Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier: uBn0MbOWUDt3HJn8a2t8oVmDtLuQFn07rDNn72vQj+M=
Subject key identifier: 20:41:5A:76:F4:AC:5C:82:46:11:C3:ED:8E:7C:22:88:0C:74:86:A4
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer: /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial: 019684DABF34B39C7885CBAA3030310DB4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number: 1514
Signing time: Wed 30 Apr 2025 04:00:50 +0000
Manifest this update: Wed 30 Apr 2025 04:00:50 +0000
Manifest next update: Thu 01 May 2025 04:00:50 +0000
Files and hashes: 1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: jJWbc2QVzPsF/HAC1RxNXlCitJsdWxy2Uf0/dZYKHf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:bf:34:b3:9c:78:85:cb:aa:30:30:31:0d:b4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Validity
Not Before: Apr 30 04:00:50 2025 GMT
Not After : May 1 04:00:50 2025 GMT
Subject: CN=20415a76f4ac5c824611c3ed8e7c22880c7486a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:56:5e:16:46:80:d3:45:8d:87:f7:3e:01:
4d:c3:59:3b:be:2d:f5:d4:73:0b:5e:b1:26:d2:c8:
79:5e:48:86:8f:f3:d7:88:e5:1b:86:29:94:61:0c:
68:09:f2:99:74:e2:1e:ce:e1:f3:72:51:b3:a6:cb:
7b:60:6c:8d:83:d8:dd:c4:bf:61:9b:9a:b1:79:2b:
49:e0:8c:cf:d4:58:1b:cb:90:27:4d:eb:81:ab:a3:
ff:81:3b:43:8a:31:b7:4a:75:54:1d:dc:cd:af:73:
d2:e9:c5:04:3b:2a:75:6c:e9:6a:fb:d4:2d:0f:9f:
88:38:a1:56:fc:23:ac:04:27:8f:4a:5e:97:d7:0b:
70:d1:cb:ea:b5:28:38:87:2d:ec:60:7f:63:6d:8e:
22:f8:e8:0b:09:0e:22:a2:5f:bf:4f:41:fc:06:ce:
82:3a:0c:d0:4d:40:c4:9f:5f:03:74:fd:af:be:be:
fe:fc:97:84:70:cf:b8:66:d6:3f:e3:4c:7c:1f:53:
a9:8c:62:34:62:83:9c:1d:15:84:52:a7:56:ec:dc:
53:2c:a1:ad:7e:ab:a8:99:15:a5:37:32:89:4c:ff:
a6:8b:68:80:07:6e:98:d3:0f:3d:87:44:6d:cd:f9:
41:f3:aa:da:1c:08:25:c6:c6:76:df:12:72:9d:b1:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:41:5A:76:F4:AC:5C:82:46:11:C3:ED:8E:7C:22:88:0C:74:86:A4
X509v3 Authority Key Identifier:
keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:bc:1a:55:93:f1:69:dd:ea:63:06:f5:2a:c0:5a:25:be:ef:
b4:27:19:0e:c8:40:e7:b5:1a:ef:78:44:5d:d5:15:4f:01:d7:
0f:5a:d1:9f:3d:27:79:94:91:c8:d5:94:d8:80:05:02:8b:cf:
1f:01:cf:fd:c3:85:9d:f2:e7:ba:fe:18:87:18:68:c2:d3:5e:
45:2b:a5:14:7c:94:60:08:ef:1d:5f:bc:17:48:e7:88:f9:1b:
c7:5e:74:81:cc:e5:b8:7d:61:27:12:f4:0a:6c:ad:23:cf:c4:
fd:2a:d0:c2:ca:e7:03:12:28:03:54:18:7a:b6:a0:69:a6:89:
a3:77:a8:d4:8a:3d:ce:d3:ca:bc:58:89:3a:13:40:12:5c:92:
cb:a0:4e:63:ff:56:81:b9:e2:c5:35:b0:8e:54:70:77:7f:c4:
3c:a4:a8:96:14:14:83:b8:c4:cd:20:95:0d:eb:1d:e0:cb:d0:
23:3b:61:28:8f:a8:c4:45:93:33:a5:c0:03:35:36:ae:70:67:
8b:7e:bd:d1:d9:81:86:f8:7b:ac:6b:34:79:05:22:42:b9:2d:
fc:bb:2b:3f:43:3e:83:ef:a2:90:63:65:de:64:0d:ca:3f:a0:
e6:16:9c:f9:d4:31:27:61:b5:d1:1d:a9:b3:3a:d0:32:e9:59:
58:8f:69:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:27:16 2025 by rpki-client