Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier: VzgJYw6dC/5Fmby5LYrr6znICLgK2UL7bZxzmE4bod4=
Subject key identifier: 5F:08:2D:59:AB:7A:91:DF:84:9A:1F:EC:CB:F9:9F:BE:19:0F:87:E6
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer: /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial: 01969F3F6DA16811A646EB05EC3547811805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number: 1521
Signing time: Mon 05 May 2025 07:00:56 +0000
Manifest this update: Mon 05 May 2025 07:00:56 +0000
Manifest next update: Tue 06 May 2025 07:00:56 +0000
Files and hashes: 1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: 4zZxTYzVblntZ8HzS0pxBs2h9wztBXkUG3zCrJKreLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:6d:a1:68:11:a6:46:eb:05:ec:35:47:81:18:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Validity
Not Before: May 5 07:00:56 2025 GMT
Not After : May 6 07:00:56 2025 GMT
Subject: CN=5f082d59ab7a91df849a1feccbf99fbe190f87e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:df:3b:b1:f8:ab:da:48:58:2f:fb:fe:11:
fc:71:ce:1f:5b:db:eb:a0:ce:4a:39:82:42:92:0c:
15:1d:a8:e2:03:40:c6:83:2b:f7:07:b7:ac:a2:42:
9b:9f:33:a8:ee:73:19:04:2d:de:72:cd:b6:de:7f:
83:76:f5:57:f1:58:a0:3a:d2:94:3b:ff:08:51:85:
e5:9e:90:00:07:0b:ba:67:d1:26:1f:87:70:e4:18:
06:11:b5:18:56:f8:ca:44:94:89:8d:5e:6c:1b:17:
22:ad:82:87:3f:45:41:3a:1b:ff:a9:e6:a4:67:0d:
8e:b9:64:8b:89:28:85:d6:fe:c5:6b:e1:8f:69:cd:
97:6c:39:d0:96:10:3d:a6:f3:b0:a6:01:78:90:86:
f9:27:c1:36:15:6b:a3:6b:3f:b6:4c:81:88:5e:dd:
25:c6:55:8b:69:e8:52:1d:44:7c:0e:ab:aa:a6:a6:
6a:23:cf:cf:00:53:da:63:83:b1:f6:ba:78:f8:c4:
02:31:9c:69:f5:a4:d7:d5:99:1a:8a:ea:78:d0:e1:
2e:56:cd:c2:9c:d6:94:13:63:1d:e3:73:b5:59:4e:
23:7e:c8:0e:7c:9f:84:46:7f:01:09:7e:ac:f3:14:
2d:c2:da:54:b9:01:42:25:0c:fa:72:bd:1e:78:f9:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:08:2D:59:AB:7A:91:DF:84:9A:1F:EC:CB:F9:9F:BE:19:0F:87:E6
X509v3 Authority Key Identifier:
keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7f:19:f9:c3:66:a8:83:f0:36:61:79:12:ee:cf:4c:81:52:
e6:f0:0f:5b:42:82:06:8c:cc:90:17:c3:60:cb:c2:76:d4:e2:
d9:fc:e1:2e:05:1b:d4:f1:5e:87:36:2a:79:d6:8a:6d:42:5a:
dd:71:d3:68:3c:68:ab:6e:82:5d:60:7f:55:42:72:e0:a8:26:
37:e3:a3:6b:92:0d:5a:64:1c:e9:c0:93:1b:03:87:d7:fd:df:
8f:04:94:7b:28:17:8e:05:54:4c:d2:32:dd:97:f5:77:2c:67:
2f:9a:33:08:f3:e5:c6:42:8a:e1:9e:b8:36:cf:18:05:01:8f:
3e:89:24:fe:b9:5a:ce:49:c6:ed:0a:a3:42:58:5e:34:ca:1b:
33:8a:ee:ec:a3:01:15:70:34:53:b6:81:10:e6:10:52:d1:eb:
53:14:15:fa:02:e4:97:a2:92:99:74:8b:a8:4a:c8:e5:df:49:
ea:56:0d:23:20:f2:a6:0e:9b:d8:03:e8:7a:1c:85:82:90:42:
04:b9:f6:41:76:01:b5:78:e4:b8:3e:59:be:22:e2:c8:68:dd:
4a:0c:32:5b:a1:d5:43:8a:33:d6:56:0d:e4:af:00:05:94:ae:
bf:bf:b2:dd:93:6a:56:f5:b0:9a:4c:fe:2e:cc:cc:7f:be:ea:
67:9e:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:19:24 2025 by rpki-client