Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
File: tU0YlEyigIUFOR3pf6nWsrxhiZo.mft (raw, json)
Hash identifier: AYssaZhLfn4thV57XowodbfNF/MgXz5DtyEU+bzZZRo=
Subject key identifier: E2:7F:CA:C4:E4:40:FF:FB:DF:D4:78:3D:94:45:6D:E4:72:EB:06:A0
Authority key identifier: B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
Certificate issuer: /CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Certificate serial: 0196760D18A3AB164D72D2AE4FA22F7EF107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
Manifest number: 0FAC
Signing time: Sun 27 Apr 2025 07:01:31 +0000
Manifest this update: Sun 27 Apr 2025 07:01:31 +0000
Manifest next update: Mon 28 Apr 2025 07:01:31 +0000
Files and hashes: 1: tU0YlEyigIUFOR3pf6nWsrxhiZo.crl (hash: RwFk0lxIVFIv24lDdBy8D3BXZ1VKg2fdykr1Cnyxf/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:18:a3:ab:16:4d:72:d2:ae:4f:a2:2f:7e:f1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b54d18944ca2808505391de97fa9d6b2bc61899a
Validity
Not Before: Apr 27 07:01:31 2025 GMT
Not After : Apr 28 07:01:31 2025 GMT
Subject: CN=e27fcac4e440fffbdfd4783d94456de472eb06a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:55:55:4b:32:59:9a:0a:95:6a:ab:bd:ff:
8d:1c:ee:b4:14:ae:93:04:ee:d4:f9:f8:16:bd:0f:
6f:23:f6:44:ff:fa:e5:bc:cd:3b:1d:77:b5:b5:81:
85:78:cb:de:1a:32:f0:38:a9:e8:95:36:38:dc:c2:
c0:56:83:85:7d:09:00:5b:97:9b:43:f8:7b:ba:ec:
3d:18:be:90:84:ee:f5:10:ee:34:ae:48:6e:4d:3a:
69:c0:89:37:da:a0:5c:58:31:3b:32:85:3d:69:7b:
f7:d3:4f:9a:c0:b9:b0:cb:1d:b8:a8:92:34:2a:b6:
12:dd:ee:43:a5:1a:62:b5:f4:ba:a3:14:8e:60:30:
6b:ec:c4:4d:5f:54:d5:51:56:a0:94:cb:3e:0c:7a:
b7:7c:bd:ae:b8:0f:36:05:cc:4d:c3:18:6e:e8:79:
c4:c3:47:da:24:82:b5:1a:4c:2e:d2:cd:43:55:eb:
be:7c:07:56:4c:c1:71:dc:b7:ac:7e:6b:24:74:9c:
eb:b6:ec:a3:47:af:2f:79:52:a8:bd:32:41:35:5a:
11:a6:d1:bb:48:47:b4:0d:de:5a:62:b8:ae:6b:f8:
fd:10:60:47:e2:07:76:53:7d:f0:b1:6c:5d:f9:e4:
bc:29:40:97:40:79:fa:fa:e5:1b:d0:ee:95:37:83:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7F:CA:C4:E4:40:FF:FB:DF:D4:78:3D:94:45:6D:E4:72:EB:06:A0
X509v3 Authority Key Identifier:
keyid:B5:4D:18:94:4C:A2:80:85:05:39:1D:E9:7F:A9:D6:B2:BC:61:89:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU0YlEyigIUFOR3pf6nWsrxhiZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1c2984-fd83-41ba-b1dc-f683b9681d61/1/tU0YlEyigIUFOR3pf6nWsrxhiZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b9:3d:50:9d:9b:54:ad:80:dd:b2:04:92:32:3e:30:39:87:
e8:03:e5:8a:b1:f6:7b:19:8f:96:78:f4:91:85:9e:e7:9e:6b:
3c:e5:0b:99:c2:0d:55:89:f5:bd:2a:fb:39:84:5b:cf:b8:61:
13:a8:3b:ea:c8:f1:28:12:de:2f:cf:81:7c:11:1f:fb:1d:f9:
1d:47:68:ae:d4:62:a0:61:7f:27:4e:82:a8:82:80:f3:84:18:
64:c9:59:00:d6:23:db:f8:8f:76:84:88:f2:b3:f4:2d:71:7d:
4a:e4:3d:cf:33:12:c0:9a:1a:1a:95:30:9e:bf:fd:4e:19:62:
c5:e2:bd:ab:0b:21:57:7f:b9:21:a7:a7:4d:87:59:63:b9:04:
c7:a0:34:cc:96:70:65:21:d3:87:0d:82:58:c0:64:55:41:50:
fc:78:c7:9d:82:0e:8f:9e:7f:00:0a:6a:23:2a:98:86:c0:84:
bd:72:64:c6:7d:31:68:cb:1a:95:e5:8f:95:4f:8f:e3:9f:34:
e5:ed:72:62:5e:d8:5d:59:ef:12:3d:85:36:e9:96:0c:91:cd:
57:44:38:2e:90:b1:50:c8:03:e4:b0:f0:2a:d4:45:d2:da:db:
95:09:f6:23:bb:06:5f:9c:f5:db:9a:50:8c:14:d0:9e:c0:3c:
28:8b:f7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:11:49 2025 by rpki-client