Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
File: TzLUClO7YLhnWebsClIHMAtBr3A.mft (raw, json)
Hash identifier: x9nwLl9c4zg34cQdmGGf+S7VMms6RMcyYtvT5gYTjrc=
Subject key identifier: 66:ED:36:2F:05:69:DF:D7:EF:7F:8E:35:11:D2:48:55:95:51:CA:26
Authority key identifier: 4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
Certificate issuer: /CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Certificate serial: 01974A7AB124390C2194E62F4FB12859C102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 13:00:44 +0000
Manifest this update: Sat 07 Jun 2025 13:00:44 +0000
Manifest next update: Sun 08 Jun 2025 13:00:44 +0000
Files and hashes: 1: TzLUClO7YLhnWebsClIHMAtBr3A.crl (hash: nAoRcStY9B2U5+ORt3buuEnCiKiJriBq4xvAO292ngM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:b1:24:39:0c:21:94:e6:2f:4f:b1:28:59:c1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Validity
Not Before: Jun 7 13:00:44 2025 GMT
Not After : Jun 8 13:00:44 2025 GMT
Subject: CN=66ed362f0569dfd7ef7f8e3511d248559551ca26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:3e:63:66:d2:cf:75:4f:9f:ca:cf:4e:22:
5f:d6:01:de:c9:bf:c4:52:ad:3d:ba:07:e3:23:5a:
63:8a:5b:2c:f7:45:9e:29:94:af:c9:da:69:ea:2a:
06:3c:f9:cb:ee:32:bc:f1:3e:01:75:d4:94:04:91:
39:3a:95:67:41:c6:8f:39:d6:0f:a0:bd:ed:b4:09:
c4:15:39:31:d7:c1:9b:cc:a9:af:d7:d7:02:10:3f:
77:1a:ca:48:72:77:3b:7e:87:2f:74:95:c3:6f:0f:
aa:e0:32:02:ab:a7:d2:68:3f:12:97:e5:8d:43:13:
5a:91:85:de:a6:f9:05:2d:02:89:e1:ca:8b:b1:50:
f6:06:63:08:9a:28:ff:43:57:ee:5d:97:87:e8:6c:
95:78:c3:43:41:c5:c9:48:72:38:4b:eb:37:50:1d:
eb:ed:e3:7c:33:fa:9b:7b:11:25:2c:d4:df:84:cb:
02:79:30:67:c2:6a:98:5e:13:95:ae:ea:50:ed:6a:
6d:a5:dc:bc:f9:3d:5d:ca:5d:22:f7:e4:af:38:10:
59:5a:03:f9:87:df:41:ef:ad:a9:87:9f:48:c7:19:
e3:09:59:6c:cb:9b:f2:61:da:1b:b7:f5:5b:b8:35:
09:a7:9a:43:69:b1:0a:29:38:6c:f8:d7:51:ad:fe:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:ED:36:2F:05:69:DF:D7:EF:7F:8E:35:11:D2:48:55:95:51:CA:26
X509v3 Authority Key Identifier:
keyid:4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3d:c1:b7:8a:a7:16:5f:72:b4:0d:1e:9f:f6:8d:9b:8a:ba:
5c:e2:81:e0:27:2c:b3:2b:24:a3:94:e6:21:61:6e:7d:6c:5d:
b6:af:1c:f7:d2:90:b7:ac:af:65:e2:f9:d1:3f:9f:e2:2e:f4:
3b:08:e3:4b:c4:ae:df:51:ca:c4:13:db:bd:1b:d7:32:aa:d9:
1b:1e:73:16:ed:89:c7:2f:91:7a:49:1e:ae:70:a1:32:7a:37:
92:14:28:29:5f:05:b4:b7:26:5a:43:31:dc:c9:25:4c:af:ca:
ea:e2:af:14:40:75:a1:6a:01:af:8f:21:f9:41:15:69:ae:0b:
7a:27:4a:39:25:df:de:b9:b2:fa:49:e6:f2:9a:fe:d0:a5:18:
1d:0c:86:de:5e:b5:e9:b5:95:ba:23:64:b4:da:33:0f:51:a0:
7d:8c:5c:61:38:4a:24:74:c2:36:51:3f:67:e8:34:ce:c6:64:
ce:39:84:fd:33:72:9d:65:fe:db:96:7f:7d:ac:88:60:3e:9a:
6e:de:b9:cf:01:20:8b:9b:fe:13:1d:91:b4:3b:c6:d5:42:6f:
78:bf:7c:8b:c4:27:ea:36:a9:dd:f9:f4:e7:f7:48:41:f3:e5:
b4:3a:2a:c4:34:bf:dd:ef:6e:96:86:ac:7f:b8:15:35:51:fb:
65:49:30:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:09:12 2025 by rpki-client