Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft (raw, json)
Hash identifier: R5PiRbwWpcegnaju3kWVfbrWTa8375s9pklf0dN6tBE=
Subject key identifier: D7:E8:49:E9:C9:AD:DB:2B:65:1B:03:F1:4B:31:7E:EA:D2:CF:9A:EE
Authority key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
Certificate issuer: /CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Certificate serial: 01967DC5724DD2336DDF219C2BC7A518EE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
Manifest number: 0B7D
Signing time: Mon 28 Apr 2025 19:00:13 +0000
Manifest this update: Mon 28 Apr 2025 19:00:13 +0000
Manifest next update: Tue 29 Apr 2025 19:00:13 +0000
Files and hashes: 1: tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl (hash: eUFQogngKPm2l9DgrXp7q6JJZ9Thau2mf0EzlFciPIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:72:4d:d2:33:6d:df:21:9c:2b:c7:a5:18:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Validity
Not Before: Apr 28 19:00:13 2025 GMT
Not After : Apr 29 19:00:13 2025 GMT
Subject: CN=d7e849e9c9addb2b651b03f14b317eead2cf9aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a2:fb:3a:b5:37:81:e7:f8:26:28:98:d2:a6:
c8:29:d8:25:cf:f7:6b:37:61:e3:6b:72:b0:39:1e:
df:19:8d:75:0c:26:0e:e3:c9:c6:1e:b7:1f:ec:7e:
91:5a:c0:4b:e6:b6:fe:db:dc:d0:14:b0:40:eb:0a:
32:dc:87:34:33:d3:c1:71:65:95:32:95:0b:60:de:
8e:91:26:3f:f8:ae:11:19:ec:9c:94:63:e5:18:a8:
53:60:15:a6:f4:44:e6:7f:92:ea:96:15:8d:c4:e7:
4c:56:85:b7:61:76:31:65:06:29:dd:54:b2:65:8d:
30:87:16:69:aa:30:c7:9f:6d:36:78:a1:bb:e6:f4:
a6:45:ea:63:18:88:dd:ae:10:01:50:80:fa:c8:e9:
7c:13:91:41:06:ba:94:24:1c:d6:14:a0:a2:1f:6d:
be:2d:f0:f8:92:fe:60:03:62:d7:61:e9:8d:3f:ef:
2b:79:68:04:d4:67:6a:c5:ad:99:9c:3a:b1:ca:3a:
ea:d2:2c:d5:ff:62:4e:1f:eb:ce:c2:70:bd:ff:f2:
01:84:16:e3:00:53:dd:b3:be:e0:14:49:46:61:b1:
53:c0:8a:0f:ab:36:45:ac:ed:df:43:3b:fb:3b:ae:
67:7d:bf:02:7c:75:29:67:75:9b:58:67:fc:7f:10:
09:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E8:49:E9:C9:AD:DB:2B:65:1B:03:F1:4B:31:7E:EA:D2:CF:9A:EE
X509v3 Authority Key Identifier:
keyid:B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c2:80:58:64:7c:47:87:77:65:63:9b:ff:4a:7f:fe:e2:77:
a5:f2:25:ed:87:56:62:b4:e3:5a:cb:06:1c:e4:9b:7a:37:b3:
cd:23:ee:fc:9b:b9:ea:50:17:14:95:19:4a:fd:e9:1d:0f:49:
b9:50:fe:67:3d:6a:41:c6:10:63:9f:df:31:21:3c:77:a0:83:
7d:e0:3a:a8:cc:4e:b2:2c:91:71:f2:49:10:1e:41:82:38:ed:
68:2e:fb:95:42:10:6d:9a:1c:cf:17:e8:53:e6:1d:0f:94:4c:
fc:b6:41:84:09:4e:50:fe:f1:a3:d1:76:69:77:53:74:e4:00:
aa:41:ba:de:b3:5e:e1:82:85:0c:c1:37:f4:d7:2d:1b:de:69:
3b:f6:ea:12:87:27:91:4e:ff:36:72:ae:90:4e:55:27:1a:24:
80:46:ee:08:44:9e:f2:0b:0f:8c:67:c3:70:e6:c1:c5:f3:fe:
ac:b2:de:b0:ec:c8:d7:31:27:f8:6f:b7:ec:d4:8e:c6:02:41:
99:f5:3e:0b:6e:99:29:7d:90:c2:60:07:d2:f9:aa:fd:ea:0c:
f3:0a:3f:14:75:71:2c:5f:e0:59:63:85:ee:95:5a:90:0d:33:
d6:b5:b7:70:41:2d:11:a2:dd:df:2c:e8:ce:95:df:74:a2:be:
90:c5:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:37:14 2025 by rpki-client