Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft (raw, json)
Hash identifier: lq1mUpyDomNCnGm7cw8xiEKNAbLljTAqacMrx+1vOSo=
Subject key identifier: 35:99:5B:69:7E:90:9D:44:8B:E9:23:FB:B0:A0:FE:E4:5B:12:CB:D1
Authority key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Certificate issuer: /CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Certificate serial: 019675D53962D0572F3F1F87C82A768771E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 06:00:30 +0000
Manifest this update: Sun 27 Apr 2025 06:00:30 +0000
Manifest next update: Mon 28 Apr 2025 06:00:30 +0000
Files and hashes: 1: R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl (hash: dBBwM/KuiugvM+4advBM/iaS3boUDYrqcLWnbwRAdZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:39:62:d0:57:2f:3f:1f:87:c8:2a:76:87:71:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Validity
Not Before: Apr 27 06:00:30 2025 GMT
Not After : Apr 28 06:00:30 2025 GMT
Subject: CN=35995b697e909d448be923fbb0a0fee45b12cbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:20:99:14:72:8c:8c:7a:8e:c0:1d:d5:07:
da:da:1a:d7:b4:32:ce:14:1d:9e:b5:2a:45:5c:a4:
17:f7:01:48:e3:9c:38:75:2d:b6:83:9e:5d:3a:f9:
c7:55:62:be:7f:15:73:1e:e9:4f:f3:44:1c:ab:75:
f8:eb:ee:aa:c5:1e:3c:4a:0a:84:34:37:3a:b8:e2:
38:6d:86:cb:48:6d:06:1a:1e:5b:2c:34:4c:0b:72:
7c:17:b8:74:1d:e3:cc:ad:fb:bf:77:5b:dc:a5:3f:
d5:9d:5f:d5:9b:e2:7a:2c:2f:ef:61:c8:3b:35:37:
ee:4c:b3:b0:54:fc:7f:35:95:68:2d:59:02:a9:10:
4b:a1:eb:fd:c5:3d:ec:c4:29:b0:64:6b:a6:2c:f1:
d3:c9:83:6e:77:e8:76:e5:e9:b7:6e:8a:d9:5d:af:
55:1e:dd:59:2c:f9:81:d0:98:3b:a5:6d:0f:a4:c8:
16:36:e6:4b:46:38:e7:ae:35:47:ba:ed:ef:57:5d:
3d:0e:73:49:a8:d2:36:fb:0d:c3:57:07:b0:09:fd:
a7:1d:aa:63:d2:c6:22:68:6f:76:25:d1:5e:0f:fa:
03:d7:a5:88:bc:76:66:5b:7a:06:d5:76:16:3f:22:
ff:a2:3f:e0:15:5c:66:5e:fe:16:21:00:bd:c1:f5:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:99:5B:69:7E:90:9D:44:8B:E9:23:FB:B0:A0:FE:E4:5B:12:CB:D1
X509v3 Authority Key Identifier:
keyid:47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8e:4a:17:92:e2:30:4c:1c:bd:82:8e:72:70:28:9a:b7:99:
60:55:67:53:33:14:08:12:67:b9:78:36:6a:f9:0c:66:c8:33:
48:2f:eb:a9:23:99:94:0f:df:6c:28:23:7b:29:57:19:a1:fb:
24:94:47:ae:02:05:a6:4a:67:54:67:bc:26:07:96:09:83:c3:
2c:f8:60:3a:8f:bd:fd:6e:33:79:53:f8:2e:21:c3:cb:d4:ce:
a8:24:82:5d:7c:c9:3a:27:13:88:79:fc:88:96:0b:26:f0:a0:
ca:88:50:4b:be:4a:22:e9:f9:01:3d:41:12:c7:2d:66:12:8e:
44:66:d9:5b:82:3d:ec:7d:7e:fd:51:3f:56:15:f0:59:73:f0:
98:29:d9:ca:81:35:ae:b9:b7:f2:d7:30:90:6a:a7:6a:70:78:
b9:91:79:89:03:1f:31:7f:9e:44:d0:38:4e:b9:34:5e:d6:5d:
f2:11:2a:66:63:75:d0:0e:65:b0:48:e0:80:49:46:c7:ed:52:
6d:35:5b:de:59:16:1e:83:b7:e7:d9:82:56:8b:1a:0b:db:ac:
2b:b8:0f:57:fc:f6:bb:49:48:b9:2b:50:13:a9:6a:0d:58:69:
2b:27:9e:8f:c5:ba:bb:c9:4d:2d:28:a7:31:a4:8e:06:29:ee:
57:51:73:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:46 2025 by rpki-client