Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File: tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier: MAO9BzPXHTUbc30Hsyog5Jtawv8RamDCrzqqMcRyHs4=
Subject key identifier: 47:61:1B:AD:DA:85:8D:D6:85:4D:95:A8:3D:C3:73:6B:A3:7F:D6:54
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer: /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial: 01967FB4BE43DB7F36A18252FE8232D4C192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number: 0761
Signing time: Tue 29 Apr 2025 04:01:13 +0000
Manifest this update: Tue 29 Apr 2025 04:01:13 +0000
Manifest next update: Wed 30 Apr 2025 04:01:13 +0000
Files and hashes: 1: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: sWymTdWgL5bVHR991XQUYH6xI1457Oq/V2C4110C8OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:be:43:db:7f:36:a1:82:52:fe:82:32:d4:c1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Validity
Not Before: Apr 29 04:01:13 2025 GMT
Not After : Apr 30 04:01:13 2025 GMT
Subject: CN=47611badda858dd6854d95a83dc3736ba37fd654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:a3:65:53:e8:6a:72:3c:9b:ac:c6:3a:35:
52:20:da:5b:2f:c4:97:23:90:e6:6c:c2:7a:35:1e:
cb:98:b0:94:11:fa:67:58:2e:78:b9:25:27:d2:e5:
ff:e8:ae:a8:af:c1:ac:d5:c6:cb:26:08:4c:7e:f6:
29:b0:4d:e0:ba:9c:ee:b7:59:a9:a7:b0:04:2e:ba:
9a:01:12:32:d1:db:9c:8b:c8:b8:4f:90:05:c9:30:
a9:f5:b7:b2:ca:2c:d8:00:94:b3:fc:28:89:e4:bb:
34:b1:23:62:3f:75:40:06:d3:d8:9a:a3:5b:21:ac:
79:4b:b1:69:d3:ae:c7:6f:d1:66:84:92:1a:36:02:
47:96:d8:a8:4f:12:87:f1:98:ae:c2:65:15:e3:52:
16:2a:32:d4:bd:15:30:be:50:3a:34:56:b1:50:ba:
27:b5:cf:f4:d9:f5:99:0b:f3:90:b7:ed:6a:38:2e:
f1:0a:d0:c6:dd:f7:61:2f:f5:bc:28:2d:af:c7:cf:
31:ef:2c:0b:00:66:d5:d1:14:69:e5:01:e3:1a:42:
14:80:8d:0b:34:03:0c:d4:36:84:d8:e8:8c:67:2d:
a4:5e:d0:16:7a:cf:43:4f:de:5a:f7:88:75:fd:61:
5c:50:05:c4:b1:76:84:c0:dc:75:7f:d5:7d:12:ac:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:61:1B:AD:DA:85:8D:D6:85:4D:95:A8:3D:C3:73:6B:A3:7F:D6:54
X509v3 Authority Key Identifier:
keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:25:ca:9f:bb:5c:70:05:7c:4d:fd:57:92:c5:db:66:c8:5c:
0d:04:44:0b:7f:f9:a1:6b:d1:fa:66:83:81:03:52:38:50:a7:
ea:6e:c1:4f:35:2b:95:72:19:12:41:71:f0:ca:88:bf:e7:0d:
a9:1c:dd:22:c9:55:b7:57:49:e3:e7:44:d3:27:3e:7f:fc:da:
37:4a:44:59:43:b1:04:29:ef:88:fb:c3:69:4a:cb:97:41:1a:
19:5a:fa:73:5d:02:c8:bb:85:7c:d6:aa:d7:77:7c:37:99:fe:
78:d6:ee:b8:84:9b:dd:13:09:e9:aa:aa:f4:b2:7d:96:fc:9c:
04:e5:3e:64:36:00:71:2a:cd:91:5f:d1:57:e1:9c:54:b2:b6:
f1:8c:2f:00:b6:95:91:53:44:03:81:a4:f1:fe:ba:2f:19:a4:
40:cd:2b:bf:01:28:a2:8f:62:ef:47:88:dd:90:33:ba:b3:22:
72:5b:6c:08:78:df:b1:94:f8:5f:1a:a3:2d:7a:e1:8d:b9:f8:
51:d4:01:45:9c:ec:be:91:77:37:5b:26:3f:7b:e9:32:dd:9f:
5e:38:52:f1:51:60:b8:b0:f4:28:e1:10:f5:01:5a:8c:61:d2:
c2:64:d9:e3:98:9e:55:35:5f:90:d8:1c:0e:b4:1c:d6:68:25:
23:8a:c9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:30:01 2025 by rpki-client