Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
File: 8mAhR5HPhJn8k68B96Q_XL6QKpg.mft (raw, json)
Hash identifier: ZKwHi8KB98YOGvANYDZUKtVe8tlBXx5QVvrw2vUNVE0=
Subject key identifier: A9:7C:88:FF:82:59:17:84:6F:79:98:96:85:74:C1:B3:70:F7:E6:A8
Authority key identifier: F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
Certificate issuer: /CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Certificate serial: 0196741DE432687F87DEB540F45B1492DF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
Manifest number: 0DF3
Signing time: Sat 26 Apr 2025 22:00:38 +0000
Manifest this update: Sat 26 Apr 2025 22:00:38 +0000
Manifest next update: Sun 27 Apr 2025 22:00:38 +0000
Files and hashes: 1: 8mAhR5HPhJn8k68B96Q_XL6QKpg.crl (hash: 3PVeS+24U4ptSzefn1qFlueV0dv1KBD2h6GheFZRfOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:e4:32:68:7f:87:de:b5:40:f4:5b:14:92:df:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Validity
Not Before: Apr 26 22:00:38 2025 GMT
Not After : Apr 27 22:00:38 2025 GMT
Subject: CN=a97c88ff825917846f7998968574c1b370f7e6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:cc:ec:41:ec:39:e5:87:24:84:a7:1f:cb:
eb:2f:58:92:2f:24:17:77:e4:75:44:81:a8:02:78:
07:c0:5f:fd:07:85:99:d1:5d:6f:45:33:57:11:a6:
b7:83:9c:cc:c0:81:1d:bc:23:c0:f2:eb:12:19:47:
80:f1:89:d1:ec:55:4e:ae:30:ab:98:3a:ec:c2:c8:
e3:52:39:f5:66:f8:73:80:09:89:56:92:cf:f9:c2:
09:c8:da:7c:ff:87:68:d2:ea:fa:46:8d:6a:a8:db:
e7:f7:da:ff:a1:d5:1b:ea:eb:e1:51:4d:02:2c:bc:
b4:89:6a:bb:33:e6:7d:d3:11:85:a9:3c:6d:58:80:
a2:f2:74:a2:29:8a:42:2c:e6:8b:c6:f2:74:64:ff:
47:d9:6c:3e:6e:9e:29:db:fa:d4:fb:c0:9b:90:fe:
2e:65:dc:ee:c5:6f:0f:37:8f:82:83:36:e9:06:8f:
d0:d2:51:f8:72:6d:22:73:cd:4d:23:fb:8f:15:6f:
8c:53:8f:b2:df:68:0f:aa:04:70:84:fd:15:1f:3d:
5f:91:fd:f8:67:ec:90:cb:8d:4b:eb:c0:39:c6:b3:
b6:6d:b4:63:13:b2:aa:0d:3e:88:cd:da:e7:5c:eb:
6d:8c:f2:6c:0f:83:42:e9:5b:30:40:17:7a:4b:86:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7C:88:FF:82:59:17:84:6F:79:98:96:85:74:C1:B3:70:F7:E6:A8
X509v3 Authority Key Identifier:
keyid:F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:66:6f:1e:e0:b1:54:82:26:65:cd:c5:6b:44:67:b5:c5:97:
41:6b:98:eb:26:d9:41:13:c7:bc:b8:d7:e3:69:4d:97:f6:c7:
fe:75:bc:38:d0:fb:0b:12:06:7e:99:2f:b3:18:2d:76:34:22:
3c:39:c7:3e:4c:d6:1b:22:d3:dd:0b:2f:1f:42:e8:83:ee:07:
48:2a:c9:e1:6e:d3:a2:e3:10:c0:d0:77:61:40:14:06:0a:9e:
9a:d3:6a:bd:bc:6a:40:fd:10:1f:a0:5b:20:08:1c:7f:65:7e:
29:4c:e9:c3:05:37:cb:ed:e6:52:a2:43:2a:85:04:50:66:7c:
3b:1d:ec:f9:b5:28:23:56:4e:8b:51:30:fb:b0:dc:b1:37:e2:
6b:20:22:dd:c0:3d:72:48:74:35:f2:20:bc:78:a6:66:e5:fc:
f5:87:86:31:df:2f:f2:b9:01:07:71:f0:d2:c0:c0:32:00:c2:
8a:bf:8b:b5:98:b4:4a:2d:56:5b:7f:e0:64:65:d8:f9:c9:29:
9d:2b:83:cf:ec:3e:50:02:18:e7:5d:a0:f5:62:97:de:b1:b8:
cd:6d:3b:f2:fe:4b:e8:f4:9c:8b:89:8d:d0:c8:dd:2a:e5:36:
ca:36:90:e8:84:d1:9b:a6:1f:3b:b7:f1:1b:3f:10:1a:84:69:
80:80:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:39:46 2025 by rpki-client