Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
File: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft (raw, json)
Hash identifier: tJT9XZEvI1QsQij/++IjNzEZr+iGX8cYHmH29P/rJVE=
Subject key identifier: 68:9F:A6:FF:29:82:21:C6:AC:D7:05:76:6B:3A:A2:28:54:56:86:F9
Authority key identifier: F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
Certificate issuer: /CN=f25551c7047b3bf9031808c21b8379b9b860c426
Certificate serial: 01967F7D66EF417DC16E82353EEE2721A825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
Manifest number: 25
Signing time: Tue 29 Apr 2025 03:00:46 +0000
Manifest this update: Tue 29 Apr 2025 03:00:46 +0000
Manifest next update: Wed 30 Apr 2025 03:00:46 +0000
Files and hashes: 1: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl (hash: aDUWGLzpdVHzMTtSnvwc0UP6GIRy/hWKlex4kNP2i5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:66:ef:41:7d:c1:6e:82:35:3e:ee:27:21:a8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25551c7047b3bf9031808c21b8379b9b860c426
Validity
Not Before: Apr 29 03:00:46 2025 GMT
Not After : Apr 30 03:00:46 2025 GMT
Subject: CN=689fa6ff298221c6acd705766b3aa228545686f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:90:00:61:31:e7:43:04:7f:37:01:2d:9f:95:
bf:f9:8a:d3:02:97:1b:0b:b5:de:19:78:7b:73:29:
81:75:97:44:c7:b6:e5:3e:92:b3:8c:f1:9e:6b:4c:
f3:14:b1:2b:0a:70:9f:82:a2:f2:1d:06:fa:c8:3f:
87:e3:83:19:c0:25:6c:d2:c2:6e:38:bb:98:12:63:
ce:f8:07:5e:5a:47:4b:8f:d4:2f:2a:c9:83:7e:ff:
2d:3e:60:4b:08:af:b0:d4:b8:17:03:9a:a9:1c:68:
fb:07:97:da:ac:30:07:50:86:44:c5:74:b2:c0:3a:
dc:95:34:f6:fe:95:56:1b:d9:5c:73:27:f6:4b:7e:
bd:5a:b7:07:72:b9:d9:fd:ea:5e:89:d1:e0:c4:56:
df:94:40:1d:b0:cf:85:90:a4:6a:38:83:06:07:99:
86:35:01:64:ee:df:36:10:3f:ec:9d:85:b0:78:85:
24:f3:56:28:d0:ad:fe:62:36:b8:98:1e:57:be:a6:
e9:8f:55:bc:cc:4c:d3:dc:3f:c6:9e:86:72:11:2a:
9a:f0:f9:aa:bb:ae:2b:7f:5b:d0:96:2b:f9:ce:e5:
a0:6a:a6:6b:39:0b:1e:42:b2:9f:85:03:62:de:b7:
40:31:86:07:96:38:37:13:a5:a4:5f:25:95:d2:7b:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9F:A6:FF:29:82:21:C6:AC:D7:05:76:6B:3A:A2:28:54:56:86:F9
X509v3 Authority Key Identifier:
keyid:F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b0:45:5e:e8:91:bb:39:26:91:fc:dc:be:db:c6:d6:62:62:
70:4e:a6:ca:c7:52:7e:93:d1:a2:04:8a:78:55:81:d1:9a:8a:
44:3c:ce:cc:e6:c2:f3:20:b2:63:93:c8:f1:47:cd:c9:46:75:
e7:eb:1a:89:e5:33:ab:a2:a3:d5:17:a5:c2:13:b6:5d:17:ce:
4c:1b:52:a1:b0:81:a1:ab:1a:40:fd:63:10:16:5e:a2:84:e8:
bd:27:40:83:09:1f:6b:30:e2:11:2a:2e:8d:3e:a0:fd:5d:30:
cb:a6:da:41:48:88:fc:70:26:f6:a4:1b:cb:ed:fa:21:e9:b6:
16:30:fb:87:b5:d1:b8:b5:6c:ee:76:23:0c:c9:f4:a2:e4:40:
4c:be:24:09:12:5d:fb:07:44:e5:76:f4:d3:0a:2e:46:49:42:
91:ee:88:c7:e1:0c:1b:2b:8d:e3:39:ec:97:81:bb:31:b4:5f:
68:e5:3b:99:06:16:51:e0:8b:9f:d4:a1:7e:b1:73:13:7f:85:
35:55:b4:44:e9:9a:46:e8:91:cd:0d:f9:24:5a:d8:53:aa:64:
d5:3f:56:9d:24:c2:7d:cc:0a:6c:72:65:f5:e9:f5:75:70:a6:
1e:87:32:95:bf:9b:fd:e3:fd:45:fe:31:84:e7:7d:5d:b4:f6:
8b:4a:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:56 2025 by rpki-client