Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
File: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft (raw, json)
Hash identifier: kdcU3lutMRSkNV7fPV3COe1wP51nDFJou5aZIkCI9pE=
Subject key identifier: 44:FB:1A:81:5F:C3:15:BB:4E:98:A0:13:0D:E0:74:CB:C1:44:83:21
Authority key identifier: 4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
Certificate issuer: /CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Certificate serial: 0196B0A0CF71FDA2A462F8122FF1CD4F8120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
Manifest number: 061E
Signing time: Thu 08 May 2025 16:00:50 +0000
Manifest this update: Thu 08 May 2025 16:00:50 +0000
Manifest next update: Fri 09 May 2025 16:00:50 +0000
Files and hashes: 1: TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl (hash: BejQfEXgB9OX5uCVbzyUROPTbA+0k8pGMnKRVXbL6ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a0:cf:71:fd:a2:a4:62:f8:12:2f:f1:cd:4f:81:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8dea04de6e37b190355e03cd2600c47212e18e
Validity
Not Before: May 8 16:00:50 2025 GMT
Not After : May 9 16:00:50 2025 GMT
Subject: CN=44fb1a815fc315bb4e98a0130de074cbc1448321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:6f:bc:1f:76:98:8c:5b:8a:53:f4:70:da:
73:c0:f7:59:50:44:7c:86:b3:f1:e6:cc:97:fe:d4:
60:06:54:57:69:7e:c4:88:93:ac:ab:f1:3b:14:4b:
dd:29:1a:18:95:8f:aa:79:a0:23:87:29:7f:fd:3c:
44:31:ca:bd:5a:01:67:20:23:c1:ae:9c:57:35:d1:
ff:8d:8e:f0:81:78:f7:cb:eb:80:03:69:2b:35:c6:
55:22:59:1a:ce:a6:82:2d:a8:3d:d4:d7:07:58:08:
7e:df:73:c6:e1:82:7f:3d:de:89:57:49:4a:bb:51:
62:f6:32:d0:22:e0:f3:cc:0f:b6:a6:89:96:30:54:
97:8e:ed:28:c9:85:44:1d:3b:04:f2:74:2c:04:fc:
a2:3c:cc:9d:3e:40:95:ca:67:31:29:66:da:be:a4:
63:35:7b:d9:d6:b2:41:08:43:71:87:08:f6:10:51:
b1:4c:42:e8:9f:5c:d7:47:a6:00:ea:dd:91:86:e0:
23:d9:45:67:c1:a6:d3:46:46:5a:0f:a2:b2:db:18:
e5:0d:27:fc:71:69:e6:ed:a0:d9:59:25:f9:68:f1:
50:da:ae:cf:a6:bf:54:ae:29:da:17:d1:b9:7e:53:
62:34:5c:ca:52:aa:ac:c5:e2:91:d2:cd:5d:cd:f6:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FB:1A:81:5F:C3:15:BB:4E:98:A0:13:0D:E0:74:CB:C1:44:83:21
X509v3 Authority Key Identifier:
keyid:4C:8D:EA:04:DE:6E:37:B1:90:35:5E:03:CD:26:00:C4:72:12:E1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e85903-7574-4ab3-b441-5267d716e4ce/1/TI3qBN5uN7GQNV4DzSYAxHIS4Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e6:5a:ea:a9:68:a6:ee:66:52:cb:b7:79:72:56:e5:de:60:
86:d6:b9:7b:3d:df:2c:1b:cb:68:ac:55:40:a5:34:32:b2:77:
ed:29:73:74:66:9f:80:8f:67:75:b7:d8:b1:a3:0c:b4:09:0b:
66:33:c4:f7:fa:a8:74:97:d8:dc:75:16:69:08:e5:10:6e:73:
05:df:eb:6f:f6:6e:60:90:1b:cc:4d:c2:ab:99:d2:06:ab:f3:
02:04:32:de:c1:da:83:16:d6:fb:c2:33:ae:3e:57:09:d6:e8:
06:11:f6:ed:92:b7:15:cf:61:1d:da:0e:3b:88:85:79:5d:ab:
b3:fb:26:6d:ec:ce:03:c3:50:b3:f7:ee:be:8b:cd:37:91:18:
7e:da:a7:e6:ad:b6:d2:ae:d3:f5:81:91:b5:da:c5:a0:12:f9:
f4:b7:63:35:8d:a7:80:77:e2:87:f3:8a:a3:c2:fd:9d:8e:11:
31:45:a4:b7:c4:f6:f1:97:31:bd:3e:2f:89:15:dc:2b:30:a5:
b8:17:d4:a1:e0:75:08:d4:12:dd:6d:3f:64:12:85:ea:71:dc:
c2:3b:b7:3a:3a:24:60:f3:49:ae:22:6b:67:9d:72:90:16:36:
2a:f6:7c:4b:e6:85:58:67:13:13:58:7c:d2:28:f0:ab:ae:de:
de:dd:67:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:02:02 2025 by rpki-client