
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier: NILyGDz6QQFP6hHn1phbvTVezkSmJGa61JeuvFke710=
Subject key identifier: 6E:59:09:F6:E3:EF:40:0B:F4:F3:4B:E3:E7:AF:7A:00:C8:7B:B8:49
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial: 01968A377E922C6FF88F68B676E6E02795FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number: 1266
Signing time: Thu 01 May 2025 05:00:14 +0000
Manifest this update: Thu 01 May 2025 05:00:14 +0000
Manifest next update: Fri 02 May 2025 05:00:14 +0000
Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: 6ZgRJ8W0tv2UiaYz8Slb7l6sEKwfxOdKT81kRewBCKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:7e:92:2c:6f:f8:8f:68:b6:76:e6:e0:27:95:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
Validity
Not Before: May 1 05:00:14 2025 GMT
Not After : May 2 05:00:14 2025 GMT
Subject: CN=6e5909f6e3ef400bf4f34be3e7af7a00c87bb849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:e3:d6:fd:28:32:aa:dc:a7:4f:a1:1d:0d:
60:c6:79:c4:97:aa:2c:96:d6:9e:ae:20:db:a8:d5:
f6:20:4f:22:fa:96:ef:22:0f:38:20:90:70:a4:fe:
e3:c8:8c:f8:f6:ef:7c:45:4d:15:bc:63:bd:36:ff:
08:55:35:e4:90:66:fb:b3:38:e6:b0:94:fa:53:5b:
da:3f:0b:8d:ff:95:27:55:95:f4:1b:09:2c:7e:20:
ca:8a:c1:d2:cb:e3:c2:ea:5d:08:5f:e5:ff:cf:16:
c4:2d:02:c9:4a:f1:d8:52:82:cf:f8:51:63:b8:c1:
fe:88:b0:02:81:31:53:ad:32:a2:14:0d:e7:13:ce:
6c:8e:63:18:76:19:8c:62:6f:c5:65:30:a1:5d:5c:
a6:8e:16:bb:15:fd:bb:64:de:c3:4d:b9:b6:5c:62:
71:2b:98:4e:6b:15:20:97:a0:9b:6d:15:95:43:f3:
48:b0:8c:60:5e:1f:f1:79:ad:5c:3e:ce:d2:93:2f:
c7:91:ee:45:9b:bb:19:78:ba:1e:44:c8:52:9c:6d:
23:28:88:e5:51:a3:c0:f3:85:54:da:7f:27:9d:e7:
9c:63:f1:7e:05:3b:31:ae:12:4a:ed:10:5c:0e:53:
05:2e:c4:15:b0:d0:b1:b0:02:75:63:d7:99:94:2f:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:59:09:F6:E3:EF:40:0B:F4:F3:4B:E3:E7:AF:7A:00:C8:7B:B8:49
X509v3 Authority Key Identifier:
keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7e:48:5c:a5:3b:69:ac:44:6f:6b:8d:a7:c7:4c:01:2b:e4:
81:7f:a1:a6:ff:e3:76:a9:14:f0:87:8e:cb:3c:1b:b1:a4:c4:
23:9e:e2:30:c9:11:ec:90:d6:0d:bc:58:df:84:39:37:b2:3b:
42:98:f0:fd:5f:3e:cf:19:47:9c:8c:c1:6a:2b:67:d1:bd:dd:
3b:8c:0e:a1:43:f4:54:ea:32:da:c9:df:fb:12:c6:28:9b:60:
87:9e:aa:d5:ab:99:26:c6:ce:37:63:ab:23:44:f2:5b:73:72:
bb:95:86:bd:99:b7:50:f5:a2:53:13:38:94:3f:fd:e7:e8:72:
ef:bb:ef:0a:89:7d:1f:ac:d2:6d:7e:e7:9f:6d:08:ea:c3:c4:
fb:ff:af:b7:b7:f6:05:66:9d:11:71:e8:09:c6:99:25:1f:52:
0d:16:fb:bd:27:60:da:d8:6b:10:a7:b5:c4:7b:21:a7:c7:78:
9c:09:83:9e:57:5a:38:84:84:5f:3a:2a:61:e9:25:3f:57:32:
fc:ba:11:9e:ac:71:df:a8:a0:43:dd:9a:07:81:3b:1f:5a:76:
a6:f6:c2:5e:12:9e:4d:39:6d:6a:14:53:2b:6f:f3:3f:6b:4a:
6b:7c:3e:6f:ac:78:89:41:99:0f:4b:d6:17:59:b3:12:5b:ce:
3e:55:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:27:55 2025 by rpki-client