Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json)
Hash identifier: 87zdpVMdd+vzKKUcz81ZOk5Vh3pRkz+EVaALOe7tBhE=
Subject key identifier: A9:32:C1:E5:6B:B3:CB:9C:15:F0:1E:DD:D2:57:C5:FC:0C:40:1E:60
Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace
Certificate serial: 01967FEB0CD0D9D8581B9DBD002AED71A100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
Manifest number: 23
Signing time: Tue 29 Apr 2025 05:00:32 +0000
Manifest this update: Tue 29 Apr 2025 05:00:32 +0000
Manifest next update: Wed 30 Apr 2025 05:00:32 +0000
Files and hashes: 1: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: f+fb5rrPcv30XPa9PKy3JwpvKXjBKQM+gd+kSEaN1Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:0c:d0:d9:d8:58:1b:9d:bd:00:2a:ed:71:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace
Validity
Not Before: Apr 29 05:00:32 2025 GMT
Not After : Apr 30 05:00:32 2025 GMT
Subject: CN=a932c1e56bb3cb9c15f01eddd257c5fc0c401e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:26:2a:5c:cf:e4:dc:9d:90:71:b4:a5:b0:
8c:05:76:fd:76:7f:76:ee:20:27:3f:11:40:35:e4:
a6:7c:dc:3c:f3:90:98:2a:9e:3f:a8:51:e8:4d:62:
71:d0:cd:48:6b:8f:f1:f0:d8:e1:9b:b4:2d:27:02:
30:45:02:5b:fa:c5:37:de:74:1d:8e:99:dc:a1:af:
b8:c9:0a:7a:f6:46:d6:27:c2:09:05:10:45:89:64:
de:6f:8f:11:51:32:fa:eb:18:0b:11:ac:b8:68:90:
9f:85:a4:16:54:cd:3c:17:ed:3b:df:18:47:da:d3:
bf:04:c4:b0:6b:92:70:d1:3c:8c:8c:de:b9:b6:5c:
c1:91:93:01:4b:d4:84:fb:8c:2f:6d:ab:90:9e:48:
8b:39:59:bb:a4:c4:37:87:9f:70:00:0e:7d:ed:0e:
e0:9e:8f:6f:55:7c:1c:ee:e3:07:68:f0:30:dd:6c:
8a:5b:f1:0e:09:cd:f1:6d:49:e1:f9:df:01:26:b3:
71:f8:ca:f7:78:9e:cd:f7:2a:f2:e6:91:72:4e:b3:
7e:2a:58:1f:43:88:84:03:8f:9c:10:75:82:d5:4c:
c9:aa:f7:f0:83:59:73:18:a4:8b:b2:eb:d3:b1:4f:
7a:58:14:97:61:b6:05:d2:1e:c6:8b:e2:32:90:8d:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:32:C1:E5:6B:B3:CB:9C:15:F0:1E:DD:D2:57:C5:FC:0C:40:1E:60
X509v3 Authority Key Identifier:
keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0b:36:c9:6e:1a:19:f7:f6:95:33:a4:c3:77:b1:a9:22:20:
bd:a3:64:35:91:11:38:05:88:bd:d5:02:dc:4d:ca:f8:11:e0:
52:20:eb:93:b3:3c:2e:86:3c:29:ec:0d:2d:3c:84:2f:51:c3:
29:d5:bc:20:6a:af:9a:26:ff:ec:e5:9a:7e:82:7c:c7:1f:70:
13:a9:68:c3:0f:c9:8c:5c:bf:96:b8:9f:e7:8b:86:d1:67:dd:
e5:79:a9:24:1c:aa:36:78:52:3d:9e:95:c9:70:11:5b:78:5d:
32:3f:2f:a6:7f:b1:63:7e:64:e8:cb:fe:58:84:f1:85:8d:25:
dd:9e:1a:5e:4b:88:68:e4:1d:99:0a:3e:02:41:00:92:51:f6:
45:2b:55:d7:e2:f9:df:8f:48:56:58:36:7b:b2:b1:a1:64:e4:
1c:4b:1d:fa:c1:d7:e3:e5:01:33:bc:85:20:86:00:f8:e8:ae:
0c:62:df:2f:53:93:0e:75:62:5a:ec:ec:5d:4f:c5:b4:f2:76:
8b:ff:5d:36:2c:7d:f6:3e:64:71:c5:ae:b0:19:4c:8b:d0:c4:
37:7f:bd:b6:47:b4:bb:3e:c3:ce:1a:8a:4c:4f:01:11:85:49:
eb:c6:8d:ce:3c:df:ad:4d:c1:b0:82:62:9f:12:8c:38:d0:69:
4c:4b:f8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:19:50 2025 by rpki-client