Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
File: tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft (raw, json)
Hash identifier: tS+amStBQtESMpGRoZvA3CwWrsMK/0D3hybGVBS/SKQ=
Subject key identifier: FC:3D:F6:E2:C1:D9:97:85:3C:50:89:1C:FF:E3:71:C6:83:EF:0A:D7
Authority key identifier: B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
Certificate issuer: /CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
Certificate serial: 0196760BF04B5AAA157D167D0548D04EA02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 07:00:15 +0000
Manifest this update: Sun 27 Apr 2025 07:00:15 +0000
Manifest next update: Mon 28 Apr 2025 07:00:15 +0000
Files and hashes: 1: tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl (hash: RbQqY1TmHB6mDFLPP4hVMh/W1Bhb1xCXDYpiPa9IVfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:f0:4b:5a:aa:15:7d:16:7d:05:48:d0:4e:a0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c2a31d60ed25611997e7b7de4a9b6f2606ed34
Validity
Not Before: Apr 27 07:00:15 2025 GMT
Not After : Apr 28 07:00:15 2025 GMT
Subject: CN=fc3df6e2c1d997853c50891cffe371c683ef0ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:d0:6c:85:99:3a:39:70:68:cc:50:f7:2f:
a3:11:c3:e4:ec:45:e4:ea:c2:52:03:d5:02:69:45:
4f:fb:90:80:c8:4f:72:58:32:c9:21:27:36:fc:4e:
f3:6b:13:91:75:28:73:e7:50:15:9d:ed:74:2e:fa:
66:05:4c:94:96:b5:da:f1:76:73:79:a0:d4:63:e0:
14:f2:80:31:c4:ef:8a:bb:ed:96:9a:77:7a:33:e1:
cb:35:78:db:9d:82:0f:bc:b7:3a:0d:87:43:2f:09:
3f:20:c8:b4:28:7b:49:08:3e:09:eb:d6:4f:57:31:
04:8a:df:79:28:44:24:7e:d8:26:ad:1b:41:dc:48:
08:d5:b5:61:23:6e:f2:35:32:42:88:f4:fb:97:f7:
17:03:80:5f:2e:eb:4a:72:bd:be:a3:7a:fc:89:fd:
37:70:2a:a5:51:c8:87:71:02:66:e0:05:5b:23:c8:
eb:f7:76:72:69:52:3b:87:4f:ad:eb:25:d3:5f:d0:
55:db:3e:d2:84:4c:f4:da:b5:ed:72:4c:c8:0d:2d:
16:e1:dd:fd:75:40:0a:d5:df:c1:6e:80:15:e8:b2:
e7:25:d0:7a:87:ba:77:37:e3:6f:7f:81:a5:7b:6e:
ad:de:21:e2:09:23:70:10:f6:c9:eb:88:92:32:be:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3D:F6:E2:C1:D9:97:85:3C:50:89:1C:FF:E3:71:C6:83:EF:0A:D7
X509v3 Authority Key Identifier:
keyid:B6:C2:A3:1D:60:ED:25:61:19:97:E7:B7:DE:4A:9B:6F:26:06:ED:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsKjHWDtJWEZl-e33kqbbyYG7TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8506a1-91dd-4cfc-8c04-6cdf0de52746/1/tsKjHWDtJWEZl-e33kqbbyYG7TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:43:86:27:81:a7:a0:6e:5f:d7:46:f0:b3:ef:53:06:fb:cd:
f7:b9:fe:bb:43:e5:4a:21:29:58:8b:21:4a:a2:0d:69:b4:06:
15:78:3f:c7:17:04:c1:c8:9a:4e:c3:fa:7e:76:f7:26:01:71:
26:02:87:f4:26:df:e4:04:b7:ce:2a:f1:dd:a4:20:59:99:b6:
8f:1d:56:7a:1a:d6:bf:7a:04:e1:fd:f5:7d:d2:45:2b:9b:9b:
4b:fb:39:5a:a2:d3:a7:af:e5:40:d7:c1:94:1e:b5:56:5e:06:
2d:ed:3a:e6:8a:83:ad:27:da:6f:72:c4:a7:3a:dc:49:a4:d8:
d1:9f:ae:20:b5:69:44:fe:c0:95:bd:be:ab:18:42:41:ae:61:
14:9f:c9:34:90:f3:3f:f2:80:e6:fb:fa:10:d0:bd:64:86:fa:
26:74:f3:1a:c2:7f:e5:2d:73:3a:91:eb:40:dd:48:40:44:9e:
f2:3c:39:09:64:d6:47:0c:de:c8:0d:9c:47:85:9d:b9:e6:b1:
73:7b:07:5c:15:b8:f3:34:10:b0:56:08:fc:d4:9f:7e:75:1e:
6b:50:da:ac:02:f8:e5:90:f7:b5:11:de:86:de:50:9f:7b:37:
86:e3:b6:c9:85:65:d4:7b:2d:49:4b:43:ad:c7:1c:94:df:5c:
60:68:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:41 2025 by rpki-client