Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
File: tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft (raw, json)
Hash identifier: 5GAMqL2ncdrPhWP8hyUpXA6qcU8XXFowdl5DVP4Soqk=
Subject key identifier: 77:1C:B7:E6:0D:66:4E:71:AA:3D:C6:EB:E3:FE:A7:D4:21:38:CD:DF
Authority key identifier: B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96
Certificate issuer: /CN=b605d1901c571100b89a5c48c3a7065784157196
Certificate serial: 0196821044EBC6F747DDE7855A2052C1BB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
Manifest number: 077A
Signing time: Tue 29 Apr 2025 15:00:26 +0000
Manifest this update: Tue 29 Apr 2025 15:00:26 +0000
Manifest next update: Wed 30 Apr 2025 15:00:26 +0000
Files and hashes: 1: tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl (hash: z1WlsPEkw4bH90kPZcZDIM69gia3qzX/vicXZ72pS9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:44:eb:c6:f7:47:dd:e7:85:5a:20:52:c1:bb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b605d1901c571100b89a5c48c3a7065784157196
Validity
Not Before: Apr 29 15:00:26 2025 GMT
Not After : Apr 30 15:00:26 2025 GMT
Subject: CN=771cb7e60d664e71aa3dc6ebe3fea7d42138cddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:10:20:8a:7f:f5:b6:24:d7:db:62:9d:d0:
af:42:d0:d3:08:74:7d:aa:8c:70:27:59:54:5c:a7:
8e:f3:d8:4a:29:19:49:13:79:8c:75:fd:7a:ee:ff:
b1:e1:a0:12:2b:45:ac:6c:27:e3:27:e1:31:cf:0a:
b8:b0:16:9f:56:05:2e:7b:61:27:80:1e:41:76:e8:
fa:a7:5f:8d:1c:8f:31:87:bc:c4:83:0c:6f:0f:0c:
cd:d4:12:e7:99:3a:fb:a8:f9:c8:7a:eb:58:7c:1d:
06:b9:49:9f:11:33:a9:42:18:e4:bc:ed:c6:5a:52:
00:e8:c7:57:0e:ab:fa:78:7e:9c:e4:7b:8d:0e:bb:
ed:26:db:38:6d:4f:f7:38:28:54:30:26:f0:c7:79:
da:48:bc:a4:db:8a:2b:10:a3:ee:b9:68:c9:0a:14:
d2:ed:a9:d3:57:b3:43:ea:6e:24:29:06:af:e7:42:
fa:03:28:c4:62:d3:0b:20:62:69:d6:96:d9:6e:5c:
02:0d:38:c5:5d:a7:52:c9:23:ad:28:bf:ee:d9:5f:
5a:12:7a:59:a0:0c:4d:ee:f2:9b:b9:98:cf:91:c5:
bb:0b:57:05:10:94:8f:67:4b:4f:d0:58:08:a8:6a:
0f:c9:1d:32:83:12:49:7f:4c:f3:65:4d:6d:4d:92:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1C:B7:E6:0D:66:4E:71:AA:3D:C6:EB:E3:FE:A7:D4:21:38:CD:DF
X509v3 Authority Key Identifier:
keyid:B6:05:D1:90:1C:57:11:00:B8:9A:5C:48:C3:A7:06:57:84:15:71:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgXRkBxXEQC4mlxIw6cGV4QVcZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/90080a-312e-47d3-b6ca-e8ec05c9327d/1/tgXRkBxXEQC4mlxIw6cGV4QVcZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:be:de:32:0e:e6:4b:a7:86:e8:7f:79:d7:b8:b9:3a:66:86:
18:6b:d2:d1:d2:b7:e5:15:be:05:29:2b:f8:c9:e5:0a:a0:e4:
57:53:67:b9:ca:3a:ec:5a:cd:6f:59:d9:94:71:74:09:c0:04:
0c:d1:4a:36:f2:f9:17:4f:89:6b:fc:23:e7:0d:9c:fe:df:8b:
bf:ca:04:f6:8c:0b:2b:55:40:8c:19:fc:a8:26:17:c0:17:aa:
80:d1:ea:d7:2c:51:59:40:ce:1e:f7:1c:46:71:3a:8a:06:08:
0a:6b:52:fd:2f:df:7c:88:f5:eb:57:74:87:b2:30:6e:f6:e0:
d4:2a:de:54:9d:69:11:d0:38:68:ab:e6:2f:76:3a:b1:74:f3:
94:12:c4:36:55:f6:e5:97:23:5c:7e:3d:e4:b5:23:42:dc:bb:
fe:52:b3:9c:2c:34:54:79:43:3b:12:07:f8:f9:8e:5a:47:a0:
2a:4c:7a:bf:71:00:0a:1f:b5:d0:94:41:40:93:0e:6e:7d:e8:
0c:b9:28:49:fe:53:61:dd:36:8b:ae:c4:13:03:c3:5b:d2:32:
ff:33:ec:8f:04:98:53:7b:32:15:27:28:81:9b:d3:11:96:94:
0b:42:17:65:bd:b1:8d:ce:ef:6f:64:1f:26:f9:99:ff:cf:a0:
96:31:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:53:40 2025 by rpki-client