Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier: aiWG1QMxDWmHZltbrggoD0hI0nNB+ljpyLCe05N6m4k=
Subject key identifier: 36:F7:C6:72:C9:F5:A6:6F:EA:BD:F4:76:A3:DF:82:72:D0:3E:5E:4D
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 0196748BDB3B1091A93050CF7F32725D33CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number: 150A
Signing time: Sun 27 Apr 2025 00:00:44 +0000
Manifest this update: Sun 27 Apr 2025 00:00:44 +0000
Manifest next update: Mon 28 Apr 2025 00:00:44 +0000
Files and hashes: 1: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: LShcYmusgxl/gvS3NmKrHxhV2f7YfOzx7JG3c1hEkiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:db:3b:10:91:a9:30:50:cf:7f:32:72:5d:33:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Apr 27 00:00:44 2025 GMT
Not After : Apr 28 00:00:44 2025 GMT
Subject: CN=36f7c672c9f5a66feabdf476a3df8272d03e5e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:ae:68:f4:e6:33:46:13:bf:d8:d9:b8:c4:
4b:81:01:64:37:b0:d9:d9:42:37:88:a2:9a:2b:db:
38:e8:17:51:17:44:4f:e3:4c:5e:9b:5d:36:88:83:
cf:b1:b2:ca:1d:4a:92:87:f2:16:bf:ac:d9:a6:ad:
7e:c7:00:25:f8:90:0e:c3:03:61:c5:ba:31:6c:19:
d9:d5:61:b8:fd:ed:45:3a:9d:d7:d0:05:73:f3:85:
3e:18:54:bc:3b:48:a2:1f:7d:50:d2:55:7f:ca:43:
0e:68:52:f0:71:23:a8:96:e1:5b:94:67:45:14:85:
d1:1c:fe:5a:b3:97:07:63:23:5d:34:bf:6b:a7:ee:
e8:f0:65:a8:57:31:49:7c:8c:06:80:14:72:18:3d:
11:aa:d8:75:2b:73:1e:2d:0c:fe:22:c1:35:12:e4:
27:43:ff:35:df:34:6f:b2:05:71:ac:fb:6a:ef:7c:
cb:17:d5:41:76:df:7e:fe:d8:cf:03:41:f6:8a:49:
57:3a:7f:5f:e9:71:b8:0c:8d:c3:ac:65:23:c2:1b:
51:a2:89:78:d5:f5:0e:41:2c:23:dd:71:3c:ff:35:
cd:f8:7e:10:6d:61:cc:09:37:bf:76:19:4d:7d:23:
b5:5d:ea:99:b0:b6:c7:0d:11:93:7c:97:f2:af:b9:
85:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F7:C6:72:C9:F5:A6:6F:EA:BD:F4:76:A3:DF:82:72:D0:3E:5E:4D
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0a:86:20:b1:ed:b5:b1:de:89:8b:80:7e:92:48:24:ac:9a:
73:d4:9f:60:c9:78:9d:69:54:07:c3:4e:b2:9a:9d:d2:4a:2a:
48:44:69:df:61:32:cd:fd:70:c2:ef:c1:ed:f1:ae:f1:be:30:
22:41:34:62:47:d1:31:4b:63:3e:f7:1c:32:84:e0:cf:df:4d:
0b:61:01:0e:c1:9e:eb:cb:81:ac:e0:e6:b2:2b:6b:11:ef:91:
a9:8f:1b:3e:48:a4:00:c5:e3:14:94:69:36:8e:f6:b6:23:54:
9f:5d:23:46:95:4b:f3:76:5c:ee:38:9a:a8:70:d7:f7:8a:ff:
ac:59:e7:20:13:30:2e:95:0f:05:54:e2:08:de:19:5e:98:05:
59:84:bc:86:d6:69:ce:af:2a:35:f6:9d:1e:64:1e:d4:17:ba:
a8:ba:30:85:0a:fc:b8:26:c7:bf:35:51:7a:fe:8c:94:82:58:
cf:74:66:e5:77:72:d5:f8:e8:77:a6:53:41:35:ba:96:f2:9e:
8a:80:c5:db:b1:98:bd:c0:69:4f:af:5e:f7:48:19:ef:60:f1:
80:11:e0:67:72:39:8b:ff:91:cd:58:f1:dc:fb:9a:d3:a9:8d:
3c:ea:c7:3c:a2:0e:d1:0c:9b:97:13:d6:b0:b9:67:b8:82:c8:
d8:3d:54:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:31 2025 by rpki-client