Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
File: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft (raw, json)
Hash identifier: tOGhXL89GHlvvD/REKNu9TyF6GzNVcElUdzixC24VBU=
Subject key identifier: D6:37:F7:36:55:B3:D5:BA:11:D0:4B:9C:A6:62:65:F2:B4:53:C0:AD
Authority key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
Certificate issuer: /CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Certificate serial: 0196409EA88072195AD381BA6E047A26E2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
Manifest number: 05E4
Signing time: Wed 16 Apr 2025 22:01:01 +0000
Manifest this update: Wed 16 Apr 2025 22:01:01 +0000
Manifest next update: Thu 17 Apr 2025 22:01:01 +0000
Files and hashes: 1: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl (hash: 4+k/dIyJpQjDT0A5sPwefgKn+vceUZE39QTUS2K546o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:a8:80:72:19:5a:d3:81:ba:6e:04:7a:26:e2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Validity
Not Before: Apr 16 22:01:01 2025 GMT
Not After : Apr 17 22:01:01 2025 GMT
Subject: CN=d637f73655b3d5ba11d04b9ca66265f2b453c0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:50:79:58:66:b5:3f:9e:24:87:08:c5:90:
34:89:27:f8:4a:4c:26:10:75:f3:0b:c7:cc:72:eb:
4a:da:b2:b5:af:bc:c1:b7:a4:cb:20:b1:1b:65:26:
27:2e:76:62:0c:4a:11:03:ff:de:80:f2:9d:e7:94:
97:cf:f3:d2:6f:e0:95:ce:3d:3a:9e:a9:8e:cf:20:
e9:12:77:ea:23:13:ff:25:4e:06:f4:a5:35:8a:d3:
05:bd:96:6c:48:0a:25:4c:39:83:54:ce:e6:5a:76:
59:23:a1:04:f1:83:bc:30:b3:72:79:3d:6c:cb:07:
00:68:db:03:6a:73:90:c9:48:dc:02:1f:64:d2:b6:
64:81:dd:e3:25:a2:30:a8:35:53:fe:91:28:65:1b:
48:92:0e:6b:da:6d:70:1d:2f:62:15:13:18:55:25:
64:e2:9c:2f:7d:79:b1:e5:75:6d:da:0e:98:b6:8a:
f3:59:4b:55:e0:af:4a:45:e7:f7:cf:1d:6c:09:33:
9e:98:31:59:46:a5:2e:9f:cb:50:f5:1c:9d:5e:73:
eb:1c:7f:15:d6:ac:08:a9:37:e6:14:c7:e4:b7:6f:
72:b9:a9:1e:57:09:f4:e0:30:c4:81:52:6b:82:af:
9e:53:fc:9a:da:3b:4c:3e:ea:af:b5:0c:5e:fe:16:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:F7:36:55:B3:D5:BA:11:D0:4B:9C:A6:62:65:F2:B4:53:C0:AD
X509v3 Authority Key Identifier:
keyid:4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:02:da:c7:93:12:ca:d9:85:2a:ba:8e:c7:4c:c1:ae:58:4e:
35:5a:5e:bd:76:1b:f2:4e:88:ce:df:b1:59:bb:3e:66:92:dc:
52:bb:83:51:2b:d0:c9:9b:1b:bd:c8:b5:7f:e1:22:d3:f5:22:
89:a0:af:a0:18:fb:a0:33:a5:a8:e6:e2:21:7c:fa:e3:16:08:
ba:9f:2c:48:f6:8e:44:22:83:ad:df:bb:02:ae:57:64:f6:f1:
cb:dc:2a:96:ad:0f:31:cd:c3:90:51:cb:5c:ec:75:c2:a5:72:
d4:2d:0a:bb:e6:f2:84:ac:c4:d5:61:ac:01:b4:4d:ae:b7:77:
e3:30:bd:a7:53:04:9e:97:a3:54:79:44:ef:02:09:09:0b:cc:
07:61:e1:6a:e3:80:8c:a5:0b:d8:8c:1a:8f:d9:ff:e7:53:1a:
d3:38:b4:8c:2e:f0:73:45:98:a4:06:bb:9c:d2:eb:aa:9d:3d:
72:69:4a:fe:7a:77:e2:74:3a:17:71:f4:2f:1f:c2:6a:83:0a:
07:ae:d9:37:73:ed:d6:c5:f3:40:32:d4:f8:4c:04:6e:4c:8e:
7a:d5:e0:75:f2:06:ce:f4:b5:7e:08:a6:96:de:dc:03:e0:46:
a1:69:86:f4:a1:a2:15:24:20:dd:12:7b:c1:9c:6a:aa:9d:4f:
50:a4:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:03:13 2025 by rpki-client