Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File: TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier: wgvZaj5R382tTJPlSNp9NooXVYn5hFe/H2ENbBepWAM=
Subject key identifier: F9:E6:C0:29:69:92:3C:59:B7:45:2A:AF:F3:54:8F:90:54:B5:AC:F2
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer: /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial: 0196D2BEB99D6493F92C81D63C27F7F3A727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number: 153C
Signing time: Thu 15 May 2025 07:00:36 +0000
Manifest this update: Thu 15 May 2025 07:00:36 +0000
Manifest next update: Fri 16 May 2025 07:00:36 +0000
Files and hashes: 1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: XOgMxWzjcYIXR+HWhLbrA55muByqyTm6TI4x37oRiCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:b9:9d:64:93:f9:2c:81:d6:3c:27:f7:f3:a7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Validity
Not Before: May 15 07:00:36 2025 GMT
Not After : May 16 07:00:36 2025 GMT
Subject: CN=f9e6c02969923c59b7452aaff3548f9054b5acf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:d6:ff:c8:1e:f5:78:dc:ab:68:7d:e0:32:
63:88:41:87:b9:b1:83:50:fd:19:53:f6:4f:59:7f:
84:3f:95:ac:a2:a7:18:d5:5e:76:bc:af:1e:5c:f3:
18:54:ff:33:67:e0:aa:77:bd:b7:a8:af:4b:16:40:
54:3d:e7:5d:58:e3:15:c4:1f:a7:88:e8:e2:62:c2:
e3:8f:03:af:ab:a9:50:6e:49:74:1d:5d:e0:d8:5a:
a6:7b:c0:b4:a5:11:04:a7:fa:d9:07:06:23:2f:fb:
52:f3:a7:c3:42:88:79:98:c0:d9:49:f6:ee:d0:8e:
0f:f6:dc:c1:43:26:4c:14:68:c2:1d:23:78:e0:51:
1a:2b:fb:1f:b7:91:c9:80:17:dd:68:6e:69:4c:09:
13:34:d1:92:d3:b8:f7:5e:86:d3:68:99:a0:4a:f7:
f2:f9:b8:58:15:08:cc:67:ad:5e:21:1f:af:f1:8f:
2f:a1:0e:22:7e:cf:8b:a8:d6:46:c1:e7:ef:a6:01:
a7:a0:ce:23:59:50:2d:29:2c:65:66:03:ac:85:a4:
55:0f:d8:1f:bb:55:0a:c7:cf:7f:b1:c3:22:4c:36:
a8:d7:0b:4f:05:50:4c:b2:ba:e3:80:92:65:cb:3e:
a5:17:4b:b3:12:a3:cf:20:f5:13:8c:6e:b6:ef:f9:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E6:C0:29:69:92:3C:59:B7:45:2A:AF:F3:54:8F:90:54:B5:AC:F2
X509v3 Authority Key Identifier:
keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a2:84:6e:99:51:bd:81:36:e9:b1:68:cc:a4:1d:8a:34:64:
35:2b:a1:51:35:47:73:4b:b3:43:c8:9b:5e:ac:63:70:4b:b3:
47:18:6e:20:94:da:fc:e6:f0:75:a0:21:25:16:e1:b9:60:b1:
59:8c:ed:ab:cd:34:96:df:5c:62:4c:d7:a8:d8:c8:eb:b1:1b:
b2:b9:06:94:71:6b:0d:1c:de:39:00:16:32:06:6b:f5:2f:ed:
e1:7b:43:1a:b8:92:9f:ab:49:46:d3:ad:b6:d0:b9:06:d8:22:
36:e8:f5:63:d1:bd:b1:0c:d8:e2:5d:f3:75:75:cb:8d:d2:8a:
3f:af:26:2e:3b:70:7e:57:7e:fc:76:2d:cb:d9:ca:4c:28:5c:
78:a1:36:59:c6:64:2e:fa:24:e1:86:d0:45:80:49:39:b7:c2:
1d:d5:06:23:c9:fe:e3:8a:2d:56:1d:fb:bb:14:c7:6d:07:6d:
c5:1a:e1:39:a8:74:18:e2:ec:16:8c:8a:44:25:d2:62:01:5d:
7c:e9:60:14:22:14:b5:76:1e:07:d2:61:99:67:db:7b:89:93:
77:e2:02:78:80:d6:d2:63:1d:74:1d:c1:85:1a:42:17:b2:a8:
04:a5:5c:86:7d:15:59:12:a7:8b:a9:59:54:a8:d8:87:a9:1c:
56:d3:3e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:02:06 2025 by rpki-client