Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
File: tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft (raw, json)
Hash identifier: 5fmqQNWrNjo5j2sqm5wdWmNvDdVhGAraY5/o4MXLkZI=
Subject key identifier: F3:F6:4D:11:2A:A7:94:47:D6:E6:EB:B3:3E:37:D8:9A:8F:91:43:5B
Authority key identifier: B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
Certificate issuer: /CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Certificate serial: 01967FB44F539239C5216C35F146D7D709CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
Manifest number: 06A1
Signing time: Tue 29 Apr 2025 04:00:45 +0000
Manifest this update: Tue 29 Apr 2025 04:00:45 +0000
Manifest next update: Wed 30 Apr 2025 04:00:45 +0000
Files and hashes: 1: tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl (hash: ONWMAnxNeV/eulY/yQR5LYprVENLfWjE4rfBQR86C48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:4f:53:92:39:c5:21:6c:35:f1:46:d7:d7:09:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5a8f2ca23e102d4d35711362d24abd47b09e9e5
Validity
Not Before: Apr 29 04:00:45 2025 GMT
Not After : Apr 30 04:00:45 2025 GMT
Subject: CN=f3f64d112aa79447d6e6ebb33e37d89a8f91435b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:48:be:e9:f4:ce:4b:7a:5f:41:91:79:20:
ef:1a:96:86:9d:7d:e4:ee:ea:48:a4:cd:62:cf:d0:
a4:85:e7:e0:14:f9:ad:38:06:de:a1:50:b6:10:7d:
95:49:bb:82:83:ce:2e:59:b7:b5:3d:cc:df:2f:87:
7e:2f:30:92:a3:ca:08:f6:e1:37:83:37:03:27:70:
46:ca:4a:a8:fc:ae:6d:54:1e:e4:65:30:a3:ce:49:
db:13:35:01:08:42:31:9b:68:e4:26:5a:43:9d:d9:
12:51:00:54:7d:1f:4c:9a:8e:bc:ed:1f:0b:25:d2:
15:29:75:5b:7b:e9:8e:a3:d1:be:2a:f8:a6:c1:70:
17:c2:63:e0:d7:fd:27:ea:97:4c:f3:f4:d6:30:d4:
08:6d:0b:29:45:38:e2:8a:45:be:4a:4e:17:16:bc:
dd:4e:8a:fc:98:f4:5d:a8:71:c7:ad:17:56:dd:34:
10:ab:c6:1c:c8:e7:90:15:ec:31:d6:c8:11:25:19:
94:ae:a8:26:b2:b2:70:d9:3a:b1:17:98:ee:63:da:
a7:f4:0d:aa:ba:76:db:e1:e2:63:54:f8:0b:04:36:
f9:45:01:66:8b:a6:ef:3c:1e:c7:a3:a2:2a:aa:0b:
22:ed:c8:67:f4:a7:f3:8f:9d:ce:ea:ea:fb:29:8c:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F6:4D:11:2A:A7:94:47:D6:E6:EB:B3:3E:37:D8:9A:8F:91:43:5B
X509v3 Authority Key Identifier:
keyid:B5:A8:F2:CA:23:E1:02:D4:D3:57:11:36:2D:24:AB:D4:7B:09:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tajyyiPhAtTTVxE2LSSr1HsJ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f6f752-c04b-4ea8-857d-8a8744e45417/1/tajyyiPhAtTTVxE2LSSr1HsJ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3c:5c:bf:4f:e2:1f:9c:37:ec:ce:3a:c3:70:d6:5b:7c:b2:
16:13:23:bc:0e:8e:24:f0:1e:58:4a:37:54:b3:f1:09:94:b0:
f9:f4:86:39:37:8f:ac:0b:d7:5a:f8:e6:da:be:fc:cf:77:d6:
1e:ed:52:1f:74:15:09:e9:c8:fe:79:51:41:06:80:c7:76:a1:
ce:5a:72:48:ec:3e:8a:7a:71:b0:5f:8a:5c:11:b8:02:77:07:
61:39:d0:55:ff:0c:88:d5:07:79:90:de:f6:8e:29:a0:73:ec:
2a:9e:62:0f:d9:e2:fe:0d:6a:85:c4:0a:f9:72:fc:4e:6f:7d:
b3:6c:3e:21:f5:7f:d1:8c:5f:cc:57:55:20:31:51:37:f3:f3:
25:3c:a5:3b:db:a6:28:50:68:84:09:d6:b0:f1:5f:d7:6c:dc:
37:04:02:8a:cd:76:5d:84:48:a8:b0:3e:bc:b8:49:0f:75:67:
bc:fd:b6:d6:65:8f:7a:13:c6:a5:2d:7c:b2:b0:9c:58:ec:cc:
c8:31:27:e0:af:1e:6c:28:bf:c4:fb:a1:fb:b4:39:ae:d7:14:
d1:e0:8a:57:be:7a:dc:6f:e9:3d:9a:a4:8d:52:e3:e4:2b:6f:
11:a7:2e:41:8c:3c:7a:69:33:dd:fa:4c:d8:c3:4d:31:24:59:
04:57:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:55:54 2025 by rpki-client