Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: N/8Q21XmhjzGTCmYO27tMUoUmmpRiENhNaVK75ySxjU=
Subject key identifier: 02:DB:76:9A:E4:63:2B:B6:32:64:4D:D6:5E:40:7E:64:5E:70:50:EB
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 01969ABD643415450104CA27D07E983962C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 08E5
Signing time: Sun 04 May 2025 10:00:25 +0000
Manifest this update: Sun 04 May 2025 10:00:25 +0000
Manifest next update: Mon 05 May 2025 10:00:25 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: oPszzEwORg3or+yKRyFu8rjZRtTvbaG95KSF5aQcvWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:bd:64:34:15:45:01:04:ca:27:d0:7e:98:39:62:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: May 4 10:00:25 2025 GMT
Not After : May 5 10:00:25 2025 GMT
Subject: CN=02db769ae4632bb632644dd65e407e645e7050eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:cc:dd:bc:e9:e3:57:6f:3e:be:40:a1:96:
ce:59:67:7d:98:8d:ef:fa:28:fb:c5:95:e0:f4:d2:
f7:e9:f3:97:be:e2:bb:07:57:07:d6:74:29:d5:9c:
ed:e7:73:9c:1a:4e:9d:d1:f8:80:03:5a:a7:48:6f:
d5:2d:0a:7d:de:ea:87:59:72:02:42:7f:8c:34:15:
86:e4:d6:2a:e5:bb:5a:a4:18:83:f4:22:ce:28:8a:
1e:10:0b:15:ee:06:66:68:49:a8:2f:57:62:bf:84:
2c:66:51:52:9b:78:cb:9c:cc:42:09:ab:c7:e6:32:
07:a8:06:e0:51:36:87:01:ae:fc:95:4e:c1:08:19:
09:3c:42:a0:ce:b4:b5:e1:ef:9c:10:f8:69:1d:a7:
e9:fd:b9:2d:21:ce:02:a2:d1:0c:18:24:bc:9c:8e:
5b:e6:4e:a8:cf:4f:31:3a:c7:48:a9:fb:34:1a:b8:
09:a9:2e:3a:cd:66:6e:4b:1c:a8:8f:24:39:f5:be:
fc:53:9a:3b:6e:2e:c7:fb:00:ec:02:7c:52:cc:2b:
72:f9:0f:e7:b9:ce:72:16:f3:76:93:27:77:6e:a5:
96:de:8b:03:ca:40:28:95:39:c4:81:5f:69:94:3f:
fe:e9:c2:38:f7:8f:b6:1f:80:4d:a1:2d:26:b8:93:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DB:76:9A:E4:63:2B:B6:32:64:4D:D6:5E:40:7E:64:5E:70:50:EB
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e2:06:0b:b1:34:80:63:d6:86:33:ba:44:15:4d:8c:a9:15:
e5:e5:f4:04:96:11:d5:5f:23:e7:b4:13:e5:f3:a2:3e:a4:6b:
34:5e:a0:de:6a:49:02:aa:81:2d:be:b0:ec:cd:d8:2b:51:ba:
6c:19:39:90:4b:53:40:6c:98:1d:10:9d:b7:81:4e:7d:4f:c3:
29:fe:3e:92:ef:33:dc:0c:c5:ab:84:64:49:89:db:4a:0c:53:
0b:1f:0d:c8:9c:0c:20:10:c7:d3:c9:ac:98:f5:6b:73:a1:86:
2c:b4:85:e3:19:b9:5e:1e:a0:59:04:c5:9a:1b:3e:95:ae:eb:
ac:da:10:a4:24:e6:a9:a5:75:8c:aa:18:54:8b:b9:6f:6f:c4:
4d:aa:51:59:5b:38:d4:a9:08:de:40:00:ba:87:35:e2:ab:25:
55:29:b0:85:84:ca:cf:f1:9c:74:69:80:a1:bc:af:00:04:73:
5c:15:e0:84:7f:22:95:e2:ff:9f:5d:86:f8:25:21:4e:1c:f1:
30:05:8e:5e:1e:d6:e0:3d:79:71:49:62:9b:07:31:c5:4c:b3:
ee:7e:82:cb:1e:56:e3:7a:31:ab:e3:2d:3e:a9:da:e7:9b:d9:
46:f4:4e:e4:41:1d:12:09:ec:3b:74:cb:05:f3:69:bc:12:66:
09:72:e1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:07:14 2025 by rpki-client