Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier: oAZ3CefOyCrwWSHU60p1VnYTp3yk6KRWiRompoulqfw=
Subject key identifier: 97:98:43:23:91:A7:54:19:86:BC:78:C8:BB:AF:4A:08:DF:11:52:D7
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial: 01967FB485D785EA160A62DC2D04C5EE1AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number: 1510
Signing time: Tue 29 Apr 2025 04:00:59 +0000
Manifest this update: Tue 29 Apr 2025 04:00:59 +0000
Manifest next update: Wed 30 Apr 2025 04:00:59 +0000
Files and hashes: 1: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: QdhxmRM5gkKDuFI7qaW/UwPzJgSPMW4Idca9GMMauW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:85:d7:85:ea:16:0a:62:dc:2d:04:c5:ee:1a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Validity
Not Before: Apr 29 04:00:59 2025 GMT
Not After : Apr 30 04:00:59 2025 GMT
Subject: CN=9798432391a7541986bc78c8bbaf4a08df1152d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:91:69:05:51:4c:30:53:51:3f:d8:ee:95:
63:a5:c3:fa:11:b7:7d:6a:a0:f0:3b:67:19:cb:7c:
ef:d2:94:92:0a:9f:4d:4f:68:13:f2:a7:98:7f:de:
52:ef:36:4f:e2:ef:41:9f:43:95:97:41:0e:d9:54:
c6:80:06:05:b2:7f:1e:39:d4:30:1d:ce:1e:7c:69:
7e:f1:33:22:a9:d6:05:62:7e:42:cb:56:40:0e:9a:
c4:31:0c:50:a9:c7:9d:76:f2:ea:01:c9:90:f3:b7:
84:85:0d:a9:12:28:d8:49:1d:f1:f7:55:bf:05:18:
17:d1:f2:9b:66:b0:7e:8c:1b:d0:8a:4a:aa:99:2c:
c5:44:95:b4:f4:8e:cb:b8:6a:e5:ef:35:95:c0:eb:
fb:13:6d:74:e3:15:2b:9d:0b:01:53:98:8d:c8:0b:
d0:b5:3f:d9:f3:30:eb:21:b8:79:7e:bd:d6:be:d1:
68:03:0f:9c:ce:a1:7b:a5:c2:fa:21:40:4f:96:8c:
8d:7d:47:a8:2e:1e:5c:a3:cc:71:e5:09:ad:b2:2d:
68:a6:d6:57:c2:d7:37:76:e5:44:6d:46:03:b9:3b:
ea:ca:b9:63:97:0e:d0:08:5c:27:7e:c6:1d:6d:a4:
41:ea:a3:e0:9c:c6:65:54:51:76:e5:cd:41:35:23:
85:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:43:23:91:A7:54:19:86:BC:78:C8:BB:AF:4A:08:DF:11:52:D7
X509v3 Authority Key Identifier:
keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b5:4b:ca:21:8d:b7:7a:c1:1b:78:fd:8b:f7:9f:47:a9:8c:
09:33:23:72:b3:f9:82:5f:d2:50:88:98:31:6a:13:5e:e5:2c:
e3:51:c6:4f:b6:5e:04:82:09:7b:74:86:c7:97:e5:02:e5:15:
83:13:5b:fb:04:27:24:ca:c7:51:3d:90:81:6b:e7:e1:c5:9b:
92:a2:58:06:54:58:49:3e:4b:1e:9b:2c:16:dd:be:39:9f:a4:
61:55:d5:08:f9:f2:9b:ca:fc:9b:ad:4f:62:f5:85:b5:0c:f2:
ff:b9:c4:8e:19:20:1e:7a:76:3f:20:f8:39:32:8f:27:9e:d0:
0a:27:ce:61:e0:0c:c6:85:2b:53:3c:ed:33:31:44:bf:64:5a:
ca:68:fd:dd:1d:a2:42:c5:7a:65:25:2b:ad:fe:ef:b1:07:c9:
82:e1:6e:9e:38:78:d1:b4:b5:3c:3d:60:1b:89:86:5e:69:10:
90:1b:e9:e1:0d:df:c9:19:55:22:d4:d5:37:7d:a2:c8:f2:df:
93:42:a1:a2:39:54:24:e3:18:a0:97:f3:a3:4b:4f:be:48:70:
80:00:b6:12:e5:2e:03:f4:31:3f:04:c8:09:a5:95:24:65:0f:
88:9c:e5:db:e4:e3:5b:86:74:dd:48:87:70:78:d7:a1:9e:b6:
2f:79:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:06:50 2025 by rpki-client