Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier: RGPSVLviKogPaMRJna3cj9J1MoztMU7UGl7CqBhEOvk=
Subject key identifier: 58:B7:2F:15:56:08:EC:6E:92:41:1A:54:58:97:E6:05:43:D7:66:B2
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial: 0196748B654E84D39578DD56709C8BADABBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number: 144E
Signing time: Sun 27 Apr 2025 00:00:14 +0000
Manifest this update: Sun 27 Apr 2025 00:00:14 +0000
Manifest next update: Mon 28 Apr 2025 00:00:14 +0000
Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: dlnkG3w9UZSasTfGqAmV+OP6OmAw1EWZfbvCe97C7R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:65:4e:84:d3:95:78:dd:56:70:9c:8b:ad:ab:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Validity
Not Before: Apr 27 00:00:14 2025 GMT
Not After : Apr 28 00:00:14 2025 GMT
Subject: CN=58b72f155608ec6e92411a545897e60543d766b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:d8:94:d4:b0:a0:aa:96:1c:9a:e6:1a:fd:
52:c9:75:02:24:8d:39:c3:64:b1:f7:7b:99:c3:b8:
ba:d6:a3:dc:1f:e4:24:35:36:a7:28:1b:ef:97:d5:
cf:34:0c:73:22:6c:c3:3c:06:12:6a:01:2d:d2:ed:
42:35:9b:40:c7:8b:10:89:61:55:4a:28:df:d6:23:
52:06:52:7a:1e:19:b9:65:44:80:29:56:f6:98:b5:
a5:dc:0e:00:af:7f:b5:5a:81:0d:57:10:96:2e:b7:
9d:6a:7b:2c:d7:a2:9b:7f:62:6c:86:31:12:e0:a5:
99:38:2b:00:f4:b9:cb:e9:08:35:45:b9:23:07:a6:
3a:fb:8f:a5:39:98:62:07:54:f1:38:a8:6a:dc:67:
96:09:b1:ec:e2:d3:a2:3a:da:98:58:8c:37:77:17:
82:25:2a:88:c7:18:5d:d6:ba:a8:01:2c:7d:eb:75:
b2:9d:c6:f3:6a:e0:f3:8d:66:db:49:6d:8b:c5:c8:
d8:58:76:70:1d:a7:8b:c6:5d:cd:0d:66:32:12:56:
e3:ef:be:c1:89:f6:a4:f9:08:5f:85:8f:b9:d6:e7:
17:04:81:09:55:6e:19:de:5c:04:ad:da:a7:0e:7e:
45:c3:c9:cd:c4:b6:04:1f:36:48:5f:e3:43:12:48:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B7:2F:15:56:08:EC:6E:92:41:1A:54:58:97:E6:05:43:D7:66:B2
X509v3 Authority Key Identifier:
keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bf:88:21:27:33:7d:6b:77:d0:bd:c3:3d:10:69:5a:63:a8:
00:79:cc:28:07:95:dd:3b:ad:0c:e0:09:6c:b2:a2:a4:14:b3:
45:05:30:85:2b:77:68:e9:12:41:a9:07:82:23:c9:df:23:9b:
7f:4b:2d:14:a6:01:87:88:46:4a:8b:7a:9c:7b:79:06:09:19:
c3:6a:a4:ad:c8:b6:cd:48:99:30:1c:77:71:cb:8d:93:59:6a:
ad:0e:4c:ed:d4:a2:c4:0a:bb:c2:45:83:d1:1e:cd:86:26:ef:
31:18:26:ba:e0:8e:1f:15:9b:c1:1b:de:23:b0:5a:93:61:77:
fb:96:54:a2:4e:b2:be:1d:71:aa:88:63:61:3c:0e:27:35:f8:
1f:7d:37:9c:d1:54:51:cb:28:68:8e:dc:40:12:70:c8:04:77:
54:66:8a:cf:b6:df:16:5e:07:0e:ed:ae:52:f3:50:f3:97:b4:
c2:a9:b4:f0:a0:33:10:9f:cb:b6:91:d0:7b:6a:6d:d9:2d:00:
b0:d7:bf:ca:1e:a6:f4:55:39:08:1d:ee:47:e3:71:82:8b:d0:
f5:7c:82:16:fc:1a:8a:87:c7:56:68:f4:11:a1:bd:43:03:52:
bd:b6:7b:81:27:51:67:9f:d2:aa:da:ac:88:9a:5a:25:c2:bf:
ec:86:2a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:01:15 2025 by rpki-client