Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File: 8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier: 0CQ4nLXrkYf6XF4RWoQ/T7HYEjLwCxQRR8F0jDrNGW8=
Subject key identifier: 70:29:CB:DB:0B:08:AD:8B:51:06:F5:C6:54:E8:C0:B7:C8:E6:B9:53
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer: /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial: 019682112379369AF850ABFBEC954749C15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number: 02FC
Signing time: Tue 29 Apr 2025 15:01:23 +0000
Manifest this update: Tue 29 Apr 2025 15:01:23 +0000
Manifest next update: Wed 30 Apr 2025 15:01:23 +0000
Files and hashes: 1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: Cj3kP1o03U1PtiA4ST82ZQnihPIfHClYr8vAmNX+PMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:11:23:79:36:9a:f8:50:ab:fb:ec:95:47:49:c1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Validity
Not Before: Apr 29 15:01:23 2025 GMT
Not After : Apr 30 15:01:23 2025 GMT
Subject: CN=7029cbdb0b08ad8b5106f5c654e8c0b7c8e6b953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:82:7d:9e:dc:55:ab:de:9d:a4:96:02:30:
92:4a:54:b7:d6:23:da:dc:68:a2:8c:70:50:9e:1d:
9b:0c:50:ad:01:4e:cb:a8:c8:23:b4:e1:18:20:47:
30:e0:b2:61:92:4f:46:29:8c:f0:79:38:fb:f8:1e:
50:4a:46:07:40:28:5f:9a:40:2f:7c:ae:a2:30:75:
b3:53:eb:3d:63:c8:9e:73:43:29:f7:e6:aa:42:ad:
eb:5b:dc:bd:8d:70:9a:bc:0c:0c:fd:e0:6b:4c:47:
e7:92:ba:53:7c:40:85:4c:fc:70:44:22:e1:0a:32:
54:fa:ad:2b:e8:cd:e5:02:21:bc:97:c1:5e:0c:9b:
21:cd:6d:9e:00:e8:0e:1c:72:f9:a5:45:fe:ba:29:
6a:fc:a7:3a:62:c6:de:8b:12:07:89:10:a4:85:59:
ba:dd:7a:48:0b:6e:9a:56:21:4f:46:bf:00:9c:f2:
a4:2c:1d:3e:27:32:84:60:93:37:6d:d6:b4:18:dc:
46:aa:3e:c7:c8:a0:5a:f4:7d:65:90:19:54:cf:a0:
18:10:c7:17:6f:2c:e6:6c:3a:1f:34:63:91:a0:d9:
15:ed:f5:0a:78:39:57:34:78:d2:88:23:76:07:8c:
71:b2:55:87:92:ab:ee:c6:62:73:65:65:be:95:58:
af:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:29:CB:DB:0B:08:AD:8B:51:06:F5:C6:54:E8:C0:B7:C8:E6:B9:53
X509v3 Authority Key Identifier:
keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:69:d4:15:fb:99:28:90:07:e2:3f:39:66:1c:b5:9c:0b:82:
4e:86:a9:d7:71:10:ba:7a:68:4f:2e:7f:67:e9:a3:6e:68:5b:
e0:ed:39:d6:a7:31:4e:1d:39:fc:9d:5e:d6:77:4b:e2:46:4d:
37:22:e6:c0:a8:ad:25:b2:97:27:ab:bb:28:61:7f:70:45:77:
e6:f3:83:6f:83:40:9b:a8:24:23:1d:4a:c7:43:a0:29:6d:7c:
64:ad:73:39:b8:45:80:b3:d8:60:34:85:b5:de:df:84:6b:bb:
8b:b7:d6:6a:e6:a6:1c:e0:d4:1c:d9:d9:31:59:b2:b6:f4:9f:
41:44:4e:26:b4:ad:5e:bc:31:56:3c:eb:e7:d1:1e:d6:c6:e7:
62:33:94:ba:ff:20:b9:37:21:05:4b:13:be:72:b6:29:7b:0c:
cf:e7:58:a0:61:3a:f0:07:78:f3:a1:8d:e9:a8:01:ae:e7:ce:
48:ae:4e:c3:18:11:71:fc:52:f7:07:45:8a:00:ec:e3:6d:02:
42:66:c3:e9:bb:bc:aa:e3:43:86:64:6e:9e:a7:db:cb:62:9f:
f5:28:39:37:56:84:3f:c9:ce:6d:76:41:01:fb:cb:94:b9:2f:
d5:46:94:cf:47:8d:cb:ee:c6:4c:0b:b8:23:4c:3a:2c:99:8a:
0b:63:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:15:39 2025 by rpki-client