Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier: 8cwTuuZFVAyP+q53kRuCNu49sOsfEA2xCUcaDsoipEU=
Subject key identifier: 72:A7:1D:E2:F5:36:09:23:59:07:52:CB:76:EB:0A:B6:75:B9:86:7F
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial: 0196AEE8EAED59E89933F0AC63AC88E2ABAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number: 1279
Signing time: Thu 08 May 2025 08:00:21 +0000
Manifest this update: Thu 08 May 2025 08:00:21 +0000
Manifest next update: Fri 09 May 2025 08:00:21 +0000
Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: ND+L87Fd2RnD5NeTU0YtSUSkibfmaGsEPrTMLgkIXx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e8:ea:ed:59:e8:99:33:f0:ac:63:ac:88:e2:ab:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
Validity
Not Before: May 8 08:00:21 2025 GMT
Not After : May 9 08:00:21 2025 GMT
Subject: CN=72a71de2f5360923590752cb76eb0ab675b9867f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:6e:9e:9b:1e:5b:62:f5:bc:ef:0c:d5:c9:
b4:92:c3:42:5c:44:da:7b:f3:4f:0d:3d:36:a9:34:
47:e8:ef:31:b6:be:d2:4c:e1:c3:a6:c8:ec:e1:ae:
ea:d6:c8:e2:78:d1:1a:5d:8e:93:fd:c8:66:ed:b8:
c5:28:a1:35:03:a4:2a:51:a2:13:a0:83:ff:d5:22:
69:19:66:71:95:6f:b5:f6:79:34:d1:28:58:b5:20:
f0:d6:26:05:42:6b:d7:c5:15:0c:e9:89:b1:36:65:
16:c6:df:55:66:ea:f6:44:04:21:ac:85:89:c8:b4:
63:8b:c6:80:50:96:5d:1d:23:86:a1:a2:14:fe:33:
f5:fa:1b:8e:ee:f1:9d:fb:bd:a2:14:75:83:00:e1:
23:ef:26:30:b9:6c:52:f3:29:42:72:6a:ea:04:09:
76:bd:a4:df:a7:db:f7:fc:94:1d:6f:5e:65:2b:47:
3b:8d:d2:87:73:b6:9e:f6:84:1b:52:f5:1e:84:ae:
45:29:5b:a9:99:7c:7f:75:1e:54:21:e0:09:9c:53:
d8:93:92:25:6c:d6:f8:6d:eb:32:98:79:93:38:90:
80:d2:36:24:31:7d:99:84:76:67:66:b0:6e:5f:53:
55:85:ef:8b:ea:b5:08:eb:46:58:a4:06:16:d3:4a:
06:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A7:1D:E2:F5:36:09:23:59:07:52:CB:76:EB:0A:B6:75:B9:86:7F
X509v3 Authority Key Identifier:
keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b1:99:34:b0:f7:3e:0f:08:9f:b1:61:fd:d4:92:51:ce:32:
50:a9:13:70:6d:d5:e2:ff:d1:29:0e:15:9b:55:a6:4b:c8:2f:
67:f3:d8:6b:7a:ca:90:ff:f3:4e:12:79:20:9d:76:54:25:4c:
7b:5b:3f:aa:94:85:b3:5a:b0:71:df:22:21:05:36:f5:cf:cd:
62:43:31:50:b1:d4:9d:ce:ab:b0:ff:e2:49:63:ea:8c:69:41:
43:bb:30:40:5f:aa:f0:bc:a5:ff:0a:ec:84:5d:37:00:3b:7a:
1a:63:80:55:a7:38:95:f8:05:14:01:2c:f2:83:03:c3:d4:30:
a4:cb:e9:36:f5:80:97:39:46:e8:67:28:76:bc:c3:be:84:31:
f8:98:94:7a:63:28:7d:6d:8a:ab:79:a4:40:cc:fd:14:3f:3d:
98:cb:60:b1:31:39:9f:e0:c3:ea:15:2a:ae:a9:0d:7d:d5:7a:
74:bb:55:3b:05:81:6d:61:65:1e:53:77:57:8c:a8:52:f8:00:
3c:50:64:b1:d9:ea:d2:70:87:d5:26:e7:b4:ad:a1:4b:5e:09:
d4:ef:0b:ba:81:a6:f9:d6:00:b7:3d:47:ac:40:64:04:6c:55:
a7:a0:80:d9:25:72:75:e9:9f:44:cc:5a:71:75:09:11:37:d5:
08:97:2c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:48:12 2025 by rpki-client