Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
File: sVKsjTaZEe8sE_k_mZumY8GOETM.mft (raw, json)
Hash identifier: HDoj1OKER8rNz3EC9jb81uXx6OMWEXJzIqyta3ABFgo=
Subject key identifier: 8C:7E:52:3D:F9:1F:25:12:68:79:94:2A:8E:B7:62:AB:C8:2C:BC:FF
Authority key identifier: B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
Certificate issuer: /CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Certificate serial: 019677FB415EFF9D78E1CEF0F409F5D69EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
Manifest number: 1017
Signing time: Sun 27 Apr 2025 16:01:17 +0000
Manifest this update: Sun 27 Apr 2025 16:01:17 +0000
Manifest next update: Mon 28 Apr 2025 16:01:17 +0000
Files and hashes: 1: sVKsjTaZEe8sE_k_mZumY8GOETM.crl (hash: MuDbZA3S9h1PwQgMCbwiohmuUjZXgW7155orHh1pEdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:41:5e:ff:9d:78:e1:ce:f0:f4:09:f5:d6:9e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Validity
Not Before: Apr 27 16:01:17 2025 GMT
Not After : Apr 28 16:01:17 2025 GMT
Subject: CN=8c7e523df91f25126879942a8eb762abc82cbcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5a:72:bd:b8:1f:fa:88:d5:54:95:8f:c4:99:
c0:f1:ff:e9:8e:c3:8c:e5:bb:87:ad:50:00:d9:79:
b3:12:d6:c1:9b:e2:7f:7c:64:c6:e3:dd:ac:9d:74:
70:0a:78:55:96:01:8c:0e:50:43:ac:5e:f4:da:61:
6d:7f:09:ba:f9:b6:21:0d:f7:6a:88:3c:70:e1:ce:
25:e9:b7:71:9b:36:c8:24:72:70:85:14:92:eb:30:
f9:d6:43:5d:27:e8:46:48:a6:3f:8e:e8:d5:95:72:
5e:a6:4f:87:0d:99:a0:90:d0:b1:a6:8c:05:4a:29:
4c:fe:15:c7:fe:72:28:31:c7:99:27:9f:c6:d2:bf:
21:4b:be:5f:69:bc:04:52:46:e2:df:f5:c8:09:a0:
f5:d8:c3:f4:8b:cf:ec:1f:11:12:19:a5:dc:61:b2:
39:e8:ee:b7:47:a1:c1:35:37:28:38:4d:32:c2:b3:
b6:ae:34:2d:81:d1:9f:68:cb:64:af:fa:58:87:82:
ff:44:78:e5:cd:8e:10:0f:6a:d0:dc:bc:50:f4:4c:
31:99:c2:04:c8:5f:94:1b:02:ae:12:57:7a:63:67:
58:95:5d:3d:02:32:60:bc:4b:32:11:b9:2b:14:c2:
2b:4a:0a:e3:ae:58:25:72:d7:48:ab:54:1b:e2:38:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7E:52:3D:F9:1F:25:12:68:79:94:2A:8E:B7:62:AB:C8:2C:BC:FF
X509v3 Authority Key Identifier:
keyid:B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:89:cd:6b:66:62:a6:a0:19:d4:76:08:8d:8d:f8:60:4e:5b:
e4:e9:4e:75:d4:b0:35:85:ba:97:54:09:20:ca:d5:37:31:60:
70:29:e5:0d:fe:ac:da:9b:50:43:d1:15:e0:44:1d:59:c9:48:
bc:8f:de:bf:b0:ab:e5:fd:82:70:1e:65:86:c5:38:ab:06:c2:
1d:56:0d:78:e2:19:b9:e1:f0:90:88:3d:6a:bc:fe:58:9c:ed:
5c:e8:14:81:d2:1c:00:83:3e:01:39:24:68:88:92:64:44:d1:
37:4e:71:74:3d:f7:a2:0d:12:10:38:8a:64:06:59:5b:92:f4:
c9:9d:0c:b6:e5:12:99:09:45:94:83:90:1d:ec:54:1e:83:a4:
54:71:b2:d0:25:2d:3a:4f:d5:7d:0a:9b:b7:a9:1f:43:0d:6c:
6a:e6:73:81:2e:fd:38:3b:cb:d4:41:c4:51:17:e7:e2:d9:e1:
ec:06:50:67:c6:69:e2:5b:4e:cc:86:7d:7f:c0:c3:3a:7a:75:
94:3e:4f:f3:8d:b5:26:fd:aa:9a:62:48:a7:70:92:4c:cd:69:
16:f3:58:6f:a6:db:48:b8:26:75:a7:6e:bf:c8:c3:c5:e5:0c:
a7:2e:e5:6c:3a:8b:13:a5:e8:a0:dc:c7:ee:b3:36:a5:ae:ae:
35:4a:39:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:56:12 2025 by rpki-client