Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: dbj49qIrZqQS/nY17ps55ANr14wHnXsIfvpQHTOZMq8=
Subject key identifier: 7E:70:D1:2B:0D:E6:79:E4:62:4E:06:1E:5C:54:E5:DC:9A:C0:91:B8
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 019681A2765C04FF3FC99BC4923B0DF5CAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 124B
Signing time: Tue 29 Apr 2025 13:00:30 +0000
Manifest this update: Tue 29 Apr 2025 13:00:30 +0000
Manifest next update: Wed 30 Apr 2025 13:00:30 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: lmPzxbJtOGz2K1YwCy5lPmfjLPhkb2e1w3o+9OcXSys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:76:5c:04:ff:3f:c9:9b:c4:92:3b:0d:f5:ca:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Apr 29 13:00:30 2025 GMT
Not After : Apr 30 13:00:30 2025 GMT
Subject: CN=7e70d12b0de679e4624e061e5c54e5dc9ac091b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0e:6f:77:7f:c3:28:29:c1:1f:4c:e9:4a:b0:
4b:cb:4d:7a:60:0a:3b:bd:36:5d:94:5f:26:36:56:
41:4b:dd:50:3f:70:45:d9:1d:c8:28:4e:b1:9e:5a:
55:e5:74:59:a7:ca:9f:03:22:a2:25:a9:3a:ae:0f:
1b:6d:66:dc:60:8e:f5:01:d2:00:2b:ef:3a:3a:61:
a4:68:dc:8c:61:38:30:3f:6d:62:ee:3f:df:0b:6a:
c0:81:e2:3a:17:48:0b:61:be:94:45:9f:04:4c:76:
b3:c4:eb:10:76:45:5f:a6:53:5e:c2:d6:0e:44:20:
08:4a:a6:dc:ca:48:6d:6f:70:05:13:5e:a7:78:d5:
a1:f6:f9:41:7a:6a:92:dc:f9:17:7a:cc:05:fe:9d:
f3:41:8d:f7:98:7b:b4:f2:2a:a5:6c:24:40:20:5d:
c4:14:f1:47:a5:bb:c0:3e:4d:43:c2:07:3b:7a:c5:
59:2f:1e:b6:cd:dc:8c:8e:73:9c:65:f8:21:ea:45:
af:cb:85:ef:c2:fc:c9:55:f0:68:33:2b:e8:2f:e7:
3f:c5:84:25:61:07:c8:50:3d:75:8b:29:60:fe:be:
79:fa:64:f6:34:f2:50:00:50:3c:83:2c:74:bb:90:
6b:8c:3b:e4:04:77:a9:e3:79:de:5c:8f:da:fd:12:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:70:D1:2B:0D:E6:79:E4:62:4E:06:1E:5C:54:E5:DC:9A:C0:91:B8
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:72:23:d2:ff:69:b7:67:c2:b5:9a:97:a7:7a:2d:bb:54:ee:
29:1e:8e:3a:43:a8:ba:68:f5:27:cf:46:e7:71:f7:bb:20:d0:
ee:6b:b3:46:42:c5:97:82:4a:2a:b8:fd:44:23:93:50:f6:a5:
5b:ea:97:ee:44:3f:69:b9:90:50:b9:04:a5:54:d4:12:df:53:
f8:d9:61:42:58:61:8a:c6:ee:12:48:d1:47:52:67:80:13:f3:
72:47:ea:32:4e:7f:3e:06:c0:37:96:42:75:c0:cb:96:a7:82:
56:62:41:ba:38:c0:fa:f3:2c:08:f8:b6:62:fd:21:fb:f9:70:
40:eb:60:8f:d0:6b:2d:c8:df:d1:9f:74:0e:60:c4:c9:1a:57:
a6:f4:36:e2:89:46:e3:0d:11:fb:11:98:6c:5e:9b:38:04:2a:
8d:34:ee:35:7b:f1:bc:df:47:e3:a6:80:ed:dc:0f:21:e8:b9:
32:51:f1:6d:0a:55:1b:9b:e7:63:6a:08:16:f5:4f:06:26:c2:
99:ef:ed:34:cf:5f:64:cf:4d:b3:36:ea:11:ec:71:ca:3b:04:
bf:ad:e2:54:5b:43:37:3c:0d:f5:ce:ae:27:17:36:11:d7:60:
a0:87:d1:52:46:36:75:91:21:71:5b:db:7b:bb:41:80:19:29:
ec:56:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:47:03 2025 by rpki-client