Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier: zP42O+Hlj5SH9718YtGhC5UegrtXPiiE9O6CSkWw6c4=
Subject key identifier: 5F:AC:AA:41:F4:AC:AC:64:E0:AA:71:4B:A6:F8:B1:7B:E2:AC:36:87
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial: 01969B628AD7D2A711B468A02C9E664A440B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number: 0B8F
Signing time: Sun 04 May 2025 13:00:48 +0000
Manifest this update: Sun 04 May 2025 13:00:48 +0000
Manifest next update: Mon 05 May 2025 13:00:48 +0000
Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: nEE6F5dq21zfJBD25mddBnsUqbFt8F4hrTp8rYgzP08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:62:8a:d7:d2:a7:11:b4:68:a0:2c:9e:66:4a:44:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Validity
Not Before: May 4 13:00:48 2025 GMT
Not After : May 5 13:00:48 2025 GMT
Subject: CN=5facaa41f4acac64e0aa714ba6f8b17be2ac3687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e4:bc:41:57:86:77:bb:33:65:69:83:79:d7:
9f:2c:ea:00:d1:53:c7:b8:f4:ef:03:ad:5f:ad:c0:
55:51:79:ee:a6:b9:c0:49:09:23:e0:cb:b4:41:a6:
c4:53:44:bc:ca:79:84:e3:84:ad:d3:f2:8b:18:15:
2b:7b:2c:6f:ef:89:04:8e:ff:40:78:8e:c7:db:11:
be:fa:cc:00:90:fd:1f:db:89:fa:41:ac:26:83:42:
70:f0:fc:58:8d:d3:32:43:46:3a:88:8d:c9:80:8a:
fb:6a:55:6a:ca:4e:2d:d5:88:5d:69:d9:a6:43:8b:
ae:03:36:29:40:cd:a2:3b:5d:15:13:c1:3d:a1:d4:
b4:ae:24:24:ff:f7:04:a6:e5:0e:f0:49:3a:af:f5:
70:04:1c:79:df:9b:e5:0c:1c:2c:2d:c9:47:66:97:
63:c3:6b:18:4c:fe:3d:c6:2a:56:6f:15:17:db:47:
5e:c6:04:23:58:e0:c2:ba:bf:cc:aa:98:0b:b0:26:
17:56:c3:3c:a4:b7:c9:71:e6:b7:90:c9:50:eb:54:
0a:72:5e:ce:cb:60:80:fe:7b:63:1a:b1:5c:70:d4:
be:95:9b:df:d6:5e:33:73:7e:6e:62:79:81:d6:43:
d2:89:10:cb:ca:44:ff:e4:05:f0:16:c5:03:c4:fd:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AC:AA:41:F4:AC:AC:64:E0:AA:71:4B:A6:F8:B1:7B:E2:AC:36:87
X509v3 Authority Key Identifier:
keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c9:c9:87:c4:40:67:97:d6:cf:be:9f:97:71:d8:51:cf:5d:
69:78:b5:72:4e:16:56:f6:62:34:36:00:98:91:88:ca:9b:4c:
25:a1:6a:ef:d4:6f:99:70:4c:28:11:4b:96:8f:d3:4e:9d:e6:
46:ea:a8:18:24:c0:5d:ca:f9:61:a8:ae:11:a9:ff:39:68:30:
39:1a:a1:27:7e:7c:8a:0b:d0:dc:50:1a:b1:0b:7f:11:a5:e9:
a1:6f:eb:1c:68:38:e1:05:3c:44:34:44:fd:f3:4d:09:a9:0a:
fa:34:df:3a:d7:64:51:d6:51:5a:c0:a5:01:a6:11:ab:38:c2:
8a:c4:72:0f:2a:ee:19:ea:1a:32:ea:8c:f7:fd:9f:45:64:ca:
2a:69:c4:25:00:f8:c6:d3:e5:c8:39:bb:39:d1:fd:ca:6f:0f:
25:70:de:89:c3:ce:59:cd:40:a0:e6:94:c3:80:44:8f:5d:6e:
92:62:3f:93:3d:15:e8:9a:cb:56:c7:f0:7d:b8:e9:d3:f0:2c:
d3:03:31:10:f6:1b:8a:05:31:60:ab:bd:63:c8:29:53:e6:e0:
cf:52:86:69:64:af:bd:0a:7f:a9:90:86:36:33:38:ef:d5:23:
50:81:cb:71:e8:0c:ba:02:c4:72:a2:56:d3:38:4b:7a:e5:8d:
24:f5:06:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 20:06:40 2025 by rpki-client