Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
File: TUQhxgZa4gAa_NgtotDbIRISRag.mft (raw, json)
Hash identifier: +855Y370cXCAC2Q7DwogDpGY9yNPBHHANYVBqO7P0MY=
Subject key identifier: 23:DF:3D:37:12:CE:7D:49:6B:9A:B4:06:E5:36:A4:22:DB:6B:28:C0
Authority key identifier: 4D:44:21:C6:06:5A:E2:00:1A:FC:D8:2D:A2:D0:DB:21:12:12:45:A8
Certificate issuer: /CN=4d4421c6065ae2001afcd82da2d0db21121245a8
Certificate serial: 0196760C556C033487B2DE9FD1C6A8FB9B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
Manifest number: 02BA
Signing time: Sun 27 Apr 2025 07:00:41 +0000
Manifest this update: Sun 27 Apr 2025 07:00:41 +0000
Manifest next update: Mon 28 Apr 2025 07:00:41 +0000
Files and hashes: 1: TUQhxgZa4gAa_NgtotDbIRISRag.crl (hash: liX6LWucvbw0dxPVUE0HotTp9iXZyP1gxT8UoPlTdBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:55:6c:03:34:87:b2:de:9f:d1:c6:a8:fb:9b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4421c6065ae2001afcd82da2d0db21121245a8
Validity
Not Before: Apr 27 07:00:41 2025 GMT
Not After : Apr 28 07:00:41 2025 GMT
Subject: CN=23df3d3712ce7d496b9ab406e536a422db6b28c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:69:85:35:c9:11:1b:bd:7c:68:f8:67:ab:
60:10:4b:eb:8e:92:2b:a3:32:07:f3:22:3c:f6:13:
9e:93:c2:15:c0:fd:a3:50:45:c7:47:cc:bb:2a:db:
dd:5b:b2:d1:ba:28:d7:b1:16:b2:4f:ea:c8:df:5c:
9e:79:55:27:dd:1d:ff:05:6c:29:55:7d:e9:b4:7d:
e8:23:c2:98:bd:e8:82:12:5f:78:49:29:f8:17:c6:
27:9c:9e:5a:28:a5:a2:8c:8c:69:c8:0c:08:01:a4:
45:b8:e9:d1:82:b4:40:49:3f:fb:13:bd:97:0e:d7:
93:bf:31:da:d5:3d:f9:6c:bd:59:11:3e:2b:42:a4:
ee:90:e4:1c:ee:f4:6a:16:f6:9d:d3:55:71:5a:19:
f7:06:06:a7:8d:bf:13:eb:08:3d:ef:08:4a:b8:1f:
52:bd:db:1d:0c:3b:76:7e:8d:85:9e:95:d9:5d:57:
06:bb:74:87:06:ca:39:af:92:6f:cb:0f:ad:bc:29:
06:e8:99:8d:90:95:73:29:c1:41:7c:17:bc:c9:f4:
d9:53:9f:91:a9:5d:45:00:99:7f:69:d9:89:70:c5:
a9:b7:42:eb:a5:14:44:a7:09:fe:f4:c2:e1:b2:07:
b9:92:32:f5:76:43:b8:48:b9:19:bf:27:97:e3:7b:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:3D:37:12:CE:7D:49:6B:9A:B4:06:E5:36:A4:22:DB:6B:28:C0
X509v3 Authority Key Identifier:
keyid:4D:44:21:C6:06:5A:E2:00:1A:FC:D8:2D:A2:D0:DB:21:12:12:45:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2f:79:1b:5a:b7:51:83:6b:e1:8d:c9:d3:f1:36:70:17:d6:
56:5a:16:ca:6a:cf:14:b9:8a:32:ab:e1:93:36:3f:59:00:9b:
83:b5:e6:a6:ea:a8:5d:ab:50:90:c1:0e:d3:c8:65:ff:a7:31:
7a:30:53:a9:6c:f2:a0:e9:00:d2:fc:f8:54:f5:5f:9e:46:81:
1f:1c:5b:dd:cc:f5:b6:d9:21:0f:06:fd:32:45:1a:7c:75:c4:
94:4e:57:5c:4d:0b:13:e5:17:13:04:0e:ed:53:69:42:6f:58:
75:b1:63:6f:5f:ff:69:5b:79:0f:f9:ee:ca:5b:b7:7b:ae:39:
e2:06:ac:6f:73:2a:13:83:63:b5:ca:b0:71:d1:f3:3d:a0:cf:
88:37:b6:bf:33:1f:20:66:8e:5e:e5:3c:e6:73:c9:f8:b3:42:
dc:ad:8d:f7:6d:16:10:d6:6e:57:d9:3d:3e:b1:21:4d:6b:8c:
3d:db:b7:be:b2:58:41:24:d7:1a:57:68:b1:9a:46:84:d2:cd:
d9:b9:ac:de:a8:75:5f:1c:7e:bf:f6:74:ce:fc:7c:8c:06:6f:
fe:1d:99:4c:9a:50:16:3e:32:70:b6:23:bc:e9:fc:94:23:3d:
02:53:68:a2:2b:65:28:c6:3f:e1:73:7c:1b:d2:31:29:0c:29:
34:c7:1e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:08 2025 by rpki-client