Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
File: TORqOpla2FRclax7aSMcpiT8iJM.mft (raw, json)
Hash identifier: 28PBYb4h35Czo+MtLmwavlXTldoUBIEtZ2cYg+PtmfA=
Subject key identifier: 55:BD:2C:5D:31:60:4E:24:D3:72:71:FB:8C:BE:E3:A2:22:69:5A:D8
Authority key identifier: 4C:E4:6A:3A:99:5A:D8:54:5C:95:AC:7B:69:23:1C:A6:24:FC:88:93
Certificate issuer: /CN=4ce46a3a995ad8545c95ac7b69231ca624fc8893
Certificate serial: 0196760BF8BE3B2D821A8A20DE3885AFC67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
Manifest number: 0FF4
Signing time: Sun 27 Apr 2025 07:00:17 +0000
Manifest this update: Sun 27 Apr 2025 07:00:17 +0000
Manifest next update: Mon 28 Apr 2025 07:00:17 +0000
Files and hashes: 1: TORqOpla2FRclax7aSMcpiT8iJM.crl (hash: YsIxM9hqS5CfgDydQ98OWJU7wHjzTse1X0H9HcnB0+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:f8:be:3b:2d:82:1a:8a:20:de:38:85:af:c6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce46a3a995ad8545c95ac7b69231ca624fc8893
Validity
Not Before: Apr 27 07:00:17 2025 GMT
Not After : Apr 28 07:00:17 2025 GMT
Subject: CN=55bd2c5d31604e24d37271fb8cbee3a222695ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:82:8d:e7:0c:78:9f:b6:a5:d8:08:3f:cd:
9c:12:b2:a4:ae:c6:7e:2d:61:52:64:82:1b:79:b4:
d5:a0:0e:48:ce:c1:2c:d8:4f:60:e9:63:f1:9a:66:
09:ea:21:be:71:19:f2:18:6a:e5:a0:86:0c:fe:eb:
92:e3:bb:9c:0d:7d:b7:77:cf:4e:80:cc:c0:70:85:
78:83:6e:56:67:49:04:65:8e:a8:d3:17:ba:e3:d0:
95:dd:90:e3:1a:89:a4:a1:09:37:04:dc:9d:21:e0:
7d:f6:a9:3b:af:9b:6f:6a:e0:d4:e7:ee:35:5f:b2:
1a:b7:80:e3:f9:0a:38:00:b9:cf:b4:33:1b:10:f1:
2f:47:c9:eb:a3:e4:d3:0d:d7:16:bb:d4:dc:c4:b5:
96:ef:d9:a5:13:6e:3a:43:9b:13:1f:24:5d:04:ea:
69:46:bc:42:28:a9:c9:27:39:5c:c4:ed:eb:8f:05:
83:09:1e:80:0e:5f:7e:9e:60:d3:75:de:fc:9b:5f:
95:3d:9d:a9:fe:fc:db:6c:f1:eb:1c:8f:86:1d:85:
28:0f:6f:cf:fa:c0:34:9a:ce:61:2a:7b:95:10:b6:
52:fb:01:ea:6b:0e:c3:26:2c:86:a5:f0:79:de:22:
bc:8b:9b:ce:46:84:dc:8b:57:b0:ef:c4:4e:be:6b:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BD:2C:5D:31:60:4E:24:D3:72:71:FB:8C:BE:E3:A2:22:69:5A:D8
X509v3 Authority Key Identifier:
keyid:4C:E4:6A:3A:99:5A:D8:54:5C:95:AC:7B:69:23:1C:A6:24:FC:88:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fe:39:de:00:4a:e3:25:6c:42:09:04:02:da:4b:93:bf:d5:
e0:a9:7e:25:20:88:83:bb:ec:22:fa:03:50:41:b8:26:bf:2f:
fa:34:48:d1:71:12:25:43:55:ce:c2:7c:30:cc:5c:33:a0:09:
89:67:1f:c2:e5:e7:7d:e4:29:02:7f:33:3e:65:b7:74:a4:6c:
89:0d:cd:94:4b:68:39:ba:b8:b0:b6:41:2e:c7:c2:50:5c:d6:
c0:ec:a3:5d:05:ca:08:23:66:73:9b:ff:8d:6f:25:e1:d0:4e:
b5:aa:02:57:69:3c:fe:24:de:60:e5:d7:5b:61:f5:ca:db:ba:
9e:47:7a:ab:70:fd:09:6f:6d:14:46:f2:10:d0:60:57:f4:11:
0f:85:df:b5:24:85:8e:da:7e:fc:7a:17:21:30:2b:e1:e4:dd:
16:5d:33:f7:79:47:50:85:0e:23:aa:50:1e:01:31:52:9c:18:
3d:b1:d1:52:65:ca:43:96:e7:c8:a6:4e:b9:ed:26:a8:6d:b5:
28:1b:c8:89:7d:c7:8f:23:59:70:14:da:d5:5a:e7:4b:f3:64:
e2:fe:b3:e1:79:0f:1d:1f:ef:c6:f0:70:20:9b:12:67:cf:eb:
34:2f:3d:4f:1a:ec:5f:27:33:e6:bd:e6:99:9c:4e:0d:bc:50:
a6:62:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:27:29 2025 by rpki-client