Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
File: Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft (raw, json)
Hash identifier: tD94bo5r9v2NQhS3DssBq6jHAyRphnPV1F08wA3DwUg=
Subject key identifier: AB:D2:15:73:5B:85:DB:05:DA:BA:5E:06:E2:4E:56:E8:A9:A2:DE:7B
Authority key identifier: 2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
Certificate issuer: /CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Certificate serial: 0196760C8C17FD4BD2D3CFA840EA226BCF2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
Manifest number: 053B
Signing time: Sun 27 Apr 2025 07:00:55 +0000
Manifest this update: Sun 27 Apr 2025 07:00:55 +0000
Manifest next update: Mon 28 Apr 2025 07:00:55 +0000
Files and hashes: 1: Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl (hash: 8G2/4XSQMDTe1n5KvsEarhp6lyDrot6WppOyftJIqmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:8c:17:fd:4b:d2:d3:cf:a8:40:ea:22:6b:cf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ed7fbc1df0070acf5b3a67ce4e212dbd03afad7
Validity
Not Before: Apr 27 07:00:55 2025 GMT
Not After : Apr 28 07:00:55 2025 GMT
Subject: CN=abd215735b85db05daba5e06e24e56e8a9a2de7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:50:52:17:1b:84:5e:14:fc:35:de:bb:f2:
10:32:b2:88:8c:dd:fa:b9:89:5c:ec:f2:f7:33:2c:
e3:7c:c2:8e:41:1c:19:33:6d:01:06:95:51:d2:e9:
75:86:24:90:7f:8e:f3:d4:e9:fd:98:22:46:c4:6d:
3a:f4:48:b6:bc:dc:ed:01:9d:3b:58:cf:35:4e:fe:
15:c2:bc:86:af:9d:3c:34:e3:63:12:8e:55:28:92:
d4:d9:a6:c7:52:e6:a6:05:db:16:ec:d7:57:aa:39:
9d:dc:4f:ee:80:6b:22:68:0a:57:2f:13:48:7f:53:
4a:4b:fe:76:69:6d:a0:79:62:ba:01:d6:96:ea:11:
80:da:ac:87:99:ba:6f:09:af:c7:9a:f9:f8:c3:4f:
26:42:c0:e8:72:91:d3:10:6b:32:41:6b:75:aa:05:
c5:83:83:94:e7:27:a8:75:fa:2f:bd:48:a2:03:37:
65:6b:d9:f2:e6:ab:29:0e:69:de:6f:69:85:9a:d4:
01:69:bb:82:29:3a:ce:01:7a:8d:06:22:e0:0d:57:
9a:3c:cf:94:6c:52:fb:10:a4:9c:24:0a:2e:68:42:
91:10:b7:fc:e1:3b:8b:e4:ca:c3:2e:6f:0f:01:70:
cb:27:65:5e:1f:ef:38:dd:2f:0d:51:90:32:cb:27:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D2:15:73:5B:85:DB:05:DA:BA:5E:06:E2:4E:56:E8:A9:A2:DE:7B
X509v3 Authority Key Identifier:
keyid:2E:D7:FB:C1:DF:00:70:AC:F5:B3:A6:7C:E4:E2:12:DB:D0:3A:FA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltf7wd8AcKz1s6Z85OIS29A6-tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/552e68-611d-4ad8-a7e1-48bfac2cdc72/1/Ltf7wd8AcKz1s6Z85OIS29A6-tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f5:b5:f5:8b:c0:0f:47:df:66:d9:23:5e:d1:97:8b:a9:83:
1d:4c:83:62:41:c6:65:c7:51:75:b1:11:fc:fb:33:21:d5:c4:
37:b1:eb:2e:58:92:5c:e3:34:7c:ae:7d:db:7b:5d:a7:b2:db:
15:ad:fb:7e:ef:a5:a1:73:d8:c6:03:77:1f:60:47:58:e0:fd:
93:6b:cf:e3:3c:a9:5e:3c:d6:46:f2:82:26:1c:78:4f:66:93:
46:31:6d:7f:80:47:7a:8b:b7:8c:be:97:d5:6a:89:64:18:76:
6a:85:b1:43:04:51:c4:2f:4c:f3:16:59:3e:6f:37:26:50:46:
35:be:a7:7f:a5:ea:a7:ae:e0:1c:27:45:03:11:5a:0d:47:58:
29:f8:3d:85:27:4a:3d:3a:bc:ba:2f:dc:21:b2:62:0a:bf:01:
c6:2f:70:45:9f:f6:14:e7:2c:1e:40:a9:ff:bc:5d:e0:13:ff:
eb:ae:f2:c5:17:cc:e0:8f:84:da:04:e0:24:66:30:84:41:a9:
8d:3f:d6:b2:bc:70:81:2f:54:e1:d1:66:44:e3:31:bd:00:6e:
3f:99:a8:b0:9e:03:b9:5a:d3:ee:4a:7b:5b:14:73:d7:8c:30:
e5:08:2c:b4:41:a7:b6:47:15:82:7f:7a:76:8e:19:db:55:94:
7a:80:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:52:57 2025 by rpki-client