Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
File: tFmZiZ920uLkzN_IF_mHnPrAa74.mft (raw, json)
Hash identifier: NbIQFLOs+xL4rCC13QqzTH+4DQYsxwBCd5XrgHH9Ttc=
Subject key identifier: D5:C5:75:24:F7:68:65:B2:E6:84:14:6D:DC:43:BF:C4:A1:4C:5A:A8
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 0196BD806D1CB8E66DFC8D1CF42643B55B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
Manifest number: 0DEF
Signing time: Sun 11 May 2025 04:00:32 +0000
Manifest this update: Sun 11 May 2025 04:00:32 +0000
Manifest next update: Mon 12 May 2025 04:00:32 +0000
Files and hashes: 1: tFmZiZ920uLkzN_IF_mHnPrAa74.crl (hash: Ti8HUn1BvwY5wzUwLiYVgkD52hlsjWxezeZoA7dHnes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:6d:1c:b8:e6:6d:fc:8d:1c:f4:26:43:b5:5b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: May 11 04:00:32 2025 GMT
Not After : May 12 04:00:32 2025 GMT
Subject: CN=d5c57524f76865b2e684146ddc43bfc4a14c5aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:6e:db:35:50:48:c8:97:24:88:c5:71:5d:
7e:87:55:66:2a:cd:c2:2b:77:47:b4:3f:d5:97:4f:
bb:db:88:ac:d6:e6:6a:19:ff:51:c5:f4:5b:5e:10:
9c:cf:a8:7f:2e:0d:2a:6b:47:4a:01:b8:09:ab:ea:
50:53:e6:ed:7e:99:09:bf:3f:d1:93:8a:47:dc:d9:
fd:13:53:78:8a:3b:1d:e6:ce:22:d6:70:08:71:e6:
0a:75:e1:66:b2:65:b0:48:08:d0:f9:ad:0d:dc:a8:
28:d9:5a:f8:ce:55:48:13:cd:37:eb:93:1b:a6:6c:
8d:ac:66:1f:ad:b9:48:4b:d5:f8:8f:61:74:a9:1e:
4b:3d:d0:84:c7:30:fd:7e:5c:39:fb:71:bd:7f:9d:
0f:67:a2:22:e1:ba:09:49:6c:26:e6:95:ec:69:98:
98:00:5d:a6:1b:74:5d:57:e5:40:dd:b5:3c:a2:71:
ff:7c:78:1b:bb:47:08:8c:aa:a0:57:57:96:f9:2e:
82:2f:ba:98:46:c2:d4:61:4e:2a:0d:3a:5c:05:15:
92:13:e7:c4:48:6c:b0:6e:7a:f6:8b:b0:31:e4:a3:
98:33:42:1b:0d:96:c0:0e:70:d5:38:1e:0c:26:f3:
b9:82:a4:11:ba:ef:ab:f3:d8:24:12:6a:22:71:ce:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C5:75:24:F7:68:65:B2:E6:84:14:6D:DC:43:BF:C4:A1:4C:5A:A8
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7b:39:a6:d9:2a:a6:04:ab:8c:45:f5:92:71:13:a3:36:3b:
fc:95:db:cc:be:0d:e3:b6:6e:05:47:16:be:50:cb:36:65:de:
56:cf:98:de:d0:0d:cd:63:6f:e7:4e:79:53:59:37:7a:57:1a:
c4:18:fe:4b:b1:17:71:3d:d3:89:40:8b:22:d0:ea:09:91:20:
21:f4:ea:33:16:3a:a4:70:dd:3d:01:73:68:18:5f:21:a8:af:
9f:e9:41:8d:93:ef:50:a2:0b:94:5c:1e:96:82:dc:42:8c:11:
db:0b:ad:b5:81:0c:99:58:db:90:4e:1d:d4:a3:cb:b1:73:72:
eb:8d:71:cb:2a:6c:43:3e:bb:21:84:cc:8b:c2:70:4c:24:60:
c4:af:5e:6e:64:49:de:2e:74:20:28:3a:cf:8f:94:1c:91:e1:
11:37:ec:a8:52:6d:f8:34:51:1b:8a:82:42:07:90:bc:99:ac:
d0:50:5d:1f:70:98:4c:2b:3d:d2:1e:15:27:d0:9d:53:48:f0:
f1:5a:02:6e:60:44:eb:4c:b6:da:33:39:d4:c8:f5:79:cb:4f:
2b:1e:a8:c1:99:7e:c7:db:84:61:f1:30:55:db:bd:04:da:2a:
18:90:d7:b1:2e:fd:9a:69:d9:55:f7:69:60:29:a4:2e:a2:c0:
f7:f0:f0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:40:56 2025 by rpki-client