Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
File: tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json)
Hash identifier: UM9lqJopjjQRH42C6NL47OfPW9HLi+CWsp5gb4KZ1Q8=
Subject key identifier: A6:B2:B8:E8:C8:A4:2F:92:7C:ED:8A:58:FD:AC:65:7C:46:B0:A1:E8
Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
Certificate issuer: /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Certificate serial: 01967F46428D04FCE75B85996DC460617F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
Manifest number: 026E
Signing time: Tue 29 Apr 2025 02:00:33 +0000
Manifest this update: Tue 29 Apr 2025 02:00:33 +0000
Manifest next update: Wed 30 Apr 2025 02:00:33 +0000
Files and hashes: 1: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: tKdhQOtpXE3fnr2rkITPP7EEe+X3fCxlwIXS6L7jQa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:42:8d:04:fc:e7:5b:85:99:6d:c4:60:61:7f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Validity
Not Before: Apr 29 02:00:33 2025 GMT
Not After : Apr 30 02:00:33 2025 GMT
Subject: CN=a6b2b8e8c8a42f927ced8a58fdac657c46b0a1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:f0:9a:02:b1:76:fc:3f:8b:a4:39:25:a3:
e9:2d:ae:da:3b:88:43:83:5c:ff:d3:a9:81:37:ae:
79:73:11:f7:7c:ae:d7:53:2a:b5:dd:23:64:13:a1:
a2:af:ef:14:51:f0:b2:03:c6:a7:0d:e0:45:41:76:
d2:b5:5b:12:50:07:87:0b:26:79:93:a7:c8:a3:bc:
f3:8b:fd:48:06:e5:64:e5:e5:1d:73:58:fc:98:c7:
fb:63:28:c0:2b:da:cf:74:a3:8f:63:66:82:19:02:
8d:a5:3d:3e:69:10:bd:88:47:30:1a:a3:8e:1b:4c:
f4:c8:bb:f0:07:5e:ad:74:75:7c:ed:fa:3d:68:7b:
74:13:6f:68:91:b0:3c:65:23:b8:a9:ba:79:57:8f:
cc:f7:4d:5e:a9:44:ae:c5:bc:68:4e:11:3b:7b:2d:
57:20:11:4d:c2:53:ff:f6:ce:14:65:79:76:5a:ac:
d6:0a:6a:e1:8c:27:f8:85:3a:43:da:69:37:59:cd:
0e:eb:22:d2:2a:17:ff:d7:72:81:dc:b8:85:0d:d5:
2f:98:32:d9:62:48:17:20:c9:bc:a2:41:27:8c:79:
7c:38:38:6f:21:ec:d9:cf:8a:2c:df:48:d8:36:12:
20:bf:97:d4:82:62:a4:74:fd:4b:46:2a:3b:7a:9c:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B2:B8:E8:C8:A4:2F:92:7C:ED:8A:58:FD:AC:65:7C:46:B0:A1:E8
X509v3 Authority Key Identifier:
keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:66:e5:d6:ff:af:de:33:a4:49:09:46:f7:f6:ad:17:5a:3b:
ab:c8:a5:96:5d:df:16:02:4e:f2:fd:02:d1:bf:f6:7e:4f:dc:
72:dc:a4:aa:45:da:c4:97:63:13:b5:39:49:78:db:93:12:c1:
a4:65:29:bf:42:74:58:d7:4b:89:1a:a2:9c:43:77:3d:39:5b:
fa:d3:7e:1d:a4:87:82:25:8a:da:e6:5c:bf:88:dd:b4:29:5a:
9d:7d:29:2b:31:4b:2c:88:2c:9a:2d:7c:74:a9:13:d8:75:6a:
f2:11:81:38:0b:7c:c9:18:a9:cb:4a:ec:23:6e:c2:8f:46:98:
ea:89:27:2d:90:21:51:ef:d4:5e:85:2a:5a:c7:55:ca:67:29:
23:95:2b:55:85:ce:1c:a0:7f:d5:bc:0d:e3:ac:f9:d6:4b:18:
cc:2f:e6:e8:28:29:9f:6f:86:a4:ac:62:c6:ad:8b:4b:5d:fe:
67:36:5c:bc:23:77:17:10:6c:c0:74:64:57:23:f9:06:0c:53:
d0:cd:44:d1:39:54:0f:f1:d2:cd:91:a5:32:ab:8e:e9:8a:98:
1f:21:43:9e:b6:a8:67:9f:9e:28:e8:e7:82:c6:71:a0:39:58:
2c:33:47:c1:11:d9:44:c3:41:9a:61:d6:2d:10:55:41:d0:2c:
63:ed:3e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:09:22 2025 by rpki-client