Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
File: TW8ORKf28MiMzpxG26jscuxhdSs.mft (raw, json)
Hash identifier: yiVveqhkB/We2pVkb7z6b+aLEK5QdzHnWh6B+Y1AdKs=
Subject key identifier: B6:C4:57:20:A4:5F:A0:4D:50:9E:0B:EA:9E:E4:36:F6:DC:46:77:44
Authority key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
Certificate issuer: /CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Certificate serial: 019675D56019B2C3E38DECC2A9D8065C8C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
Manifest number: 07C4
Signing time: Sun 27 Apr 2025 06:00:40 +0000
Manifest this update: Sun 27 Apr 2025 06:00:40 +0000
Manifest next update: Mon 28 Apr 2025 06:00:40 +0000
Files and hashes: 1: TW8ORKf28MiMzpxG26jscuxhdSs.crl (hash: iUMBiFh5QTUorxMojFG97ahlawyHXQzTX3knxQzBQHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:60:19:b2:c3:e3:8d:ec:c2:a9:d8:06:5c:8c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Validity
Not Before: Apr 27 06:00:40 2025 GMT
Not After : Apr 28 06:00:40 2025 GMT
Subject: CN=b6c45720a45fa04d509e0bea9ee436f6dc467744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:c8:7e:b1:a3:85:c4:95:c1:27:c2:ed:f1:
d9:18:9e:0f:ea:67:79:d1:69:e2:78:12:33:3a:dc:
f6:1a:52:e7:d0:a8:a1:ac:0c:1e:46:42:c1:8a:c9:
01:37:24:b2:c5:8c:44:ab:d0:75:7c:96:89:ea:c8:
57:6f:90:b9:fe:e9:ca:ec:4d:7a:05:6b:58:ab:e3:
7d:26:47:dc:94:a3:ee:14:4c:da:52:43:96:64:41:
3a:dd:2e:36:55:27:7a:9f:ac:ff:73:4c:3e:a5:62:
0f:ff:78:1d:a1:76:6f:95:e3:3d:ee:60:c6:73:78:
e2:cd:77:8a:4e:93:26:10:9e:13:d0:56:67:8e:4d:
5a:e5:85:71:87:3b:34:fd:a3:b3:e0:6c:44:d8:ff:
b2:fc:57:53:4c:99:97:7a:7c:47:83:a1:1d:10:a1:
97:c2:12:b4:61:c5:9d:2a:28:a1:cf:df:5b:09:1b:
b6:ce:7f:f7:c5:67:ba:3e:c3:77:ca:91:a1:47:b7:
32:c0:38:c2:66:2e:60:ed:4f:49:34:05:a1:67:4c:
d3:2a:f8:95:be:ee:86:de:52:64:d1:c3:23:38:c6:
f4:6a:0a:02:5f:5c:7d:1f:85:05:51:ed:36:a9:8d:
24:31:c4:75:96:34:40:99:89:8f:07:97:30:06:00:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C4:57:20:A4:5F:A0:4D:50:9E:0B:EA:9E:E4:36:F6:DC:46:77:44
X509v3 Authority Key Identifier:
keyid:4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a8:cd:e1:45:0d:2a:83:de:9c:d6:cb:41:85:b2:b8:e2:f7:
79:c3:f8:ff:75:4a:2a:c9:d8:0d:04:5d:15:a0:96:2b:20:b9:
87:7a:bb:dd:14:bb:43:b6:08:5d:aa:b2:b9:39:e4:e0:4a:c7:
bf:60:23:0e:b9:7f:07:b2:35:6a:53:99:b8:fd:f9:d8:9d:91:
3d:00:09:cf:77:c1:20:32:e6:a7:0c:9b:85:45:e0:da:db:7d:
2d:17:81:cd:ff:3a:32:5c:32:57:d1:2b:52:55:a6:4a:fa:bb:
4c:7f:70:12:e5:b4:aa:f8:c4:dc:d4:f0:79:ee:b2:19:c2:e7:
17:9a:de:b7:d3:26:4a:bf:08:14:8d:b8:27:50:c4:3f:b6:b5:
cd:79:46:62:41:d6:66:f3:13:8a:d3:ee:d2:0d:31:3f:af:8d:
1f:68:a4:8a:97:d8:9f:46:11:d1:e5:1a:9a:74:17:07:f4:ef:
02:70:ce:d3:b4:f7:cf:a8:df:24:1c:48:89:3d:9a:5a:c1:84:
e0:6b:7a:93:2c:f6:34:b7:44:e7:ba:ce:97:49:41:5e:68:33:
af:19:3c:40:14:9a:5e:e2:14:35:e2:6b:24:34:74:48:ef:1e:
32:7b:a3:4a:01:f9:db:60:e5:5e:63:a2:d9:b2:ec:75:5e:04:
7b:38:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:58:05 2025 by rpki-client