
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
File: TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft (raw, json)
Hash identifier: jRcySry5FhYZVeR2drRemr3+Wnj60F1er78YyFiQFF8=
Subject key identifier: 21:BA:6C:73:C5:AB:3F:A2:35:AA:C6:10:3F:A2:85:D4:97:9C:20:06
Authority key identifier: 4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
Certificate issuer: /CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Certificate serial: 01969F081C6CAC6476890C7B16B411081CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
Manifest number: 1481
Signing time: Mon 05 May 2025 06:00:30 +0000
Manifest this update: Mon 05 May 2025 06:00:30 +0000
Manifest next update: Tue 06 May 2025 06:00:30 +0000
Files and hashes: 1: TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl (hash: b+DbxSqePiQK34ZishBfBdNIK2oEiZ0Dy0NNxjHsFqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:1c:6c:ac:64:76:89:0c:7b:16:b4:11:08:1c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Validity
Not Before: May 5 06:00:30 2025 GMT
Not After : May 6 06:00:30 2025 GMT
Subject: CN=21ba6c73c5ab3fa235aac6103fa285d4979c2006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cc:49:2d:97:93:ba:3e:b9:a6:3f:81:12:ff:
29:07:d6:06:82:37:2a:35:07:de:49:4c:c6:de:d1:
80:08:0b:68:f6:2e:54:34:86:6c:a6:9a:c0:a7:7c:
13:f3:e2:73:42:71:3f:87:19:4a:42:46:e9:3c:52:
c2:4a:8f:91:54:f8:38:71:1b:22:89:b9:b2:38:46:
02:23:08:ec:e3:8a:51:d7:14:fe:15:ba:c0:24:e1:
e9:6e:03:5c:f7:3c:5a:7c:99:14:be:fc:58:3f:ce:
02:54:3d:8f:9a:87:28:44:ca:43:da:77:ee:21:b0:
ee:58:ef:0f:c9:78:26:25:21:28:8c:35:06:5a:f5:
04:90:9a:55:e6:8e:01:bf:bd:86:0c:b2:19:cf:1e:
86:26:03:df:f2:8d:22:5c:4c:07:05:b3:4f:fa:78:
d3:ed:18:b9:68:1f:5b:68:a0:fc:16:0d:23:37:0c:
bb:a5:60:81:dd:46:3f:5d:58:a7:55:5e:c1:dc:a0:
4a:ea:91:ae:97:2e:85:0c:cd:9a:83:43:41:e1:a9:
f3:4f:d7:64:4a:3e:17:a9:a2:6b:c1:cd:4d:44:c4:
8a:42:14:e4:3a:8c:ae:33:35:f3:67:68:8f:fb:f9:
13:f9:fc:12:54:aa:bc:96:0e:59:a6:14:11:4c:a8:
51:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:6C:73:C5:AB:3F:A2:35:AA:C6:10:3F:A2:85:D4:97:9C:20:06
X509v3 Authority Key Identifier:
keyid:4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bb:f0:e3:2f:4f:65:05:23:3b:c9:87:ec:13:12:66:1a:0c:
a1:7f:a0:59:91:ef:76:f0:a4:d0:5c:d1:e4:9f:a5:21:c6:28:
79:9b:43:1f:eb:82:05:67:38:e6:3b:35:e2:11:7a:89:cb:54:
39:7a:8a:fd:23:fd:75:64:cb:83:5f:37:67:86:e0:a6:12:18:
12:60:8e:2c:6c:42:b8:7c:4f:c4:4d:d4:d1:c2:18:e0:0b:67:
72:d6:70:40:3e:51:50:cc:09:90:ee:79:18:2d:5b:a8:1a:6f:
c8:af:50:f6:76:d9:53:c3:46:e6:86:78:0c:a3:83:16:9e:ec:
c8:79:cc:6d:b8:a2:d7:0f:63:ef:fb:34:9d:2b:0c:cc:76:f5:
da:cd:49:9c:b2:5e:1c:a9:6a:16:77:9b:d0:7a:c4:7f:d8:66:
cf:22:53:47:5c:0c:86:2b:7a:fe:c2:85:da:2f:01:7a:ac:83:
d7:89:3e:b8:a3:25:36:85:67:3a:64:42:87:a2:93:bf:c2:c6:
24:06:43:f5:b8:52:e2:80:bf:0d:b2:1c:e9:3b:82:67:e6:82:
74:4d:dc:e0:e3:8b:78:d1:ff:16:1f:a8:8d:24:a9:75:ee:70:
c8:b4:41:64:e9:45:4c:5e:9e:06:8a:eb:6a:17:54:86:92:62:
1c:18:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:11 2025 by rpki-client