Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
File: TaktycvByBxzpp8xWlMbR_ROPFQ.mft (raw, json)
Hash identifier: b5W8qypO+iLgHeS7cIicWFAJULRbln/wx/1V8cpQg9g=
Subject key identifier: 69:50:E9:6B:BD:BA:EE:F5:FC:B6:68:4A:62:E4:E0:6B:23:26:30:23
Authority key identifier: 4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54
Certificate issuer: /CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54
Certificate serial: 0196760C54C91B7B26F7373E888341E8D421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
Manifest number: 0626
Signing time: Sun 27 Apr 2025 07:00:41 +0000
Manifest this update: Sun 27 Apr 2025 07:00:41 +0000
Manifest next update: Mon 28 Apr 2025 07:00:41 +0000
Files and hashes: 1: TaktycvByBxzpp8xWlMbR_ROPFQ.crl (hash: TVw3zhI7/yU7P3OKz+tPmaTU+TueX8MHYRyCYA4QAZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:54:c9:1b:7b:26:f7:37:3e:88:83:41:e8:d4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da92dc9cbc1c81c73a69f315a531b47f44e3c54
Validity
Not Before: Apr 27 07:00:41 2025 GMT
Not After : Apr 28 07:00:41 2025 GMT
Subject: CN=6950e96bbdbaeef5fcb6684a62e4e06b23263023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6b:0d:ec:42:9b:d4:76:d3:3a:0a:63:fa:2f:
8c:64:d2:28:b9:ee:d1:b2:e4:f9:f7:f8:c8:b1:32:
e7:de:a9:5a:29:a4:82:67:aa:82:85:99:48:df:25:
b7:d6:ba:c1:13:1a:b5:07:8b:5b:c2:76:64:ad:08:
6b:da:17:01:c0:ad:0f:0e:21:3d:6a:19:a4:d9:d9:
14:77:ef:21:3f:1e:e4:33:7e:11:7f:9b:77:79:fe:
d1:68:07:8a:72:75:41:8e:b2:02:34:6f:d6:d3:cb:
1c:91:dc:a2:34:ca:f5:bc:ff:d0:60:d3:97:b4:be:
ee:7b:ef:fb:b3:8a:5c:96:ba:b1:7f:c1:cd:91:6c:
09:3f:a9:b9:c7:a8:cf:83:b9:fc:bd:b6:f1:2c:5d:
3c:fb:0f:ab:21:f3:50:b8:27:89:fc:80:06:0c:7a:
4a:e2:7f:e9:7d:d6:ad:b2:b6:9b:fe:c2:5e:88:cd:
df:d7:60:c7:0b:35:c9:80:57:f0:8f:30:e9:ef:57:
96:58:1a:37:3c:09:aa:96:6a:01:3d:2a:93:0c:70:
2b:44:71:6b:a8:2c:53:7f:be:75:dd:c4:35:e1:df:
01:17:51:14:71:9c:0b:93:f2:a7:f9:1a:86:3c:ff:
e0:3b:63:d6:34:5f:2d:f0:5e:df:4f:9a:ba:ae:b5:
a2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:50:E9:6B:BD:BA:EE:F5:FC:B6:68:4A:62:E4:E0:6B:23:26:30:23
X509v3 Authority Key Identifier:
keyid:4D:A9:2D:C9:CB:C1:C8:1C:73:A6:9F:31:5A:53:1B:47:F4:4E:3C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaktycvByBxzpp8xWlMbR_ROPFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c5674e-db61-4722-b922-535be275e6f5/1/TaktycvByBxzpp8xWlMbR_ROPFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:13:59:2e:bf:b7:10:82:73:d0:ad:98:46:1d:e3:70:7d:8a:
7e:0c:40:85:7c:b2:55:ee:db:e8:fd:db:c2:49:70:a1:07:83:
3c:e4:af:10:46:11:a4:23:d9:1f:6f:97:20:7f:1e:b6:fc:c1:
cb:ba:80:ae:4d:b1:bf:75:7d:38:be:61:d9:62:b1:24:c2:b8:
da:03:cc:c1:cc:a1:5c:c3:32:c1:8d:21:a7:71:90:3c:a3:93:
a7:d1:8a:ad:ee:7e:5a:37:74:54:c4:a6:c1:04:01:ca:c2:44:
01:37:63:16:d6:98:31:f7:7e:d0:c8:e5:6f:c5:2f:80:ea:5d:
3c:97:04:68:b0:7c:21:03:6d:26:9f:15:b8:e3:97:0f:a8:88:
68:8a:f5:37:f2:41:c9:76:40:2e:c2:ea:98:62:d0:08:c8:14:
e6:3b:f8:29:cf:ae:b5:45:4a:bd:e6:e8:72:fb:75:6b:e2:c9:
e4:11:d3:67:10:9e:89:e0:02:d7:4c:c0:3d:48:1c:97:ba:2b:
8d:35:84:52:eb:37:51:a8:08:42:b8:3a:b9:89:6a:2d:21:3f:
ed:05:0c:5c:4f:37:18:ed:ff:69:80:f5:a1:df:69:66:89:c6:
70:59:0e:52:43:53:58:6d:92:bf:9e:5b:0d:30:d4:ed:9f:15:
cc:ad:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:25 2025 by rpki-client