Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
File: TgfHPboamfW7wV94xjkKqZwmmCQ.mft (raw, json)
Hash identifier: jJ6jRKxVTpH/WUUytF5x8fIBo87XDWOKuv9J0QLvBlI=
Subject key identifier: 98:48:37:A6:B9:65:40:7B:46:46:BD:56:BF:D6:2D:2D:79:DB:13:B7
Authority key identifier: 4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
Certificate issuer: /CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Certificate serial: 019694F2B2A6170700E03CFB1FA29313D3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
Manifest number: 12E6
Signing time: Sat 03 May 2025 07:00:55 +0000
Manifest this update: Sat 03 May 2025 07:00:55 +0000
Manifest next update: Sun 04 May 2025 07:00:55 +0000
Files and hashes: 1: TgfHPboamfW7wV94xjkKqZwmmCQ.crl (hash: Rq/ZAEPG+2uZseEgRUs5eB/JahsvkzXDJlatDb1SGZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:f2:b2:a6:17:07:00:e0:3c:fb:1f:a2:93:13:d3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e07c73dba1a99f5bbc15f78c6390aa99c269824
Validity
Not Before: May 3 07:00:55 2025 GMT
Not After : May 4 07:00:55 2025 GMT
Subject: CN=984837a6b965407b4646bd56bfd62d2d79db13b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:68:11:43:cc:92:ef:8c:b3:1e:6d:86:53:
ec:c5:43:57:de:6e:f3:38:65:b5:0d:80:94:b6:34:
e8:7b:ec:c6:16:1c:ca:c1:4d:66:c3:37:30:3a:bd:
6c:71:ec:14:73:54:21:1e:38:4f:fe:6d:6c:9b:29:
62:29:cc:34:80:23:5c:c7:31:07:3e:93:1f:ae:a4:
c4:70:67:5d:24:ed:aa:99:04:1c:0f:82:af:28:e9:
65:04:0a:11:20:26:fb:db:47:a8:75:cf:ec:6a:02:
f5:88:f9:14:74:ae:9d:07:30:ec:87:c4:3c:27:78:
28:ab:d9:44:d2:53:e8:e5:1d:34:54:09:09:1c:3b:
41:2c:17:cb:0d:31:35:7c:37:89:24:6f:42:c0:5d:
46:90:19:4b:63:45:27:bd:51:65:7b:cd:cb:b2:96:
86:2b:96:8d:fd:04:c0:29:f5:b0:2a:e9:a5:5c:c8:
3f:e2:77:a4:c0:ce:e3:8d:b9:3a:7b:09:3f:ea:dd:
45:67:6b:03:8e:4c:9f:33:fa:fb:c6:69:17:76:75:
5f:41:b5:04:c5:78:9d:45:95:51:36:c0:07:12:b8:
4f:51:52:26:c0:1a:4d:10:74:e9:88:8a:fa:d0:24:
30:5b:dc:3e:44:ba:df:69:0d:79:f3:3a:29:d9:7d:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:48:37:A6:B9:65:40:7B:46:46:BD:56:BF:D6:2D:2D:79:DB:13:B7
X509v3 Authority Key Identifier:
keyid:4E:07:C7:3D:BA:1A:99:F5:BB:C1:5F:78:C6:39:0A:A9:9C:26:98:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgfHPboamfW7wV94xjkKqZwmmCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1f1e7b-5907-48c1-90fd-5602712baa5b/1/TgfHPboamfW7wV94xjkKqZwmmCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:88:dc:a9:7a:b9:94:f7:ff:22:ee:0d:0d:ee:46:91:45:a6:
92:c5:e4:3c:0f:8d:31:8f:62:fc:1e:84:60:a3:2a:72:29:14:
78:c9:6a:34:57:c2:71:5d:ed:4b:98:f0:40:18:d6:0a:2a:21:
74:97:ed:5d:33:27:af:b8:d0:a7:f6:c7:f9:14:e7:28:df:4c:
99:d4:81:a2:ae:e2:61:e8:6b:40:c7:1c:14:c8:a5:0c:75:14:
13:e3:0d:2e:7c:bd:3a:d3:d7:52:d7:8b:42:3d:29:3c:27:24:
eb:49:a3:8d:31:51:05:cd:0f:34:d8:e6:04:b2:d4:a5:e8:31:
8d:cd:ea:f1:de:6b:83:fb:60:43:a9:bb:db:2e:17:5e:aa:1e:
78:41:3d:a0:d9:d6:9a:ee:84:97:18:b3:bc:63:27:f2:eb:db:
a0:9e:24:c4:74:58:23:84:75:93:9c:44:cc:f0:bd:a8:62:8d:
17:cd:44:c7:b1:3c:3c:97:b9:5d:90:dd:e7:b8:9a:e3:24:b0:
d1:e3:72:9f:a2:23:db:50:3e:93:cb:cb:90:4e:34:7c:77:ad:
ac:76:ff:2b:54:a5:be:99:0a:b4:5c:69:30:00:e0:21:de:37:
68:c0:fc:18:65:6b:0f:bf:0d:09:cf:fe:12:ad:d5:2b:73:50:
88:c4:0a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:18:54 2025 by rpki-client