Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
File: 24tcHuy6hgz_8XR5ZtdjyagvbZo.mft (raw, json)
Hash identifier: RTp27xZ1Iw4IFAILMRijmRMe+zLfuLtOQshbOPMJXGQ=
Subject key identifier: 77:1D:4A:3B:CA:C6:D9:F4:E7:1F:A1:3A:A8:36:B4:5E:50:CB:0B:91
Authority key identifier: DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
Certificate issuer: /CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Certificate serial: 01967868C92B16ACE4B09A83322B0C268905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 18:00:55 +0000
Manifest this update: Sun 27 Apr 2025 18:00:55 +0000
Manifest next update: Mon 28 Apr 2025 18:00:55 +0000
Files and hashes: 1: 24tcHuy6hgz_8XR5ZtdjyagvbZo.crl (hash: YS5xzT6JiUPh4Luf+XEMvPNnOI1wJIcULSXr/RMlF/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:c9:2b:16:ac:e4:b0:9a:83:32:2b:0c:26:89:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8b5c1eecba860cfff1747966d763c9a82f6d9a
Validity
Not Before: Apr 27 18:00:55 2025 GMT
Not After : Apr 28 18:00:55 2025 GMT
Subject: CN=771d4a3bcac6d9f4e71fa13aa836b45e50cb0b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:d7:4e:bc:81:d3:29:02:95:9a:d7:cb:ce:
82:2f:aa:22:da:5b:23:b3:98:6b:26:fc:4c:f5:91:
f4:5d:69:7e:0f:49:96:da:d7:96:23:a3:bf:24:97:
34:d3:3b:8e:76:9c:4b:26:69:37:6c:dc:5d:25:6e:
7e:85:4d:b1:67:6a:33:4d:c0:88:56:95:d0:59:d0:
2e:cb:95:03:11:66:5a:37:ec:6b:fa:cd:85:b5:cd:
4a:b9:bf:92:0c:04:4c:e4:36:f9:71:a3:4b:f0:21:
64:bc:29:93:71:d2:bb:67:57:fa:6f:fc:3e:13:fc:
e2:31:7f:9a:71:11:ab:22:ec:91:be:16:bd:37:dc:
86:b7:de:e1:21:a6:aa:00:4e:6c:d2:4f:05:13:4b:
dd:ab:b6:6f:8d:3c:04:f5:39:bf:c8:b9:83:df:2b:
dc:eb:99:c5:51:af:3d:98:35:36:e4:bf:54:a0:2c:
dc:8c:db:10:ae:78:12:5c:6b:8f:e0:68:bd:e3:e1:
f6:58:b9:76:05:6d:cf:a5:22:0a:72:af:f7:77:3e:
8f:1f:1f:2a:8d:b5:39:84:15:cf:c0:37:ec:bc:f9:
57:e1:d9:0a:95:4d:ca:94:33:c3:47:98:6f:7d:ed:
10:a6:31:c7:6f:d0:49:22:2f:1f:57:a6:23:f2:9e:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1D:4A:3B:CA:C6:D9:F4:E7:1F:A1:3A:A8:36:B4:5E:50:CB:0B:91
X509v3 Authority Key Identifier:
keyid:DB:8B:5C:1E:EC:BA:86:0C:FF:F1:74:79:66:D7:63:C9:A8:2F:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24tcHuy6hgz_8XR5ZtdjyagvbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/863b0c-b1ac-4d7c-abc2-fb6f037a287e/1/24tcHuy6hgz_8XR5ZtdjyagvbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:14:23:5a:a9:13:b5:92:d5:42:39:5a:d6:61:21:32:af:af:
67:f8:a0:66:5f:f6:59:b0:be:8b:c2:ce:40:6d:ea:68:69:2a:
b1:5f:8a:99:ac:14:3b:02:ae:d7:56:a5:c1:70:76:58:3c:13:
96:62:bf:21:bd:70:b5:7d:14:fc:85:4e:ff:cf:af:1d:d2:ba:
f9:b7:86:4d:b8:0f:aa:d8:dd:42:e4:e9:97:f2:5b:7c:83:36:
1a:5b:ec:e7:a0:91:ac:85:d7:c2:ba:74:82:f1:ab:41:81:78:
44:c0:4b:c4:11:8b:b8:8f:f4:bf:c2:29:90:ce:15:ca:8f:a7:
52:c8:ef:0c:51:5e:be:5a:57:68:34:08:23:7a:de:b8:39:1b:
09:63:b6:89:ec:05:6e:fb:bb:3f:f6:b9:15:90:7b:4c:15:54:
7e:ca:17:5e:61:b0:9e:fe:6f:cb:88:7e:1c:b4:0f:79:fb:fe:
74:08:60:92:7e:4a:c6:6f:ce:aa:fb:ab:bc:28:1b:69:ff:bb:
00:1e:09:c1:57:5f:59:73:c0:7a:21:bc:37:d1:40:3c:fb:2b:
ca:db:8a:9b:19:3b:5a:05:37:81:ba:50:3f:e8:a7:52:0f:ba:
26:2c:10:30:49:53:46:41:66:6e:21:9b:04:fa:e2:1d:c2:a2:
c2:25:59:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:05:21 2025 by rpki-client