e:5d:98:
28:ec:6c:7e:ad:ae:a6:9b:a0:03:ab:44:4d:23:e7:
57:7d:be:18:21:83:8d:6f:d7:ad:a2:62:fc:4b:89:
cc:6e:e6:a2:51:12:88:30:48:fb:1b:20:14:5c:b5:
a6:65:79:9a:39:06:a9:cd:0e:76:f7:1f:f2:e0:17:
ab:12:bb:53:09:c0:b6:d2:5c:4a:84:ee:72:02:6b:
3c:7d:ce:49:7e:9b:55:5b:49:49:b1:ae:bb:f3:f0:
f6:88:dc:ee:b9:e0:c2:be:d3:0f:18:bf:5e:6e:38:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:96:9A:34:80:7C:AD:12:57:49:8C:95:A3:2D:8E:2E:00:C3:F8
X509v3 Authority Key Identifier:
keyid:4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cb:db:fa:2c:5c:d1:a0:25:d6:69:e0:65:66:24:e0:52:49:
1a:3c:c1:60:7a:68:dd:95:44:fd:34:7e:e5:c5:32:9e:ef:0e:
9c:f9:6e:ad:e0:95:e7:2d:4d:af:5e:dc:ec:d1:ff:d6:c3:c8:
a4:81:7d:b3:cd:1e:79:cc:54:d8:bc:75:26:c1:69:3e:af:de:
a1:c3:aa:98:15:dd:93:22:e2:6a:93:2c:93:de:32:b1:84:a7:
3d:49:ca:0d:a1:fe:91:a2:3c:96:4b:37:e8:ed:a7:f1:5d:ce:
0d:d5:29:6c:f2:c0:de:87:0a:73:7b:7e:47:51:ee:87:ab:9a:
79:a8:73:07:78:5f:c1:61:3b:58:17:98:e1:44:ff:86:03:67:
6f:b7:bb:e2:13:d4:89:ab:cd:01:81:d5:d9:0c:b9:fd:27:58:
e8:32:2b:6d:1d:cd:9c:69:86:3b:54:ac:b3:50:29:5f:37:66:
d8:46:5c:74:dd:44:a0:06:cd:89:3d:56:c0:cf:5e:67:bc:35:
05:cb:2d:78:d7:ff:f4:59:34:45:1b:19:62:80:c6:20:e8:9a:
93:06:da:ec:71:d7:07:f9:50:df:c1:7e:76:14:58:a4:25:df:
11:5d:e4:8c:bb:05:d1:3e:18:5f:1f:89:4b:b0:61:19:06:9b:
19:4e:42:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:35 2025 by rpki-client