Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File: _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier: 2GUB/TBiHVEtqhGYaZBo1JECgtMwQEItMzWoothX6oQ=
Subject key identifier: D3:BD:95:12:9A:9A:75:A4:3C:20:9D:6E:73:0D:03:F1:5D:A3:0D:68
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial: 0196767A27CBED2C68982DA04F8AEE9DC2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 09:00:39 +0000
Manifest this update: Sun 27 Apr 2025 09:00:39 +0000
Manifest next update: Mon 28 Apr 2025 09:00:39 +0000
Files and hashes: 1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: 0UreyoUox89fhKxAMqzk9yj6PwfdUModN9a5IcoVx+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:27:cb:ed:2c:68:98:2d:a0:4f:8a:ee:9d:c2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Validity
Not Before: Apr 27 09:00:39 2025 GMT
Not After : Apr 28 09:00:39 2025 GMT
Subject: CN=d3bd95129a9a75a43c209d6e730d03f15da30d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:38:a0:44:48:4a:00:fc:4d:9b:02:49:03:
ee:96:d0:d7:f0:a5:92:c9:bc:7d:54:8b:2d:f2:21:
de:d0:43:ee:bc:6a:4d:80:08:55:1a:7d:db:9f:40:
79:56:de:0b:33:20:db:dc:31:a7:a4:6a:bd:a9:8a:
6d:d2:3f:af:81:3d:c5:88:b9:07:34:1f:9a:b9:ea:
64:e2:39:1f:84:ae:fd:8e:47:b3:16:c9:d1:72:2e:
60:87:ef:67:7c:5c:ee:ed:d1:b1:c3:90:a6:f2:9a:
9a:f5:ca:a2:38:f8:d2:11:17:f2:93:c2:f0:a2:58:
af:29:1a:c5:e0:e4:d2:31:d9:86:7d:8e:f3:4b:15:
87:84:d8:c9:40:24:49:9e:12:2b:a1:00:8d:58:5b:
94:54:08:50:43:c0:9e:5d:f7:4f:92:c8:df:a0:7d:
c6:a7:69:d1:3c:4f:8a:fc:67:d1:19:19:d2:b0:90:
3a:1a:e4:6b:09:e3:4a:5d:4e:fd:54:ca:56:15:f7:
6c:3d:2a:1b:41:5e:d5:f0:e4:95:a8:51:41:b3:80:
aa:19:8e:32:ce:85:b1:cf:ed:2b:3c:0a:81:fc:a0:
7a:3a:ad:f6:e6:63:37:d5:71:1f:94:d8:a4:2b:9a:
e8:cf:45:f7:02:97:da:d8:49:17:44:3e:10:c5:01:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BD:95:12:9A:9A:75:A4:3C:20:9D:6E:73:0D:03:F1:5D:A3:0D:68
X509v3 Authority Key Identifier:
keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:77:d0:16:36:d0:b1:d7:dd:db:8d:3f:ea:f6:98:b2:93:96:
43:0e:a5:5b:a0:73:4b:39:3f:cd:fd:ce:65:f0:5c:ec:99:96:
1c:25:60:26:ca:63:04:08:92:d5:3f:cc:7b:67:14:e2:78:ce:
1a:c2:93:13:3e:c6:2e:28:28:d0:f1:94:27:42:3b:ae:00:2d:
cd:1e:88:f5:10:ff:16:f9:9e:3c:18:94:16:4b:aa:ef:fd:1c:
fe:e0:f3:50:49:16:6f:7d:7f:e0:8d:87:82:77:79:d0:38:3d:
4d:85:a8:ab:aa:2b:0f:10:e3:cc:c0:b3:eb:0e:a6:f2:22:b8:
ce:5e:ef:61:c7:6e:25:52:3d:f6:0c:3e:0a:a9:13:df:de:53:
c6:13:ca:b4:cb:5b:0b:07:61:ce:ac:42:81:d5:49:cc:f8:f6:
64:2e:a2:df:c2:d9:21:9a:f6:c1:1d:54:66:b2:a7:0b:6a:82:
9f:04:42:3f:49:cd:f6:86:49:e6:93:bf:85:38:fb:cc:35:c7:
26:4a:08:6e:20:ec:07:1a:ab:3f:e1:05:7e:5b:ea:34:5e:f5:
28:18:38:53:0a:c0:d9:87:8c:99:b6:34:1f:bf:07:42:11:c1:
6a:91:a2:a3:68:1f:f1:97:91:4b:09:bb:f8:9d:ac:69:9d:50:
a3:16:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:56 2025 by rpki-client