Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
File: tbU9N1ctag--wt36NciFiLsbKSg.mft (raw, json)
Hash identifier: 2KlUJuagqgYoex4qTDSH1oM5fd1+1VRkR708RL+cmXk=
Subject key identifier: B2:F4:D3:6F:55:70:CE:24:19:52:02:52:A0:99:BF:83:96:67:8D:77
Authority key identifier: B5:B5:3D:37:57:2D:6A:0F:BE:C2:DD:FA:35:C8:85:88:BB:1B:29:28
Certificate issuer: /CN=b5b53d37572d6a0fbec2ddfa35c88588bb1b2928
Certificate serial: 019676B153B53B9619C3275160C169E9F75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
Manifest number: 63
Signing time: Sun 27 Apr 2025 10:00:54 +0000
Manifest this update: Sun 27 Apr 2025 10:00:54 +0000
Manifest next update: Mon 28 Apr 2025 10:00:54 +0000
Files and hashes: 1: tbU9N1ctag--wt36NciFiLsbKSg.crl (hash: fypN6/hxJ//Td+9h3E7EiFLmGQcza4dWa6x1j+B3rIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:53:b5:3b:96:19:c3:27:51:60:c1:69:e9:f7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b53d37572d6a0fbec2ddfa35c88588bb1b2928
Validity
Not Before: Apr 27 10:00:54 2025 GMT
Not After : Apr 28 10:00:54 2025 GMT
Subject: CN=b2f4d36f5570ce2419520252a099bf8396678d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:35:ec:b7:c9:95:82:6a:2b:61:97:2a:0f:
9c:33:19:a8:9f:57:32:10:d8:68:b7:97:5e:1b:f4:
55:5b:de:e1:32:14:9f:fd:bb:68:66:57:b2:c7:8b:
84:77:a2:bb:84:f3:42:7f:6d:b5:aa:f8:6c:bb:ba:
ed:6d:dc:5e:13:fe:92:90:de:1c:6b:b9:27:a3:f1:
a8:ba:55:fc:c7:a4:dc:99:4f:32:48:25:50:c4:f9:
95:f5:dd:14:a7:41:db:34:38:9a:9b:92:dd:0b:18:
95:7a:2c:41:b7:5d:2a:e3:e9:86:4e:3d:82:4b:ad:
77:66:bb:32:12:67:0d:56:60:21:20:cb:52:f6:28:
83:ee:99:24:d4:6f:de:e1:1c:9e:10:e3:91:ba:5b:
5e:8d:0a:ef:12:24:0f:85:5f:b0:74:56:cf:53:9a:
cd:9f:71:17:82:19:81:39:17:18:c7:9d:0a:91:7b:
cf:fd:cd:94:88:21:4c:43:cd:4a:40:0a:57:e7:66:
96:15:8b:78:f7:8c:e7:38:ca:dc:41:25:f3:2b:b4:
63:30:ee:36:cd:85:58:41:2d:64:cb:76:97:61:8c:
2b:79:40:a8:8a:b6:93:df:bf:93:f8:8f:25:0b:5f:
51:d6:e2:83:42:57:26:1e:7c:b4:1c:02:a1:af:e4:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F4:D3:6F:55:70:CE:24:19:52:02:52:A0:99:BF:83:96:67:8D:77
X509v3 Authority Key Identifier:
keyid:B5:B5:3D:37:57:2D:6A:0F:BE:C2:DD:FA:35:C8:85:88:BB:1B:29:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbU9N1ctag--wt36NciFiLsbKSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b828fb-737c-478e-8a9f-b9c116f75df1/1/tbU9N1ctag--wt36NciFiLsbKSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:85:0d:96:e2:67:1c:ff:4f:6e:4b:02:c0:30:25:ce:39:26:
18:61:0e:40:80:7c:a6:81:43:d8:52:99:d4:49:54:c7:3d:9f:
22:a2:5d:9e:75:a0:5c:59:cd:f8:22:45:10:b1:22:e4:3d:45:
a5:60:64:c4:80:34:3b:ab:22:48:d4:a3:83:2d:40:a7:84:93:
cd:b1:1e:2c:74:eb:55:81:a6:78:fc:43:50:a6:97:b4:6a:25:
7f:15:18:8a:a7:a1:4f:b6:ea:9c:cd:23:bf:45:d0:51:72:eb:
f3:1f:3f:41:f0:b7:b3:5a:ca:11:be:64:04:4a:f7:c4:03:e6:
4e:e7:9e:7d:17:0d:b0:31:2c:09:1a:f3:dc:5c:ee:55:8f:d1:
d7:9b:2e:2e:3c:d1:c8:68:65:bc:34:37:d8:b9:9d:76:35:5c:
18:c8:1c:fe:cd:e0:53:24:e8:f3:1c:d7:29:8e:73:be:38:01:
eb:86:23:91:95:0f:75:de:3e:16:9a:db:02:72:b3:4d:89:91:
96:c6:5c:99:15:cc:c3:64:6e:8d:b7:f5:e9:05:b9:33:01:3c:
89:1e:44:53:44:f0:b9:8a:d7:50:12:5d:92:f4:88:42:3e:65:
17:47:3b:49:ef:d0:61:cb:19:8d:60:19:de:25:31:22:e4:9d:
a3:04:8d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:42:46 2025 by rpki-client