Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: c6LPT4U5URy/wBuFioII42ad1IACImzEe++jjMj2zEY=
Subject key identifier: B8:3E:DF:87:37:31:24:10:BB:FD:86:78:27:18:51:A0:BB:D0:CC:87
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 01969E9A58FF91DF2BC4492700E35FCD4050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 125D
Signing time: Mon 05 May 2025 04:00:37 +0000
Manifest this update: Mon 05 May 2025 04:00:37 +0000
Manifest next update: Tue 06 May 2025 04:00:37 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: sFhCf2i4aEvuxNWUXJD4liA6srfgtcb29yq68uQ1Ilo=)
2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=)
3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:58:ff:91:df:2b:c4:49:27:00:e3:5f:cd:40:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: May 5 04:00:37 2025 GMT
Not After : May 6 04:00:37 2025 GMT
Subject: CN=b83edf8737312410bbfd8678271851a0bbd0cc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:6d:3e:ba:ac:6d:c0:65:b0:2e:c5:5f:6e:
16:5b:0c:62:6a:c2:12:d7:cd:b6:9c:0b:a3:27:52:
cf:fe:22:2c:25:78:4a:fb:4d:d2:f4:f5:e2:15:c3:
4b:9d:0e:5b:79:4d:4c:47:cc:d6:2b:3f:f0:2f:04:
3f:e3:0d:41:56:0b:5d:91:62:df:48:c7:d3:8b:4a:
c1:d5:eb:f1:ed:a3:f0:4b:5b:b2:94:10:07:5c:df:
55:fc:92:ed:6d:f0:73:a7:13:ba:a1:09:78:d2:d5:
56:de:fa:22:25:3d:79:26:5a:99:26:0b:fd:45:f0:
6f:a6:69:bf:be:1a:7e:fe:c3:b1:e5:28:7b:c1:2f:
ac:23:27:7c:2d:01:b8:51:b5:10:53:0e:43:06:b9:
c3:9c:ea:63:8e:ed:6f:1f:35:fa:b3:56:75:ec:32:
12:e3:06:55:9a:d3:73:6a:19:58:c6:9b:92:63:1a:
60:b7:af:1e:38:82:a1:1e:63:a4:32:ce:26:07:de:
d2:bb:32:54:77:e4:b5:b1:fb:a6:57:b1:2a:35:cc:
9d:02:42:f3:ac:03:05:03:32:88:34:ff:a3:65:4f:
f5:37:15:f6:11:00:63:85:89:b9:b2:77:13:e5:2e:
13:c5:9e:7d:8b:ad:12:65:5b:97:19:ba:72:73:4a:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3E:DF:87:37:31:24:10:BB:FD:86:78:27:18:51:A0:BB:D0:CC:87
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4e:f6:a2:ae:75:ad:c6:23:ae:1e:54:2b:2f:7a:8c:f7:c3:
4b:f9:d3:ae:a0:75:d4:84:ae:01:5f:6d:11:44:14:b9:8d:d3:
90:a8:ad:4c:e4:a8:1c:73:be:40:67:10:20:a6:43:87:7f:47:
d9:fe:2b:a4:cd:d2:c7:43:90:b7:04:36:4f:9d:12:97:67:14:
45:b8:38:3b:25:70:12:00:9f:3a:73:9d:28:bf:b1:35:85:aa:
b9:28:c9:ef:e7:f2:ff:6d:73:95:04:dd:49:a5:95:37:75:1c:
d4:3c:67:6e:57:44:72:9a:df:a9:1d:a8:8a:f9:ea:12:7d:39:
7a:20:6b:cb:2d:13:7d:c1:9d:29:3b:ba:1d:aa:51:ca:42:5c:
79:92:62:b6:69:57:57:8c:df:53:a0:39:b8:3d:0e:27:9f:cc:
1c:ad:5f:df:2f:d2:1c:9e:43:3a:a2:bd:39:5f:02:d1:60:d1:
47:0b:ad:85:9d:a0:14:90:a3:c8:9d:0c:dd:5a:f5:a5:a2:89:
99:53:7e:9a:dc:ee:77:2b:f4:8e:36:aa:11:58:c2:a2:c3:fd:
ea:71:cf:2f:cb:b0:70:c6:b2:da:f4:4d:7f:f6:7f:e0:64:5b:
55:6f:6f:a9:f1:71:d8:a5:af:52:03:7e:99:6b:86:04:7b:d9:
1d:9b:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:40:38 2025 by rpki-client