Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
File: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft (raw, json)
Hash identifier: h5bdZjLb02oXLHqizYovZ5/OzID0vsdKoIGr9vONRrc=
Subject key identifier: 8E:B5:67:B8:BE:14:14:33:01:AC:6F:25:57:93:ED:A9:D1:A9:2C:B5
Authority key identifier: B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A
Certificate issuer: /CN=b785ec73dc181f9935659f58aed208532a2c2a6a
Certificate serial: 019681A343BBA0DD7BC105D2B8B26616D534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
Manifest number: A1
Signing time: Tue 29 Apr 2025 13:01:22 +0000
Manifest this update: Tue 29 Apr 2025 13:01:22 +0000
Manifest next update: Wed 30 Apr 2025 13:01:22 +0000
Files and hashes: 1: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl (hash: DqBADbvZdTdsvQ2oE0uiyl6ueL2sh+6jVuHruAXuOIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:43:bb:a0:dd:7b:c1:05:d2:b8:b2:66:16:d5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b785ec73dc181f9935659f58aed208532a2c2a6a
Validity
Not Before: Apr 29 13:01:22 2025 GMT
Not After : Apr 30 13:01:22 2025 GMT
Subject: CN=8eb567b8be14143301ac6f255793eda9d1a92cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:09:8f:7c:d1:cb:62:ba:ec:be:ed:94:9c:9f:
0a:ad:0d:80:bf:0d:cf:63:c7:2c:3b:17:78:21:7f:
5e:2b:b0:73:97:61:28:a5:17:df:23:e0:f7:ca:46:
54:38:69:a0:cb:a4:fa:69:ac:6a:a6:01:ac:21:22:
fa:9b:5b:0b:92:d5:3b:61:80:d3:e6:d3:f1:8d:83:
cb:1a:b6:b1:51:9e:32:3e:3c:36:bf:6b:71:53:7e:
17:0f:30:d4:99:27:60:9b:c3:40:8e:58:99:ed:ab:
da:5f:61:41:b4:d6:f1:4a:3f:d8:cd:d5:f9:80:b1:
51:9d:f0:25:0d:6e:d3:47:b0:b8:ad:dc:0a:3f:c2:
b9:43:73:d8:69:e4:eb:bf:dd:1a:b1:e2:d2:ac:fd:
6b:d5:de:72:ab:fb:e3:70:0c:a9:dc:ef:60:49:0b:
2e:b6:a4:93:3b:6b:75:b8:5f:cf:87:80:4a:11:dc:
7d:7a:eb:6e:c1:ef:a1:08:8d:9c:b1:b3:62:b5:5f:
2d:23:3f:f4:3a:8d:73:a3:77:8d:24:57:fe:22:05:
34:8a:3f:28:e3:f1:57:45:56:b6:7a:f5:23:c8:42:
d9:bc:b5:d8:91:48:6c:f0:f9:b0:3f:c7:c1:dc:1a:
05:06:1b:67:ee:f9:ff:5c:ac:c9:60:97:58:2f:ca:
5d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B5:67:B8:BE:14:14:33:01:AC:6F:25:57:93:ED:A9:D1:A9:2C:B5
X509v3 Authority Key Identifier:
keyid:B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:22:6c:f6:ab:1f:e7:e2:3c:4e:0e:dd:c8:7a:e6:96:b0:19:
47:95:6d:7d:b3:aa:5f:8a:52:cb:e6:63:4b:87:7f:01:df:2d:
08:8a:9e:df:81:2a:37:17:f5:94:da:8e:bf:da:50:cf:16:66:
f1:76:50:a3:6b:70:e7:53:ae:32:df:ce:48:a0:46:8b:4f:e4:
68:2b:1e:e2:66:e6:c9:f7:3c:25:c4:14:4d:87:ab:ef:af:de:
40:5f:9e:a7:e6:97:d2:e3:43:65:7b:aa:1e:56:9e:c1:d5:be:
87:9c:4d:95:11:ae:22:e2:29:1d:3d:16:91:7b:3a:88:cf:fc:
52:dc:06:c8:46:ed:f8:05:67:c4:55:41:a0:af:71:27:4a:d8:
94:22:ea:77:63:29:c5:08:8f:e6:6e:76:71:15:c5:ba:f7:0a:
b2:2e:00:7e:26:84:70:66:89:fc:e4:38:e5:63:d1:b1:3e:3b:
9e:53:8f:00:e3:2f:0b:10:c7:5b:c2:8c:a9:20:52:4f:a0:06:
61:d8:21:ac:1a:a9:f4:6a:12:b3:f3:c4:19:46:2a:43:e9:38:
4d:33:3b:81:eb:40:c6:ff:c0:d3:8e:8a:a1:98:14:a9:60:89:
55:9f:ef:57:60:21:97:fa:60:27:86:0b:e7:c5:b9:8e:ef:1b:
23:be:31:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:02:07 2025 by rpki-client