Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: EI6rxu0RbQnJsQavihTcgeKIKa6f0uXI3FINap9QBj0=
Subject key identifier: 4B:1E:D4:DC:C0:79:F0:08:EE:80:D9:21:ED:F9:FC:BF:9F:2B:8A:FE
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 0196B1EA1C0E527C9554A7B42B263DF02F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 142E
Signing time: Thu 08 May 2025 22:00:31 +0000
Manifest this update: Thu 08 May 2025 22:00:31 +0000
Manifest next update: Fri 09 May 2025 22:00:31 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: nkzW8dly+/7VpfhaVGXzaJu/r+FRAMynKJYHGoyDUHM=)
2: shBm13sVD-3FD9e1R6_cr96dhfU.roa (hash: n/xarPDtIVC1p+Buc2MZvYZnuxYBvdgfF2U0DRag658=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:1c:0e:52:7c:95:54:a7:b4:2b:26:3d:f0:2f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: May 8 22:00:31 2025 GMT
Not After : May 9 22:00:31 2025 GMT
Subject: CN=4b1ed4dcc079f008ee80d921edf9fcbf9f2b8afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:c4:19:44:47:b0:19:c4:ea:ac:ea:4e:ec:
9d:32:af:19:86:ee:dc:91:92:35:fe:91:0b:a1:3e:
82:d2:da:56:d5:bc:b4:43:2b:38:7c:24:61:6f:98:
bc:41:a5:dd:57:b2:29:77:78:e6:08:88:3e:d6:d4:
29:dd:bd:25:19:ab:d0:d1:69:14:bd:3e:04:f7:79:
63:65:a6:b7:70:fe:b9:7c:63:1a:cc:f1:d8:3a:9f:
c0:47:43:93:b5:22:50:cc:20:bf:e4:86:2b:d2:9e:
a0:4d:05:19:6a:a0:31:05:47:1a:17:f4:9c:30:26:
2b:07:58:43:91:c8:c1:bd:75:b1:79:82:e8:a6:b4:
85:5d:34:00:a7:31:93:43:48:3f:d1:6b:b8:30:38:
ed:f8:de:ce:ba:8f:3c:ab:4d:e9:5e:1a:8b:9a:4e:
5a:fc:63:a0:c7:6c:46:11:e0:9c:07:46:c5:87:b4:
76:2f:20:13:01:51:48:5f:dc:db:2b:ac:de:81:03:
00:cb:a0:2f:91:dd:35:c9:10:16:0f:a5:c0:eb:10:
78:3b:08:b5:9e:99:e6:d1:53:a6:d1:59:7b:5c:d1:
84:58:fc:eb:b8:48:45:63:a6:92:62:f6:ec:41:04:
85:a0:a9:2c:16:c1:af:e2:68:a2:89:3e:34:f7:c9:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1E:D4:DC:C0:79:F0:08:EE:80:D9:21:ED:F9:FC:BF:9F:2B:8A:FE
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9a:54:06:33:f2:af:e5:23:13:44:97:3d:fc:31:8a:64:e4:
e8:eb:fa:4c:5a:24:76:d1:9d:d8:04:29:9b:59:c5:ce:aa:e4:
a7:34:70:dd:f5:38:ea:ec:2d:4b:04:c1:0e:8d:62:b9:13:4b:
a4:f8:17:96:7c:48:b8:de:56:05:84:b3:c3:79:e6:eb:dd:28:
bf:e6:fb:96:c2:34:48:fb:7e:5e:5c:85:06:68:33:5c:ed:f8:
3d:4f:3d:08:a8:21:7b:91:39:f9:9d:a2:6b:06:5f:ae:23:a9:
c7:a8:c6:7f:2d:3d:95:1e:25:86:3c:14:11:ea:34:c5:94:c3:
83:8e:93:e6:20:5f:21:94:26:fa:50:db:9f:54:28:2b:22:7c:
3c:33:73:09:66:6b:d6:b1:98:8f:5f:a7:c8:2c:7a:a3:0a:f0:
fc:5a:5c:82:40:35:a2:c8:4b:af:02:57:08:8f:66:3f:8a:9d:
09:1e:04:60:d1:b7:1e:70:3a:df:f9:c9:f9:58:ca:8b:53:e1:
87:83:de:16:b4:89:ee:7d:9c:a3:c2:00:73:5b:85:31:a4:af:
55:77:e3:29:b7:00:b9:02:5a:36:24:41:7f:a9:f7:7d:bb:20:
b4:90:c7:1d:a4:e9:f4:d9:29:8c:d9:ac:26:9b:fd:83:c8:c8:
5a:82:8d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:01:40 2025 by rpki-client