Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
File: Tddxzuh-yov3sS4KYwbxgdKlWm0.mft (raw, json)
Hash identifier: ab1EXgWJsueSjak7UbPlZjWieq4OIZeJh/FV8K6rBfg=
Subject key identifier: 1F:B4:F2:45:D6:43:69:7F:02:E7:81:A3:3A:35:52:77:67:0C:87:F8
Authority key identifier: 4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
Certificate issuer: /CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Certificate serial: 0196C64CB7B836282F00CFE9AC8097371809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
Manifest number: FF
Signing time: Mon 12 May 2025 21:00:38 +0000
Manifest this update: Mon 12 May 2025 21:00:38 +0000
Manifest next update: Tue 13 May 2025 21:00:38 +0000
Files and hashes: 1: Tddxzuh-yov3sS4KYwbxgdKlWm0.crl (hash: u5wVZI5TV2sGfgdd48W997KNi8tZ6JHrIPG3tJBXZYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:b7:b8:36:28:2f:00:cf:e9:ac:80:97:37:18:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd771cee87eca8bf7b12e0a6306f181d2a55a6d
Validity
Not Before: May 12 21:00:38 2025 GMT
Not After : May 13 21:00:38 2025 GMT
Subject: CN=1fb4f245d643697f02e781a33a355277670c87f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:75:81:27:25:5b:1b:d1:71:11:2a:ff:eb:
fe:80:61:f7:e6:59:66:61:f1:7f:c3:f4:75:af:87:
47:56:57:9c:74:81:0f:86:76:bb:59:62:e4:1c:5e:
14:7f:48:f2:e0:2a:3e:f2:8f:45:25:ca:15:3b:37:
9f:78:14:fa:c8:ad:11:fa:0b:da:37:d7:03:a9:12:
bb:fc:e6:ed:b8:bd:d4:71:4d:8c:72:2d:84:75:c7:
7e:8c:7d:ed:c5:6d:47:e1:d8:a4:86:d3:ec:fc:83:
70:9a:08:ea:29:98:e5:2f:75:43:81:b4:da:a5:f2:
37:e7:3b:96:3e:2a:9d:e3:b7:69:0a:7c:42:0f:59:
ce:de:f7:79:7b:59:ee:49:d7:59:37:5a:5e:41:74:
ef:8d:8c:b1:20:fc:ca:7a:48:7b:c3:db:55:f1:99:
a6:1b:22:bb:8b:df:14:c7:50:d8:15:f2:80:8b:32:
16:35:78:15:74:dd:81:99:ff:dd:ef:9e:8b:d4:56:
5d:94:c2:60:1f:e2:a9:50:e0:0e:5a:fd:4f:c4:64:
d6:39:28:d2:bd:fd:75:fd:df:34:02:b2:f3:ef:31:
ee:b5:cf:37:70:ba:8d:71:cb:9a:b5:83:48:5b:cf:
bb:60:6f:6a:6e:c0:95:29:63:fe:b0:d8:08:11:a1:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B4:F2:45:D6:43:69:7F:02:E7:81:A3:3A:35:52:77:67:0C:87:F8
X509v3 Authority Key Identifier:
keyid:4D:D7:71:CE:E8:7E:CA:8B:F7:B1:2E:0A:63:06:F1:81:D2:A5:5A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tddxzuh-yov3sS4KYwbxgdKlWm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f21bf0-ba49-43ba-898c-539f9cba00c5/1/Tddxzuh-yov3sS4KYwbxgdKlWm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:84:41:e2:49:56:39:03:0b:9a:e6:54:bb:8f:96:8a:82:83:
32:31:d5:e5:63:2b:38:0b:65:82:89:5e:5c:d1:7d:9b:a2:db:
f2:35:f6:8c:0c:87:e9:44:51:b5:3d:8b:a0:37:25:34:cd:c3:
d6:a0:85:e0:1f:07:2a:c3:34:0a:98:ed:c2:9e:e7:76:44:af:
b9:92:ff:72:de:2f:b7:35:68:bd:3d:e3:b9:43:d2:ff:9c:5c:
cc:46:5b:59:30:00:33:88:43:35:f0:5b:12:fe:75:e0:03:70:
6e:aa:d2:e8:27:36:72:ab:91:6a:81:eb:2a:4a:ea:47:e3:91:
f9:3c:08:f6:79:e9:50:dd:43:29:4c:d7:fc:19:64:d4:a8:be:
b8:32:5f:dd:31:8d:7f:95:05:3b:aa:79:bb:37:85:a5:31:bd:
10:04:7a:2a:2d:35:d6:50:66:ab:c5:61:1e:72:b2:9e:50:da:
7a:6f:48:6c:ac:ba:18:c7:52:4d:37:5a:01:9a:f1:10:11:99:
7c:b5:bd:cc:37:54:45:58:9e:89:d2:10:b8:a7:6a:f7:de:60:
bb:6c:a2:97:8e:fb:da:63:03:90:3e:58:5b:20:cb:96:9b:6d:
f7:0e:05:41:40:b8:ee:8f:8a:06:d4:48:dd:ff:3c:c3:2a:1e:
13:48:d5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:05:18 2025 by rpki-client