Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier: KJWd0AjnifV4d9EyAjJ9GYQa54TlW7hPzP8QXqPcMJU=
Subject key identifier: 40:D5:C4:B3:E4:A5:75:62:E9:5E:DE:C8:5D:8E:C0:61:02:0E:B0:52
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 0196BFDCF386B7FA068303BD017C57D93B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 15:00:50 +0000
Manifest this update: Sun 11 May 2025 15:00:50 +0000
Manifest next update: Mon 12 May 2025 15:00:50 +0000
Files and hashes: 1: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: QG88f8TgM2OEk6CC9RLCS/+V5qGJGWtqwysHUlOpEo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:f3:86:b7:fa:06:83:03:bd:01:7c:57:d9:3b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: May 11 15:00:50 2025 GMT
Not After : May 12 15:00:50 2025 GMT
Subject: CN=40d5c4b3e4a57562e95edec85d8ec061020eb052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:8e:c9:f5:c9:ba:48:ea:88:0c:cd:51:16:
8e:03:71:a2:fd:f4:97:9f:2e:e0:07:d8:0b:30:49:
a5:ad:74:de:c9:83:c8:e0:c3:1f:e1:9c:1f:50:96:
87:37:ce:37:22:3a:48:f8:70:d5:80:ee:67:92:c9:
cc:d5:67:a9:80:ba:7f:91:af:62:9d:a2:8b:63:57:
83:15:6d:4a:b7:90:7e:c6:68:05:5d:cd:3d:7f:fb:
6e:7c:f2:a5:16:32:c9:2f:47:8c:d9:19:64:ae:40:
da:1a:b4:c0:a7:c1:c0:b7:7c:3b:f8:47:eb:9a:b2:
41:41:6f:6d:e6:f7:0d:8f:00:2e:23:67:27:ad:90:
1c:28:13:41:8c:1a:4a:d0:ec:fe:00:55:ad:40:b0:
fd:34:5a:de:d5:28:cf:c6:0c:bf:af:e5:40:41:06:
8f:74:6c:ea:1b:b8:86:1b:e4:06:56:08:db:18:9d:
ed:9d:cc:7d:ab:63:68:b8:09:be:bf:e8:c0:04:4a:
53:bc:bf:da:43:01:17:e6:69:0f:70:ca:36:e2:b0:
9b:cf:2e:68:2a:51:72:95:99:dc:00:7d:df:00:d9:
a5:c5:2b:b3:e6:57:be:46:ce:52:c6:50:12:bf:51:
f9:2e:15:12:ef:57:06:cc:1e:b3:7e:43:a9:9c:81:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D5:C4:B3:E4:A5:75:62:E9:5E:DE:C8:5D:8E:C0:61:02:0E:B0:52
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d4:e9:4c:c3:47:a2:5e:46:4e:46:26:18:eb:8d:68:d7:b2:
84:ea:0f:24:2e:2c:69:e7:94:1e:88:ab:77:db:1f:33:9b:33:
e2:06:c1:f5:e4:61:02:00:d5:b6:dc:89:41:0a:f2:7e:15:78:
af:31:80:5b:5e:ce:73:39:fc:68:70:fa:f9:a6:c6:13:ee:70:
9e:ce:14:56:f1:60:90:55:98:a5:1a:31:85:95:40:72:0f:af:
84:aa:c7:12:6a:8e:71:ca:1b:59:34:49:3f:27:ff:be:29:69:
b9:1b:df:2b:06:b4:ca:62:79:26:86:65:c1:93:df:35:5e:19:
e9:4b:f7:23:79:d7:58:b4:8e:e9:e4:d3:48:9e:40:90:38:15:
1c:30:5d:38:0b:bd:a7:4d:ff:aa:59:00:3d:4a:3a:90:cc:ba:
37:c3:57:5c:9a:d0:df:7f:6f:f5:4e:23:8c:34:85:77:fa:62:
70:06:68:da:14:e9:db:1c:97:59:a9:aa:65:71:89:7a:d1:39:
d4:1e:b2:ea:d4:89:8a:65:1b:38:29:89:2a:21:22:9d:05:cf:
22:8c:3f:5f:a1:cd:55:4a:ac:e5:22:f5:89:36:ab:37:00:f6:
28:34:21:f8:a9:cd:80:00:51:34:ae:2f:9a:b6:ea:7c:eb:5f:
a4:6a:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:13:11 2025 by rpki-client