Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
File: T4zW4dX8wEW55lmcDK6hfUdoX5U.mft (raw, json)
Hash identifier: SqfEEy1/7whrDQnhMka0pPhIlKeL101tkDieQvUfOGU=
Subject key identifier: 8B:2C:20:54:60:DA:36:14:9F:3C:84:E5:F8:BB:F1:F7:33:06:C4:F2
Authority key identifier: 4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
Certificate issuer: /CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Certificate serial: 0196741E7D1BC7AE46D813E37167E6B58242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
Manifest number: 104F
Signing time: Sat 26 Apr 2025 22:01:17 +0000
Manifest this update: Sat 26 Apr 2025 22:01:17 +0000
Manifest next update: Sun 27 Apr 2025 22:01:17 +0000
Files and hashes: 1: T4zW4dX8wEW55lmcDK6hfUdoX5U.crl (hash: b8mbFY6QUi69rY9xJu6pkAgeXutDUFrI/cZ7wgAUQ0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:7d:1b:c7:ae:46:d8:13:e3:71:67:e6:b5:82:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8cd6e1d5fcc045b9e6599c0caea17d47685f95
Validity
Not Before: Apr 26 22:01:17 2025 GMT
Not After : Apr 27 22:01:17 2025 GMT
Subject: CN=8b2c205460da36149f3c84e5f8bbf1f73306c4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:01:50:12:fd:9b:e9:eb:6e:93:7e:ff:87:
48:32:24:46:cd:f3:4d:db:87:33:bd:df:c8:ba:52:
92:09:7c:be:8d:8e:e9:fe:76:1a:0a:3d:b2:9b:7f:
5c:bd:9e:7e:c2:a6:79:75:55:1a:12:8d:aa:9f:8a:
27:7e:74:c6:39:6e:99:ac:f5:84:81:af:ee:a4:5a:
85:69:06:fe:d5:bf:03:9b:2b:33:de:0e:ef:a0:e0:
14:69:1e:3d:14:81:7b:79:52:7b:bd:c5:39:19:94:
b2:39:0d:3b:62:b1:69:2d:ab:8b:fd:6c:15:d0:1c:
c4:21:fb:1f:33:56:bc:7f:e5:2a:78:8d:53:31:bf:
6a:9d:b1:86:c5:c4:68:ca:d4:a9:b1:48:1a:2b:b2:
83:c4:ed:10:48:95:5c:a7:17:d3:b8:08:89:7c:41:
bb:e2:24:33:f4:af:0b:a9:62:4f:d2:b4:ac:dd:97:
f4:48:17:de:7a:29:98:c4:72:61:29:3b:a1:9e:99:
71:b9:6f:fc:78:f7:1b:56:ec:5f:5e:ec:34:57:2c:
08:ec:31:40:b5:50:53:dc:d6:98:32:ec:6c:ac:57:
f7:71:88:f3:02:8f:d6:64:e7:fb:7c:06:1b:ea:72:
a1:8d:04:49:e5:51:24:80:ae:f2:e3:cd:02:5d:e3:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2C:20:54:60:DA:36:14:9F:3C:84:E5:F8:BB:F1:F7:33:06:C4:F2
X509v3 Authority Key Identifier:
keyid:4F:8C:D6:E1:D5:FC:C0:45:B9:E6:59:9C:0C:AE:A1:7D:47:68:5F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4zW4dX8wEW55lmcDK6hfUdoX5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f4b609-ce5d-49f0-9136-2eca76bc7fca/1/T4zW4dX8wEW55lmcDK6hfUdoX5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:96:22:5e:33:63:4d:32:4c:e7:a5:cb:0f:53:03:9d:7e:a1:
fb:bf:68:a5:ba:58:68:6c:bc:c3:83:f5:0a:c8:e1:f0:58:e4:
94:57:27:64:d0:1b:88:43:1a:b8:a5:3f:da:f3:83:65:41:f0:
8b:e6:28:45:c1:c6:bc:e1:a2:53:61:ca:65:94:7e:8b:35:06:
1b:b4:ec:40:9f:6b:1c:e9:4b:94:a4:3a:3d:64:d7:f6:5d:6d:
c6:97:5c:b4:a7:ce:1c:c8:ad:b3:f9:91:93:61:64:1d:b4:aa:
ff:4c:42:08:e2:50:9e:6d:43:d7:d7:eb:6d:65:bf:61:c2:95:
f2:a0:07:0d:58:0a:9f:1e:07:3d:9b:96:d5:74:74:a6:f7:9e:
a6:b2:79:09:2f:34:95:2e:a6:ca:0d:d8:e9:b0:db:5c:eb:28:
b5:a1:2c:b5:94:ea:d9:b0:96:c2:ff:42:fb:a6:28:e7:9f:c5:
c7:da:dd:38:b1:15:02:d7:ed:1d:71:7b:43:10:1a:0c:06:f7:
73:b5:d1:73:5c:37:bc:85:08:99:d7:1f:15:00:a9:fe:6a:9c:
0a:e9:c3:c7:d5:b1:69:22:5e:35:d2:84:2a:c0:c7:60:42:e6:
d4:3e:a7:9a:e8:46:9f:8b:eb:e0:b6:49:ec:e0:ec:65:00:28:
02:75:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:00 2025 by rpki-client