Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
File: TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json)
Hash identifier: wu8nFt4vZ1zNDwS1G2q+vG2KDYa3cq2MwtCVtvncWnE=
Subject key identifier: D8:07:04:A7:18:69:33:60:0B:54:B3:CD:BD:55:6C:2E:95:FA:11:AB
Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
Certificate issuer: /CN=4d21374da731314f0a05175d25b0d89a76f6e081
Certificate serial: 0196D36399E8B8908168DBCB72A3EDFBB26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
Manifest number: 04AE
Signing time: Thu 15 May 2025 10:00:42 +0000
Manifest this update: Thu 15 May 2025 10:00:42 +0000
Manifest next update: Fri 16 May 2025 10:00:42 +0000
Files and hashes: 1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: VCRpjf48b9PaRCly7p3BbLA/Et7HwdXaNmdiNbsV+Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:63:99:e8:b8:90:81:68:db:cb:72:a3:ed:fb:b2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081
Validity
Not Before: May 15 10:00:42 2025 GMT
Not After : May 16 10:00:42 2025 GMT
Subject: CN=d80704a7186933600b54b3cdbd556c2e95fa11ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:c3:b6:f1:9a:c1:7b:67:cc:eb:bb:2f:7a:
fb:73:da:e7:77:e6:3f:56:4d:bb:39:a2:2c:e5:d5:
57:5e:7b:a0:11:ee:54:b7:73:fe:28:cb:72:56:cd:
34:50:27:b4:4e:3d:00:b2:de:0d:b5:a1:ae:62:bb:
c8:14:29:20:69:99:13:8e:3c:e9:7d:af:e8:68:da:
bb:3a:e1:ac:3f:8e:2c:a2:28:9e:78:fd:e8:b8:47:
e1:e9:29:90:b7:e1:3d:6c:a2:6b:8c:c2:91:b2:05:
a5:8c:2a:97:e3:4c:67:a6:e4:33:61:c1:c4:e8:a8:
63:20:d7:43:b2:97:fc:0f:b1:95:84:5d:a4:fd:59:
62:94:e3:01:13:d2:ac:d1:e1:01:e5:ec:c7:ed:bc:
a1:08:7c:2b:91:b7:cd:a0:1f:23:94:3d:14:54:8f:
56:bf:84:de:21:63:84:e7:89:09:05:7d:ef:79:0e:
9d:fd:a6:71:06:c2:25:ef:1c:86:f5:ee:dc:69:55:
4d:b0:7e:6e:8a:55:a9:5e:22:be:4c:f4:73:0c:29:
53:ac:b3:51:18:ef:bd:84:dd:3c:83:36:38:78:1d:
e8:39:25:af:15:76:e0:13:fa:56:61:90:cb:57:37:
3c:ba:7f:ff:c0:d4:e3:ae:12:d7:d8:c5:fa:13:b7:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:07:04:A7:18:69:33:60:0B:54:B3:CD:BD:55:6C:2E:95:FA:11:AB
X509v3 Authority Key Identifier:
keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:63:7e:cf:c3:cb:cd:e1:72:f9:68:7c:a7:e3:a4:7c:80:b2:
a6:af:4f:93:13:a2:39:dd:20:08:66:a1:ac:5e:c7:d8:bc:33:
09:46:ea:67:a7:76:e4:51:de:ea:01:66:30:16:eb:51:1e:4e:
76:76:5a:8c:18:a1:68:36:0c:de:91:af:80:b8:71:23:15:1c:
06:f3:05:fe:17:49:4c:6a:f0:11:9d:05:b3:1a:f9:49:fa:17:
e6:2f:cb:ee:47:f0:6d:5b:70:3e:30:65:10:b1:f1:b1:0b:39:
0e:4b:ee:88:7e:23:87:e7:12:e9:88:48:10:d5:3c:36:7e:7b:
57:6d:8d:a7:8e:2f:b5:f2:c8:06:37:c4:08:47:10:e1:ed:23:
78:c5:83:f4:ba:39:00:05:ce:c4:55:d8:8e:fe:4c:3b:e9:4b:
80:0c:99:f9:06:11:2c:94:01:ca:79:14:1b:ab:a2:21:a5:5e:
95:68:01:fe:24:cd:a0:bd:a2:dc:8a:5d:48:1b:b9:d8:b4:b5:
a6:b0:e5:63:8a:02:36:b7:a8:5d:1f:0f:58:00:e7:f6:fe:35:
50:ba:a3:37:70:b7:78:54:8c:82:5b:91:2f:f5:94:d6:d1:1d:
b1:78:3c:a9:05:57:45:ed:30:3c:f7:22:1c:9a:cd:f1:56:a1:
06:74:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:16:48 2025 by rpki-client