Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
File: B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft (raw, json)
Hash identifier: IeIZAdTNu73u9H7qesubtYjxDWB3dR9O0LZqhAvEIgA=
Subject key identifier: F8:9C:32:38:E8:0A:9E:03:A2:C0:DC:56:ED:A0:EC:0A:8D:EF:F2:88
Authority key identifier: 07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
Certificate issuer: /CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
Certificate serial: 01967F0F84BF003F7F0E388DA3B70C9E9AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
Manifest number: 0EE9
Signing time: Tue 29 Apr 2025 01:00:45 +0000
Manifest this update: Tue 29 Apr 2025 01:00:45 +0000
Manifest next update: Wed 30 Apr 2025 01:00:45 +0000
Files and hashes: 1: B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl (hash: jkN6e2YSHYSC6KdSgPJueqUuKqqA3ZmMjjIgycHFvbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:84:bf:00:3f:7f:0e:38:8d:a3:b7:0c:9e:9a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
Validity
Not Before: Apr 29 01:00:45 2025 GMT
Not After : Apr 30 01:00:45 2025 GMT
Subject: CN=f89c3238e80a9e03a2c0dc56eda0ec0a8deff288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:cf:74:d0:d5:38:7f:a5:55:2c:d1:e8:25:
93:a2:a0:d2:9b:57:2b:7a:10:b2:c2:45:ab:d1:dc:
ac:50:d1:2d:5f:be:fa:80:07:80:0f:eb:ff:2a:f2:
b0:1a:aa:37:b9:1e:7e:eb:06:f8:5b:47:49:9d:54:
92:6d:d4:ab:d8:19:7f:15:4e:e6:f0:e9:9f:b2:35:
1f:19:5c:31:c3:7c:a1:52:f1:f7:8c:5b:f7:2f:e0:
07:88:59:ce:b1:2f:1d:34:72:5d:b3:e4:f9:fe:08:
04:33:c3:fe:c8:d6:4e:4b:f6:80:c7:ca:88:39:9b:
83:8c:20:d0:6b:0f:48:d9:ad:12:2f:fb:bd:48:8c:
fa:a8:aa:dc:18:0b:27:43:ea:7f:d9:7b:46:50:db:
05:62:8b:65:6a:2d:26:2b:f5:bb:1c:c3:f7:d4:d5:
91:1c:1a:4e:1c:ac:ef:01:e2:3a:6e:d6:c0:c5:7e:
b5:91:5d:f5:de:bd:13:d8:96:9e:bd:42:e8:98:3a:
a9:df:b5:13:09:6b:d7:ec:7d:b8:21:d5:55:8a:84:
b6:79:74:db:b5:0a:76:c7:76:13:fc:59:4d:60:0d:
ae:d3:94:54:a5:7b:dd:8f:2c:36:91:e4:5b:b0:60:
38:ea:43:57:4f:c1:83:63:b8:d5:88:89:34:c3:26:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9C:32:38:E8:0A:9E:03:A2:C0:DC:56:ED:A0:EC:0A:8D:EF:F2:88
X509v3 Authority Key Identifier:
keyid:07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8d:12:6a:17:49:67:d2:01:73:a0:de:0a:88:a4:ed:1c:44:
f1:b3:45:9e:ba:91:f9:1b:e7:23:85:7f:33:6f:74:73:27:19:
71:95:8b:63:d5:48:37:cd:9a:46:60:e3:36:67:8e:58:46:f6:
eb:c1:75:75:79:9d:b0:76:fc:ae:b7:28:3d:90:15:26:2b:a9:
9e:3f:34:7d:25:fa:1c:e7:78:9e:95:44:87:c0:f0:92:05:fb:
3d:c0:77:e9:7f:24:cc:79:c7:c6:e2:72:c9:1d:5a:eb:75:bb:
12:0b:3a:dd:16:1b:c5:d2:67:d6:08:14:66:e2:d3:f9:5f:b2:
78:29:60:68:ee:fb:26:47:d0:96:a9:b7:ad:d6:c5:6c:11:30:
65:f2:5e:47:b8:17:32:e4:36:fd:44:ac:de:e3:fc:32:ba:f1:
1e:dc:f5:db:f8:58:e6:c8:ab:68:7a:69:dc:2c:6b:74:cb:4e:
65:6d:46:0f:c8:5a:91:23:28:c1:a3:56:a8:a2:0b:10:49:e6:
ab:10:94:4b:25:9e:0d:79:ec:f4:85:49:33:6a:4a:3a:f7:b0:
56:49:a3:24:eb:46:c4:43:ff:65:ae:73:02:aa:66:f6:84:e6:
e9:b4:d8:54:a0:0d:86:7a:a3:43:fd:9a:bf:1e:4a:1c:b4:9e:
11:3e:64:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:28:22 2025 by rpki-client