Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
File: tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft (raw, json)
Hash identifier: NtPOlyNVOucqsmdy1+b4RCGqZAWpzdcFD1XbYBk4EqE=
Subject key identifier: 62:9F:D7:08:EC:00:94:45:33:00:80:B1:64:28:C2:52:6F:91:E9:29
Authority key identifier: B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
Certificate issuer: /CN=b641b288b4d413e955fea4460b32bf2cc182af03
Certificate serial: 0196BCDBAFAA49AB49BF4C682A6DF7CDE71A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
Manifest number: 1530
Signing time: Sun 11 May 2025 01:00:35 +0000
Manifest this update: Sun 11 May 2025 01:00:35 +0000
Manifest next update: Mon 12 May 2025 01:00:35 +0000
Files and hashes: 1: tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl (hash: UPOTTLmqplWW3wgVgq6EDTjzpjSbFEW3LGkf/eRCB7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:af:aa:49:ab:49:bf:4c:68:2a:6d:f7:cd:e7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b641b288b4d413e955fea4460b32bf2cc182af03
Validity
Not Before: May 11 01:00:35 2025 GMT
Not After : May 12 01:00:35 2025 GMT
Subject: CN=629fd708ec009445330080b16428c2526f91e929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d5:49:f3:6f:03:80:dd:a3:14:3c:8f:52:61:
91:08:73:c6:49:47:e3:35:10:ce:d6:4e:cf:2c:8c:
3f:6e:f4:e0:ee:26:f7:27:4b:8f:2d:6f:d7:8b:ed:
88:7a:ae:0d:8d:79:df:5f:eb:7a:46:5e:ee:ff:2e:
1a:65:28:ef:f9:8b:d4:4a:82:ef:e9:a6:d9:4c:74:
4b:50:e4:cf:7c:45:d8:6d:01:7c:b7:75:e9:67:15:
b4:3a:8b:3c:89:7e:f3:5e:15:2e:df:b3:b4:d6:29:
55:82:20:3c:f3:3c:19:0b:8c:36:79:bb:50:11:94:
d5:0c:08:bd:f4:6a:c8:12:6a:cf:f2:cf:ac:fd:34:
87:bc:4b:4c:48:b4:25:8c:d0:92:4c:bc:a0:23:6a:
6d:6f:15:1e:72:f7:86:dc:0a:68:51:ec:0f:e2:33:
2c:de:b0:da:8e:37:b2:b2:9b:11:5f:80:22:5c:a4:
a0:11:2b:01:40:c7:03:4a:54:bc:ac:9f:27:34:2a:
a4:15:5c:01:6c:77:46:26:eb:b4:97:99:ad:1a:b4:
c6:92:cd:ac:f1:d7:5a:64:fe:17:39:5f:28:b2:1b:
40:58:b3:1b:bc:53:df:99:05:4d:e8:be:ac:cb:d6:
ec:da:40:45:7d:9d:55:57:73:3e:ad:61:96:93:ad:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9F:D7:08:EC:00:94:45:33:00:80:B1:64:28:C2:52:6F:91:E9:29
X509v3 Authority Key Identifier:
keyid:B6:41:B2:88:B4:D4:13:E9:55:FE:A4:46:0B:32:BF:2C:C1:82:AF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkGyiLTUE-lV_qRGCzK_LMGCrwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/544f32-7c38-4a7e-9d7a-860ef33c504f/1/tkGyiLTUE-lV_qRGCzK_LMGCrwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3d:23:0c:f0:7b:4a:8f:55:26:b7:9e:6c:56:db:8f:57:e1:
88:78:34:81:69:4a:53:58:e1:2d:d6:8f:aa:82:c4:ee:d5:e3:
f1:ee:22:7f:c7:21:34:a9:4d:3a:b4:1c:62:a0:8f:e5:d8:d6:
0f:61:bc:50:a5:d9:d6:ec:38:bb:44:15:75:94:29:44:ef:d2:
a8:98:6f:07:38:1a:5a:cc:11:fc:1e:00:a6:36:ba:fe:d2:a5:
3c:ec:9e:b2:76:4b:a1:87:95:f0:b1:bc:7c:2a:27:1c:a5:b4:
7d:7b:9d:76:07:14:06:1a:f1:9a:63:d3:68:3f:11:35:68:3e:
db:85:f6:2d:d0:cf:4b:a6:d4:c0:ed:b2:c1:d8:e4:60:af:45:
c7:d8:58:f5:cc:eb:a8:c0:e8:2a:78:d2:67:8b:47:9a:ae:3d:
74:7b:0a:a4:3a:f0:20:1e:ad:8e:fd:a8:10:2f:3c:2d:f2:21:
37:0e:46:25:0d:3e:ce:d7:b9:00:32:3f:90:b7:e4:74:9e:6a:
26:83:55:a5:89:a9:c4:e2:fa:04:b1:31:5d:a4:2c:dc:b7:54:
e1:5a:23:54:53:4e:35:f5:45:0e:6d:05:db:ed:a4:e2:bb:70:
03:47:38:ce:b8:5b:62:79:ef:2c:aa:c9:42:c7:03:f8:06:f0:
e1:c9:94:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:29:16 2025 by rpki-client