Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
File: TsRiBLT4hZI6pKl4btWsr7HACd4.mft (raw, json)
Hash identifier: ckYK87vWytohXhL9u5XWkeHhhBJjVfJipIokqATBF28=
Subject key identifier: 90:72:B6:82:D1:AE:8A:30:D5:FC:E7:F5:94:79:3C:DC:AE:22:38:49
Authority key identifier: 4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
Certificate issuer: /CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Certificate serial: 01967567D2AF33D84220C23B20FF59AA8295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
Manifest number: 09DE
Signing time: Sun 27 Apr 2025 04:01:00 +0000
Manifest this update: Sun 27 Apr 2025 04:01:00 +0000
Manifest next update: Mon 28 Apr 2025 04:01:00 +0000
Files and hashes: 1: TsRiBLT4hZI6pKl4btWsr7HACd4.crl (hash: jB3hx3PR5148SBhOD2d7/g1fLsdPMj/CLb+O+KJqYSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:d2:af:33:d8:42:20:c2:3b:20:ff:59:aa:82:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec46204b4f885923aa4a9786ed5acafb1c009de
Validity
Not Before: Apr 27 04:01:00 2025 GMT
Not After : Apr 28 04:01:00 2025 GMT
Subject: CN=9072b682d1ae8a30d5fce7f594793cdcae223849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:93:fd:3b:ea:d6:15:30:38:a6:f4:bf:52:c0:
66:c6:43:2c:a4:c3:54:3f:f1:a4:d6:e3:6e:2c:2b:
7b:c1:bc:ae:ba:af:7a:26:ab:71:8f:48:08:47:6d:
0a:da:1b:07:57:ac:e6:c1:ee:a9:22:db:16:b1:0f:
57:4d:ce:15:ba:ca:5c:9f:66:30:b9:45:a0:0a:d0:
69:b6:0f:79:1d:51:37:44:ee:de:7b:5e:28:56:19:
24:ad:10:15:4a:e2:69:5c:eb:da:bc:c1:0f:ff:8d:
23:49:d5:44:ab:cd:36:c9:25:64:ca:80:62:30:96:
57:8e:20:83:fb:5d:ff:8f:b2:f9:8d:46:ba:2c:51:
9a:db:52:3a:23:dc:74:c1:aa:03:3f:d1:b7:b3:47:
5f:3d:c2:94:10:27:1d:c1:41:5d:84:ae:b3:85:63:
d8:03:f9:52:c9:e4:b9:52:e5:c2:f5:25:68:20:f2:
24:87:e0:d9:b4:24:d4:67:72:0d:82:3b:69:34:d7:
d3:30:87:f1:dd:e8:07:85:d2:71:d6:e9:c6:1a:e8:
b7:ce:85:e7:a5:e9:4b:d0:52:63:8b:60:82:0b:98:
48:c5:59:d1:95:98:81:68:03:13:0b:15:e5:34:39:
14:37:5e:1f:81:49:d5:45:1b:f2:c3:a1:35:c6:fd:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:72:B6:82:D1:AE:8A:30:D5:FC:E7:F5:94:79:3C:DC:AE:22:38:49
X509v3 Authority Key Identifier:
keyid:4E:C4:62:04:B4:F8:85:92:3A:A4:A9:78:6E:D5:AC:AF:B1:C0:09:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsRiBLT4hZI6pKl4btWsr7HACd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e94ce1-0d7b-431b-9143-fc3f5ec14a5b/1/TsRiBLT4hZI6pKl4btWsr7HACd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0b:07:4b:27:cf:d1:31:ef:15:57:aa:a3:1b:72:fc:bf:2e:
1c:36:98:ba:c3:18:61:2e:e8:23:73:09:22:47:7b:87:e2:b6:
ad:ed:cb:0d:c7:32:b4:09:c4:44:4d:ba:66:98:38:0f:fd:74:
73:57:81:5e:d9:67:6a:91:23:a6:0b:94:7b:d9:67:5c:fa:1d:
5c:43:ff:18:c0:c8:7b:75:53:76:60:d6:29:72:0a:42:fd:e8:
d5:32:01:d7:f0:c1:1d:7f:e2:f5:56:2d:81:22:68:b4:70:8f:
05:06:58:04:3b:0a:07:fc:e4:74:b1:8b:1e:fd:dd:31:76:f0:
ba:57:16:10:5d:94:75:1f:f8:94:5b:f7:f2:61:fc:d8:d9:5f:
39:f4:c3:ba:14:7b:00:72:a2:e3:38:a5:28:4b:06:46:f9:76:
b2:a0:4b:87:00:47:80:9c:cb:95:f1:20:06:c9:fc:ff:4f:af:
9c:d1:ff:a9:f6:b6:d8:f4:ce:c0:35:9c:60:bc:60:2d:33:24:
83:9c:79:c6:47:d0:28:8e:c1:cc:74:17:45:33:8b:89:fe:43:
60:c2:56:3c:a4:9a:58:a9:8f:f9:2f:47:9a:b2:cf:52:a3:31:
54:61:f9:cc:fc:d8:e0:02:f8:a7:1f:85:ea:19:5c:ce:24:b2:
d3:a0:9e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:08 2025 by rpki-client