Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier: fyRVtPDA+04B9GggQMzege0sq6p6p+IfjXLSxPWzSjI=
Subject key identifier: 03:F8:81:BE:2F:55:04:54:B5:B6:AD:0E:B2:21:9F:BB:2A:08:72:1E
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial: 01968391179FA637D00B64C0B65EC6C47BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number: 0B73
Signing time: Tue 29 Apr 2025 22:00:46 +0000
Manifest this update: Tue 29 Apr 2025 22:00:46 +0000
Manifest next update: Wed 30 Apr 2025 22:00:46 +0000
Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: yezyM9s3EzxtZdMwzX7oOhSyybqIpJAUQmvZKwPKPXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:17:9f:a6:37:d0:0b:64:c0:b6:5e:c6:c4:7b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Validity
Not Before: Apr 29 22:00:46 2025 GMT
Not After : Apr 30 22:00:46 2025 GMT
Subject: CN=03f881be2f550454b5b6ad0eb2219fbb2a08721e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b0:ff:6a:bb:6e:9d:7c:d4:73:0a:a1:c9:74:
eb:8d:49:e1:74:a6:52:26:3f:cd:d4:4b:32:82:5f:
16:fc:d8:32:1a:7e:1b:e2:9c:12:11:2f:fe:d2:9e:
b5:5e:7c:c7:60:c4:8d:ec:8f:d3:2a:68:c4:83:a5:
69:87:63:03:fe:d5:1c:c0:71:f3:95:b0:c1:ce:be:
07:05:72:5f:e3:b5:c8:eb:7e:6f:a9:a7:c0:79:60:
e1:b3:4f:cc:1a:d0:5d:25:9d:f4:ba:36:3a:88:1a:
ae:52:f3:c1:b8:17:44:58:e0:5e:ba:56:64:51:d0:
01:17:b5:7f:6a:ad:30:d6:48:44:46:00:37:03:e7:
80:49:d1:c6:ab:45:3a:d4:8f:72:77:ba:46:9d:2e:
e2:b6:41:9d:91:35:76:ef:50:b6:b7:38:b1:b5:95:
46:30:f9:4f:69:e8:53:a9:19:32:9c:cb:ed:c7:e3:
fe:82:f3:6f:49:bf:8c:8e:94:e7:80:bd:98:0f:44:
69:aa:7d:57:5a:f5:da:4e:11:c7:ff:8f:12:4c:7c:
22:21:d7:46:60:f7:04:5b:4f:a6:31:58:b4:55:24:
f3:64:42:f1:2d:8f:d7:31:b3:66:5f:26:02:f9:cc:
7c:7f:ad:77:5c:5f:87:6e:d1:d3:0a:49:2a:c1:0b:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F8:81:BE:2F:55:04:54:B5:B6:AD:0E:B2:21:9F:BB:2A:08:72:1E
X509v3 Authority Key Identifier:
keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f2:1c:15:dc:dc:5d:73:f7:2a:1b:43:1a:ac:5c:c0:57:ca:
0b:93:a7:10:97:6d:0a:df:61:13:81:2d:e4:d7:c8:51:f9:ff:
83:78:1a:3a:f5:52:48:53:d8:ab:be:52:dd:d8:17:4a:a7:18:
f5:b0:93:63:9c:dc:57:75:f4:5b:a7:ce:6c:30:ac:95:46:db:
63:7b:e7:44:e3:84:a8:ec:e8:36:d7:9a:7f:2b:d6:c7:9b:34:
08:cc:62:53:24:f4:b6:9c:2f:1d:86:1f:95:b4:b1:fd:56:e7:
78:e2:bb:e2:3f:09:ce:a6:77:f4:14:a8:f3:5f:51:d2:d2:a7:
34:69:13:3c:70:ff:76:74:d6:11:de:62:ac:9e:84:b6:74:65:
ec:ef:7e:16:eb:a0:ff:90:ed:a2:c6:fe:4c:f9:12:21:68:dc:
ae:05:e3:d7:f1:8a:90:88:dd:b8:be:d1:9d:da:e5:cf:81:f3:
ba:ed:d7:29:10:a5:ed:eb:e8:4c:05:4e:cc:35:31:79:5f:a1:
dd:84:40:9c:88:76:0b:d2:4c:64:67:e7:22:10:93:3d:55:9f:
06:01:14:bb:a6:45:a5:39:a9:e1:ce:f2:0e:27:6b:93:d4:0d:
2b:b7:64:4a:2b:26:2c:c1:ee:fc:4f:8f:e1:61:0f:31:3e:b6:
f9:26:5e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:05:41 2025 by rpki-client