Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier: vxtvhxO7Fo1BHbMXW3I3r1UJYDEN9h9sn50Q1ld1U3k=
Subject key identifier: B1:32:8B:C4:3E:18:DF:FC:06:C8:38:26:2E:FD:92:71:C2:C6:8E:23
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial: 019695292100EFE824558B201593A9366A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number: 04EB
Signing time: Sat 03 May 2025 08:00:22 +0000
Manifest this update: Sat 03 May 2025 08:00:22 +0000
Manifest next update: Sun 04 May 2025 08:00:22 +0000
Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: eXSB8xvRPKqLYxeRYfTkPTRJiC/LfnMY48c1qPuGiMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:29:21:00:ef:e8:24:55:8b:20:15:93:a9:36:6a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Validity
Not Before: May 3 08:00:22 2025 GMT
Not After : May 4 08:00:22 2025 GMT
Subject: CN=b1328bc43e18dffc06c838262efd9271c2c68e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:6d:7e:4b:4b:a7:75:d8:41:77:8f:66:3f:
7c:3c:6f:00:b4:d1:19:48:0f:dd:db:61:c7:f8:2c:
98:3e:40:b4:79:4d:7f:52:9c:30:36:9e:a5:95:b1:
f7:eb:3a:c5:d7:b2:87:cd:db:cc:d3:6f:21:a0:08:
45:eb:fc:7b:e2:57:d1:7a:28:c5:fb:11:ec:ab:2b:
95:72:1d:05:99:da:84:ca:4d:fe:4a:0e:3e:da:31:
82:f1:36:5e:53:76:64:3d:29:e0:5d:d6:91:7d:c6:
c6:b4:5c:3e:16:00:30:d2:c4:53:2a:72:ab:03:4e:
c2:88:67:cc:f8:33:a2:6f:0f:ce:a3:1f:74:fd:80:
4f:ff:f8:42:e9:91:4c:b3:da:f0:20:70:ad:92:17:
86:71:a3:09:91:df:e8:7d:a6:55:82:6d:8a:0f:ba:
71:ea:41:ab:83:f2:8d:27:76:b2:6b:b5:5b:19:6c:
d6:72:57:8f:da:5f:69:87:86:54:6e:b7:f3:bb:61:
3f:1a:86:97:6c:7b:f8:44:69:2c:f1:61:91:9d:dc:
73:83:71:ab:35:cd:6c:d1:ee:32:3c:15:f8:05:90:
5f:2a:68:d6:f9:af:38:4b:05:ae:eb:27:96:dc:6a:
de:a3:65:77:6e:2d:4f:8e:23:4e:32:4b:67:2b:51:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:8B:C4:3E:18:DF:FC:06:C8:38:26:2E:FD:92:71:C2:C6:8E:23
X509v3 Authority Key Identifier:
keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d1:a0:ca:4c:ba:61:27:4d:22:da:83:c9:42:68:0f:83:5f:
08:fe:a7:ad:ca:2c:fb:ff:72:24:7c:76:4c:a1:d4:3d:6a:59:
05:fe:d0:7b:33:c3:80:83:b5:72:d7:9d:78:5e:ce:c8:74:86:
96:29:e5:1b:70:c7:2e:7e:2a:bc:b7:87:36:31:1b:1b:71:cb:
0b:27:3a:47:1b:7f:be:e3:0a:e0:e6:5b:a6:a5:b0:96:77:6d:
32:6f:40:79:1a:61:d0:93:1b:7c:1a:89:5b:5d:a1:6b:b3:fa:
d4:ec:4c:a0:e1:1b:b3:97:22:8b:5e:25:27:c8:98:a0:70:e4:
91:5e:e4:8f:2b:ae:81:73:c9:6e:eb:29:8e:63:2d:0a:4f:55:
c4:23:d0:09:b7:15:3f:03:75:78:b1:c2:f9:a5:f2:a6:fc:a5:
50:24:96:2d:6f:0f:b7:c7:6c:29:70:05:df:ab:ee:8b:40:c8:
b7:4f:ab:c5:32:f5:35:36:f5:5f:27:2b:df:62:1e:80:50:29:
1c:e6:9d:e7:99:b9:7c:7f:57:ee:70:eb:f1:41:df:93:f6:a8:
f2:eb:3a:2d:ba:a2:3e:dc:00:97:00:6f:f5:cc:b5:10:f2:7a:
5e:b3:24:e0:30:3f:80:8c:d8:f9:0d:cb:b9:3b:10:91:15:11:
ab:62:78:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 11:31:04 2025 by rpki-client