Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: sClOFnUOiRIr4MsRjCq+Yl0YDYlB740QMugzvb7Hqo8=
Subject key identifier: B3:A9:D8:8B:C8:AE:40:72:E6:40:D1:6A:DB:59:BA:86:64:87:E4:E6
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 0196B9A40559F5B29F6E9CA4644CA84B57BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 0EAE
Signing time: Sat 10 May 2025 10:00:56 +0000
Manifest this update: Sat 10 May 2025 10:00:56 +0000
Manifest next update: Sun 11 May 2025 10:00:56 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: oabJZtVW5qTBCrOUCHTHjO3n9v5CiUI9QiET+fUTGLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:05:59:f5:b2:9f:6e:9c:a4:64:4c:a8:4b:57:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: May 10 10:00:56 2025 GMT
Not After : May 11 10:00:56 2025 GMT
Subject: CN=b3a9d88bc8ae4072e640d16adb59ba866487e4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:7c:ff:6a:11:6f:d9:24:b1:f5:ef:79:bf:
05:d4:51:77:b2:c8:5c:d4:42:54:c1:01:1d:8f:5e:
13:f2:27:f8:61:bb:8c:a2:7d:6b:eb:9c:55:df:5c:
60:e5:18:1e:48:97:4e:ab:c7:d8:ee:da:18:52:0e:
a4:63:a3:19:d1:40:74:ce:82:6d:b3:aa:ce:0e:c6:
d2:f4:3d:fc:d5:f4:6e:24:d3:7e:56:ec:7c:a7:b1:
d2:82:f6:29:4d:bf:28:30:76:ca:6f:57:00:e7:25:
d1:bd:a3:be:d6:88:ca:c4:4a:3a:11:4e:a2:99:a9:
99:fc:e6:7b:65:67:5f:da:11:d4:d5:53:d8:4a:1e:
9e:c7:86:ed:1d:ea:a2:10:42:04:d8:89:36:fc:85:
37:f0:bd:5b:8c:6e:09:25:4d:92:3c:d1:6c:8f:46:
69:f1:5c:a3:54:c4:f1:b4:9b:c7:b9:ad:b2:f4:1d:
24:d3:a0:c6:84:ee:02:99:5a:a5:43:8e:6b:7c:69:
a5:d8:50:44:08:84:99:b7:81:9f:8c:66:2b:78:0d:
d4:bb:2a:ee:73:0b:cc:b8:ea:47:55:43:f9:84:4b:
51:c4:6b:d7:0f:b8:0c:c2:15:f5:19:99:af:f7:db:
05:60:e0:fd:3a:19:42:e1:ff:78:93:5a:f0:9b:41:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A9:D8:8B:C8:AE:40:72:E6:40:D1:6A:DB:59:BA:86:64:87:E4:E6
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5a:9e:09:44:eb:66:d1:88:93:b5:6c:3d:09:a8:fa:6a:cf:
88:ec:c9:01:25:9e:b3:f1:88:a4:2e:cb:3e:87:d0:b9:b3:58:
a1:05:2f:14:fd:14:ed:f5:97:27:2c:6c:e8:20:bb:68:b3:08:
35:1c:9c:b7:0d:5a:15:b0:43:f5:df:d9:ec:d3:7b:d0:e3:e0:
89:c2:63:35:38:3f:22:45:14:30:b9:7c:0f:93:32:33:1c:21:
85:55:5a:a6:52:5e:b7:38:9e:75:12:c9:dd:c8:e1:f3:17:bb:
55:94:ee:30:58:20:32:d4:98:b8:26:2c:5a:af:78:1b:24:1b:
34:b0:ce:d3:db:80:6b:cc:f7:5a:51:46:da:6c:00:7d:8d:d7:
69:f3:7d:ab:c9:80:23:9d:b5:46:1a:c8:f7:a1:d9:66:0f:cd:
e0:2f:c8:9c:23:06:eb:00:37:fb:fe:ab:7f:4b:c7:22:ea:60:
32:8a:13:ba:13:06:13:50:4c:2e:b1:be:4c:6b:bf:df:d4:eb:
0d:88:c8:0b:ed:6a:c4:d5:e8:7d:ee:0a:01:c9:71:02:cc:74:
4c:86:03:a5:34:5f:83:1a:ce:de:aa:af:57:32:da:a4:29:c5:
21:bb:f2:bd:28:22:bb:86:02:6e:b1:79:7a:ea:2c:f1:37:3d:
3d:43:32:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:11:25 2025 by rpki-client