Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier: 0bwqZFCIVGmPXFZipeLchfoxwYL8raMC+J+byeiew9U=
Subject key identifier: 36:11:7C:41:5D:C2:00:28:F0:FE:AF:25:3B:7D:95:CB:CD:FE:7F:2A
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019677FAE674014A06DC87CDF1C2CBF06F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number: 0DCB
Signing time: Sun 27 Apr 2025 16:00:53 +0000
Manifest this update: Sun 27 Apr 2025 16:00:53 +0000
Manifest next update: Mon 28 Apr 2025 16:00:53 +0000
Files and hashes: 1: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: ZEkazvqYoqu/4d2ci4cgfISaptYyBjNZom5m5gmC8e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:e6:74:01:4a:06:dc:87:cd:f1:c2:cb:f0:6f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Apr 27 16:00:53 2025 GMT
Not After : Apr 28 16:00:53 2025 GMT
Subject: CN=36117c415dc20028f0feaf253b7d95cbcdfe7f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:2a:98:39:98:e4:ec:1a:7f:c8:0e:dd:b7:
ee:ca:6e:e2:01:c6:05:e7:f4:44:eb:e3:ec:bb:17:
7c:ea:1b:66:61:40:9b:cf:63:2e:6b:f9:3e:2a:12:
c3:49:ed:08:72:86:36:0e:c3:87:27:f7:6c:6f:af:
b6:cc:66:b2:c1:37:a9:6a:9a:d1:f2:4b:47:c5:2c:
b9:2e:aa:85:eb:2c:f9:0f:70:b7:03:77:4f:08:67:
95:0c:cd:98:fb:53:74:56:e1:59:2f:00:78:dc:96:
a0:3e:a2:5a:17:a7:84:64:6f:67:ef:b3:73:17:01:
d0:f3:3f:02:ec:60:b5:84:72:a8:34:bc:8d:0a:c2:
67:aa:3a:9b:8b:4c:7f:8b:0d:b6:88:aa:87:a5:28:
d8:7c:54:cf:77:69:cc:33:e4:0b:a7:7c:99:2d:68:
65:08:fc:7b:d4:41:3b:22:c4:97:ae:90:71:44:6a:
81:0f:56:ec:4d:6c:37:ca:36:d3:82:42:b8:0a:e4:
c1:76:6a:0e:66:32:82:3c:59:3c:df:94:a6:b9:42:
fa:06:e5:df:fd:8d:2e:7c:81:b1:cc:37:75:d2:3c:
bf:89:2a:8a:4e:56:56:a5:b8:fb:9b:b0:87:9d:c5:
9f:95:e8:f0:ff:6a:e8:54:88:b7:02:12:cf:44:dd:
f1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:11:7C:41:5D:C2:00:28:F0:FE:AF:25:3B:7D:95:CB:CD:FE:7F:2A
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:73:ab:8f:4b:00:6f:63:96:f9:a8:d7:a9:b3:6a:ce:7d:ba:
81:29:aa:1f:0b:21:17:8c:22:70:ef:b6:a6:0b:e2:fc:ca:31:
50:3c:33:67:5a:a8:e7:db:a2:a5:09:a0:44:8d:a2:81:fe:18:
1e:f1:09:4f:e0:0a:d0:ef:f2:bb:3a:1b:d6:5a:f7:46:5f:bb:
c3:e0:e2:cc:52:ed:dc:e3:9a:b6:6e:49:5c:2d:a8:64:75:aa:
4a:41:40:f4:27:cc:c9:22:1c:46:b3:ee:07:c5:9d:de:d6:94:
ad:02:2a:55:ff:85:0b:72:61:1a:56:f6:80:24:dd:e2:41:52:
27:8d:92:f4:ab:94:2c:fd:42:8f:6f:75:ce:92:23:ac:e3:be:
44:75:58:bc:df:22:1c:6b:9f:60:40:44:e3:b2:4d:93:4c:6c:
04:3a:c2:52:5f:cc:b7:cf:bf:68:df:a5:4b:29:d1:91:80:dd:
d6:c5:2c:fe:87:c6:bd:d7:e4:be:ce:c9:be:e9:27:cb:5b:e4:
60:00:e7:b0:ec:90:b9:7c:a5:e0:2c:34:5a:d3:9a:99:ea:50:
80:eb:21:83:dc:fd:36:57:9e:5a:a4:1c:c7:3d:08:b0:ac:e5:
13:f8:51:2b:3d:a7:4d:11:01:a5:f0:86:be:9a:bf:dc:54:ca:
3f:18:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:05:04 2025 by rpki-client