Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
File: tLB5uhPORqvsf1vD893Ni7hnWQU.mft (raw, json)
Hash identifier: pLiVKwB+8G4pbf1m5VdqCTzTm+e0H1KllVwgw3hMmn0=
Subject key identifier: B5:11:03:8B:EA:A5:67:CE:F5:92:CE:2A:1A:61:DC:26:05:04:C1:21
Authority key identifier: B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
Certificate issuer: /CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Certificate serial: 0195790FAE465CDC2D07B2851AA8214E4718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
Manifest number: 1489
Signing time: Sun 09 Mar 2025 04:00:25 +0000
Manifest this update: Sun 09 Mar 2025 04:00:25 +0000
Manifest next update: Mon 10 Mar 2025 04:00:25 +0000
Files and hashes: 1: tLB5uhPORqvsf1vD893Ni7hnWQU.crl (hash: 0YXzZWEBBwrCxlPirztH9JkqMewyCknkCjvqSS6L+FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:0f:ae:46:5c:dc:2d:07:b2:85:1a:a8:21:4e:47:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b079ba13ce46abec7f5bc3f3ddcd8bb8675905
Validity
Not Before: Mar 9 04:00:25 2025 GMT
Not After : Mar 10 04:00:25 2025 GMT
Subject: CN=b511038beaa567cef592ce2a1a61dc260504c121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:e9:88:b2:6f:6f:d4:47:75:cc:3d:a0:83:
76:f8:bb:9b:28:cc:be:8a:28:75:ee:64:53:84:ee:
7d:58:6a:bc:31:b9:0c:3e:21:38:a5:89:29:6d:53:
ff:a5:24:16:8a:4e:3e:19:9e:15:e2:23:41:f4:87:
1a:1f:96:10:4b:dd:2e:1b:d1:73:67:81:bb:10:3a:
e0:0a:5f:17:38:ac:c0:f6:41:a0:20:4a:63:ee:5e:
5b:11:24:4a:30:0e:c8:06:26:35:28:38:f1:05:4d:
cc:c6:83:2f:95:8c:95:01:2f:83:5a:59:80:b1:85:
b5:a2:ae:e9:11:55:d6:49:1e:20:57:44:8d:6e:63:
16:4e:93:d3:9f:6d:66:b2:b5:f9:e1:91:7f:3b:26:
94:89:48:48:a2:ad:c2:83:4a:cb:b1:18:2b:ee:b7:
ea:91:85:6b:61:20:63:be:4f:2a:4d:76:f6:0c:8e:
01:14:d9:26:20:ea:4c:6a:c5:55:7d:70:a8:24:ea:
e7:2a:47:99:65:3f:ee:cd:86:fb:02:db:16:fb:68:
b7:a5:96:f0:f5:54:e1:23:87:85:03:d6:15:89:df:
6a:35:1f:e7:9d:dc:21:61:b0:7a:97:e9:67:9b:92:
86:e9:9b:61:02:20:17:64:93:ff:47:87:44:b8:2d:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:03:8B:EA:A5:67:CE:F5:92:CE:2A:1A:61:DC:26:05:04:C1:21
X509v3 Authority Key Identifier:
keyid:B4:B0:79:BA:13:CE:46:AB:EC:7F:5B:C3:F3:DD:CD:8B:B8:67:59:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLB5uhPORqvsf1vD893Ni7hnWQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d46a81-3735-42c6-9bbb-1d1799b59c99/1/tLB5uhPORqvsf1vD893Ni7hnWQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:87:0c:fa:a6:71:12:3d:29:db:77:32:07:7e:27:03:13:72:
e1:95:3b:b7:af:06:ee:88:2a:54:b1:4b:3b:f8:24:f6:93:e6:
a6:f2:04:54:42:2b:fe:ad:25:ca:ec:fb:5b:a3:cd:e7:a0:4b:
cd:bd:b9:c2:ee:1e:45:76:4d:84:c7:bc:2e:5b:83:e7:73:0c:
ce:04:ea:4d:5f:03:be:c8:be:b7:39:d4:9b:ad:ae:f0:25:8f:
b4:c1:35:6f:c8:33:b6:d6:be:5b:a2:38:81:bd:31:b7:70:55:
6a:2f:9e:ed:87:ab:7a:d0:14:f0:c4:80:f7:d7:fd:57:d6:b3:
b3:b1:16:b4:42:36:71:60:72:a8:3e:48:70:06:70:b1:89:b9:
f3:05:01:a8:ab:62:29:ba:c4:c3:ac:0b:9b:b2:34:12:6f:e6:
95:3e:49:69:3f:22:2e:13:66:da:c2:1a:c9:70:02:50:7a:36:
0d:2a:6a:1d:69:f0:6a:3f:5e:56:12:cf:fc:8a:d6:1c:0e:b1:
e4:8f:8e:de:ad:16:db:50:f0:3a:4b:97:69:2d:ff:bc:ce:23:
d4:04:56:52:c6:81:d6:dd:53:95:3d:7e:86:c2:8b:35:89:97:
f4:49:d1:f4:ff:9b:28:21:85:9d:34:50:54:d0:d7:44:cc:12:
8d:37:47:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:16:42 2025 by rpki-client