Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier: OfvHP/ssmdDAP4lSaqWILDLM43OG+Khi9sYzeFZEZiQ=
Subject key identifier: F4:99:65:F4:60:1C:E9:6A:A3:61:2C:F9:79:55:C4:F5:90:61:29:47
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer: /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial: 01965011CF5E46B8893B8B9465F6D992740C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 22:01:06 +0000
Manifest this update: Sat 19 Apr 2025 22:01:06 +0000
Manifest next update: Sun 20 Apr 2025 22:01:06 +0000
Files and hashes: 1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: jw9d61wp3XnOuIKP4p3qw4w9stvA3p5On1Q0D+p3KHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:cf:5e:46:b8:89:3b:8b:94:65:f6:d9:92:74:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Validity
Not Before: Apr 19 22:01:06 2025 GMT
Not After : Apr 20 22:01:06 2025 GMT
Subject: CN=f49965f4601ce96aa3612cf97955c4f590612947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:29:2c:56:05:3b:0e:8b:30:19:35:a8:e1:c7:
4f:56:97:48:4b:02:46:7f:b5:34:6b:2a:e2:54:56:
22:aa:fe:b4:8a:59:a5:32:31:66:9a:3b:c0:06:91:
f0:5e:46:e9:59:1d:24:ba:5c:61:84:c3:b4:65:29:
cb:d7:8d:cf:1d:a8:80:a8:4c:de:6d:60:f0:3c:ff:
20:3e:95:b7:5d:5b:e3:28:6a:99:65:cd:ec:a5:a9:
3a:79:cd:5c:03:14:5d:1f:ca:4b:3e:7c:56:e0:c2:
5e:4a:90:b4:82:f1:76:92:4e:23:08:15:cf:f2:6d:
19:7d:d1:98:2b:94:e9:8b:b9:43:69:0f:43:9a:28:
96:de:bd:ab:86:a2:1d:c3:7f:d5:c9:43:8f:5d:c7:
16:a2:14:51:f6:b9:e2:9d:f8:1d:95:03:5c:35:08:
11:c2:63:1b:f9:41:34:15:1b:6a:a7:8d:5b:fa:a2:
dc:c4:ad:75:03:0e:94:97:b9:11:c0:87:07:c1:b2:
9e:d3:c5:ef:05:9e:ed:c7:9c:7a:be:ae:80:fe:e8:
49:d9:8c:80:c5:e3:0e:94:3e:29:65:1d:7f:fd:83:
d7:c1:59:2b:76:6e:c7:64:b7:bd:e8:06:c1:95:a3:
d6:4c:66:15:40:63:a1:ae:a7:1b:2c:7c:e1:da:50:
4f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:65:F4:60:1C:E9:6A:A3:61:2C:F9:79:55:C4:F5:90:61:29:47
X509v3 Authority Key Identifier:
keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:44:45:c2:2c:8e:69:da:71:68:6d:a2:cc:38:56:2f:9f:6b:
f3:16:79:ee:5c:6e:84:88:9d:7c:89:36:4c:63:8b:10:1d:59:
91:ab:e6:aa:c1:a9:80:31:6d:60:26:da:8f:2a:7f:74:ac:09:
7d:42:a7:3c:e0:7d:dd:09:e4:6e:5c:64:5a:b6:c1:99:f0:fe:
ab:a2:2c:26:52:7b:89:85:8b:da:7c:57:de:c6:9b:9e:cf:b2:
e0:28:20:be:20:f3:a1:d5:ad:92:9c:3d:2e:d2:8c:56:98:38:
63:34:56:6c:9f:d0:0f:13:dd:fb:d9:d1:74:7a:18:aa:0a:8b:
36:5a:aa:33:4e:b1:aa:25:37:c3:e3:e5:85:8c:7f:fe:a2:57:
23:ce:99:24:67:b1:09:a7:53:30:50:e6:94:c9:76:84:36:f2:
3e:a1:5f:51:d4:99:47:23:37:bb:87:0a:96:eb:f5:de:3d:a3:
34:34:3f:ac:e7:73:da:cb:3b:6c:46:14:3c:a3:cb:06:3d:11:
94:0f:42:47:b7:2d:aa:0b:20:dc:22:21:62:29:2d:c7:a9:08:
8c:43:9a:af:d0:a5:96:3e:37:f5:df:1e:62:32:98:d5:b9:31:
9c:69:ea:71:25:10:a1:a4:9b:90:a9:7a:a1:a7:0b:92:3a:df:
ce:c2:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:09:42 2025 by rpki-client