Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
File: TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft (raw, json)
Hash identifier: X7klCcGbTsUk1XXrKOPn5IZBj49EE/g8vWP+hgUcFjM=
Subject key identifier: 78:8C:22:DF:87:1D:69:EA:B4:1D:B2:3B:E7:C9:88:53:58:2A:A9:86
Authority key identifier: 4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
Certificate issuer: /CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Certificate serial: 0196C34C40D26A1BC84DE9704B500FDB44C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
Manifest number: 1533
Signing time: Mon 12 May 2025 07:01:16 +0000
Manifest this update: Mon 12 May 2025 07:01:16 +0000
Manifest next update: Tue 13 May 2025 07:01:16 +0000
Files and hashes: 1: TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl (hash: SdQEFR3kURbvjaa7i/WRQI0xsA2zzaF+JtwhLdyySrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:40:d2:6a:1b:c8:4d:e9:70:4b:50:0f:db:44:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Validity
Not Before: May 12 07:01:16 2025 GMT
Not After : May 13 07:01:16 2025 GMT
Subject: CN=788c22df871d69eab41db23be7c98853582aa986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:f0:af:94:68:67:c2:9d:d2:c6:04:c2:ff:
9a:17:7f:14:71:c4:36:f2:7b:d1:79:b5:f2:42:4b:
0c:78:29:16:6a:a8:cc:f5:08:ae:84:c5:3e:61:89:
de:9c:b5:2b:bc:11:f4:ae:0d:ef:d1:12:c6:af:e3:
b5:b1:87:19:1c:bb:2d:e2:a0:f7:5f:40:bc:12:3b:
fe:28:2f:c1:e9:d4:97:a0:63:5d:1a:77:ed:1f:71:
cb:27:5b:9a:40:32:02:66:8b:12:49:65:08:94:0b:
40:90:36:8d:e9:eb:e1:79:77:75:05:00:70:30:a8:
08:47:84:ed:71:a9:76:5b:8a:5e:bf:78:e5:19:0a:
42:72:37:13:f8:29:c3:f9:49:46:e4:aa:8d:fa:00:
8c:23:dd:04:d6:e6:ab:d8:5e:ce:0d:b0:11:df:5e:
7c:5f:0a:f7:7b:e6:ce:42:10:48:fe:4b:9a:5d:52:
c8:e5:a5:46:63:0f:5f:e4:27:fa:21:41:b6:3a:db:
d4:6f:a8:7c:f2:5d:35:68:8f:31:80:ce:fd:ca:cb:
8c:fc:d9:e2:dc:39:95:07:52:c0:3e:9b:d1:15:83:
6d:83:9a:d9:33:b6:a8:7b:4a:1d:2f:34:72:23:90:
d7:0b:10:36:60:d5:c6:97:69:8f:45:5d:4a:26:db:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8C:22:DF:87:1D:69:EA:B4:1D:B2:3B:E7:C9:88:53:58:2A:A9:86
X509v3 Authority Key Identifier:
keyid:4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:09:d7:39:79:25:05:8a:01:85:4a:2c:cb:13:03:e9:7e:d4:
10:ca:42:7f:22:7c:d3:a2:a5:f6:dc:90:dc:14:d1:18:8b:8f:
0b:13:d5:14:d8:be:c3:15:4f:59:7f:ad:f4:e5:98:f8:69:05:
7f:54:e5:47:b1:d0:3f:d3:96:60:d1:18:92:ba:2e:f1:8b:58:
75:aa:f2:ec:e7:93:3f:8a:df:4f:4f:5d:cd:ef:f8:11:77:4c:
62:aa:e2:b0:13:91:a4:6b:34:f2:85:1f:ce:f5:ec:59:22:ea:
20:26:25:c8:d8:a1:27:e1:eb:59:8d:40:b8:98:e3:40:2f:10:
91:ee:9a:15:9c:f1:72:29:27:dc:4c:c6:39:5d:62:d3:ba:78:
6c:b7:1c:2e:4b:76:43:ee:91:ff:7a:5e:bb:5a:38:ba:41:93:
d2:80:3c:fe:c1:ab:b4:31:c2:e2:d7:93:0a:93:9f:b6:9f:8f:
02:ad:9c:18:b4:6f:f7:02:9f:eb:ed:fe:4f:3e:06:b4:ff:55:
12:d8:cd:19:4b:27:92:0a:55:e8:25:05:43:37:e7:48:34:36:
3a:fd:12:b6:63:cd:2a:13:83:14:2d:4d:56:76:e9:f5:7e:3f:
e7:ea:4c:16:f8:48:13:09:9b:5b:14:39:07:9b:9e:fe:e0:50:
e0:d5:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:40:59 2025 by rpki-client