Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
File: tFrdzVeWSPw_YSTlWEee8LB_AYw.mft (raw, json)
Hash identifier: kxLN6Ah5Ct+mr+DSIwXNdkMWjQqUpapOu9jdDjUZxKA=
Subject key identifier: E7:F5:72:73:53:D3:AD:B5:9B:F4:18:42:80:83:2D:01:8F:5C:04:7C
Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
Certificate issuer: /CN=b45addcd579648fc3f6124e558479ef0b07f018c
Certificate serial: 01967ED8E223406037F9E7A75DA3923F1BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
Manifest number: 028A
Signing time: Tue 29 Apr 2025 00:01:04 +0000
Manifest this update: Tue 29 Apr 2025 00:01:04 +0000
Manifest next update: Wed 30 Apr 2025 00:01:04 +0000
Files and hashes: 1: tFrdzVeWSPw_YSTlWEee8LB_AYw.crl (hash: 6ua/Q1+5xFek4ETiYfe0i6R7Dr6bjIJaqAtGZD+5vUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:e2:23:40:60:37:f9:e7:a7:5d:a3:92:3f:1b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c
Validity
Not Before: Apr 29 00:01:04 2025 GMT
Not After : Apr 30 00:01:04 2025 GMT
Subject: CN=e7f5727353d3adb59bf4184280832d018f5c047c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:17:fe:46:3b:bb:c3:b0:a6:d6:34:f6:d7:
90:e6:58:1d:74:bf:3d:25:b1:95:53:6b:7d:97:b6:
99:d3:a8:0a:90:b4:0d:00:c5:3c:20:fb:a6:0a:e3:
d5:15:5e:e1:96:35:a3:86:43:67:e1:eb:bd:6a:0f:
a2:df:0c:6f:c5:66:9c:fa:39:70:77:b1:72:41:a2:
5d:1b:0c:00:06:e2:b8:cd:2b:9f:f9:fb:7b:76:d9:
28:ff:94:cf:c1:50:af:62:31:98:f4:83:c1:9b:20:
a2:08:e9:f6:0a:b2:20:83:40:09:b1:ca:94:04:5f:
48:89:ca:5d:01:c6:85:45:94:db:36:da:1e:94:a6:
17:d5:df:94:83:6d:45:2a:5a:d2:41:5b:37:ab:88:
a1:c5:53:d2:c8:2a:e9:37:b1:a4:5c:f0:70:f8:23:
75:59:27:f8:d0:c1:30:a4:e3:06:25:b3:84:a8:db:
0e:18:dd:3c:7d:c9:f2:cc:c1:dc:56:f4:d1:3e:ed:
5d:6b:61:be:a8:b3:bc:eb:9e:bc:b7:8b:e4:48:a8:
67:89:4a:6d:d4:6d:58:2f:b5:21:d6:74:72:9e:bc:
ba:68:a9:f6:97:a2:4b:b5:07:4f:5d:3a:4a:c2:39:
e9:2d:b6:df:30:d4:79:1d:89:0e:7f:9a:d5:11:e7:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F5:72:73:53:D3:AD:B5:9B:F4:18:42:80:83:2D:01:8F:5C:04:7C
X509v3 Authority Key Identifier:
keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e7:6a:0d:38:25:57:21:66:50:23:25:17:0a:fb:74:cb:d2:
5a:fb:76:7b:8a:e2:74:f0:e0:67:de:54:0b:15:f3:3d:a1:6a:
31:b8:c5:28:d8:6f:4e:bc:ae:17:a3:44:71:17:af:79:58:bc:
65:b5:30:6f:3b:1a:83:57:7d:f1:cb:ba:22:a5:45:77:aa:7d:
0f:54:62:92:1e:27:44:d7:5e:70:4c:5c:2e:d1:f2:77:0b:ac:
93:f2:24:5d:43:b7:b8:83:1a:5d:19:5f:34:e6:97:26:f6:9c:
e0:d9:c9:7f:b8:eb:fe:56:27:9b:9a:a0:dc:14:13:a4:18:e4:
80:c8:ce:13:08:48:8c:46:ec:92:ff:bc:ed:2a:40:bf:51:bc:
aa:8b:85:aa:a5:42:c2:52:d6:b5:06:a7:74:fc:a4:ae:67:26:
73:18:2c:66:94:51:68:1a:f4:57:ea:bc:31:27:7c:55:f7:3f:
dd:3d:5e:e2:04:b8:38:7c:d5:24:00:a1:c2:45:70:47:97:2e:
f0:41:ef:9e:4b:8c:40:32:b7:d3:24:6f:4d:ca:c5:fe:2a:6d:
7c:55:5d:54:d8:51:80:90:d0:df:46:ef:ff:ea:70:37:fd:6b:
38:d1:47:75:63:36:22:44:ef:51:8b:e3:4c:7e:3e:a2:6f:e1:
15:12:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:27:27 2025 by rpki-client