Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier: EEKtFm49ChhoNYWZ+FQxAEeXqehkN/xtEvBR8Ye3+f4=
Subject key identifier: AD:42:E1:B1:E8:2F:E8:CC:D8:1F:91:0B:6F:0B:8C:77:39:27:5F:16
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial: 01968C25EBF185AE1CFE75B0FEBC65A9086B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number: 0A97
Signing time: Thu 01 May 2025 14:00:17 +0000
Manifest this update: Thu 01 May 2025 14:00:17 +0000
Manifest next update: Fri 02 May 2025 14:00:17 +0000
Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: Kbw8bYgCdulgVYyrUFiZ/XH9RPMN2F9k2ypNsrlpwro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:25:eb:f1:85:ae:1c:fe:75:b0:fe:bc:65:a9:08:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Validity
Not Before: May 1 14:00:17 2025 GMT
Not After : May 2 14:00:17 2025 GMT
Subject: CN=ad42e1b1e82fe8ccd81f910b6f0b8c7739275f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:22:6e:0b:77:77:36:66:2a:d3:65:df:2a:
a0:0b:6e:69:29:85:51:62:56:72:77:f5:ec:2f:93:
19:17:ee:e1:50:21:69:7c:46:95:80:32:3a:c9:cd:
af:09:85:d4:ac:ce:58:92:30:d5:45:76:0a:40:7e:
2d:21:f8:36:fd:ee:db:36:0e:06:60:92:e5:59:ea:
ce:7a:55:84:c1:00:9e:39:b6:18:61:7a:e0:63:88:
ee:29:ff:99:d4:ed:87:bc:aa:6b:b0:83:4e:3a:10:
8e:66:66:e1:61:20:7f:b0:fd:a4:50:de:e3:8a:08:
d9:c6:fa:d5:41:ca:57:b8:96:62:6a:ad:c5:09:49:
61:70:b6:56:6f:c8:6d:ed:1c:ba:b9:0c:3f:19:49:
30:ba:47:d1:0c:2f:fe:03:d8:d8:40:bd:c9:24:7a:
b5:25:59:70:c3:97:d5:2e:15:e9:94:08:01:61:d6:
31:79:12:c4:fd:ef:c6:46:60:b5:47:fe:e0:e8:40:
cd:7e:f1:15:16:7e:f3:47:1c:7e:d0:2a:85:71:a7:
0e:15:73:08:50:6a:d0:a4:a7:9f:2b:9e:49:74:94:
46:2a:c5:3d:b4:f5:d6:1e:95:fa:57:f5:0d:78:72:
3a:4e:ed:40:05:ae:f8:50:e4:0d:aa:fb:6f:b2:d8:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:42:E1:B1:E8:2F:E8:CC:D8:1F:91:0B:6F:0B:8C:77:39:27:5F:16
X509v3 Authority Key Identifier:
keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8f:4b:ed:78:98:3b:25:6d:81:5c:18:1e:94:0c:9d:80:dc:
5b:75:b6:0c:2c:49:1f:da:41:d8:ae:47:12:b6:b5:1d:57:aa:
b8:a6:ae:b6:73:f6:67:4a:77:72:b7:23:65:d2:55:f0:dd:c6:
ad:df:15:93:6f:4e:29:81:4a:35:7e:4d:be:62:c1:57:22:31:
1a:a3:40:fe:27:e8:76:6b:14:df:08:7f:7d:01:40:b3:c0:62:
3e:17:5b:cf:78:49:b8:20:16:91:90:b9:39:78:a8:1a:70:a1:
d4:41:b0:f2:75:52:d8:96:b4:37:cf:4b:30:10:ee:b0:7f:99:
e4:fa:3d:34:d9:d8:b9:07:04:a0:0a:4c:20:ac:98:fe:6a:a8:
a6:96:4e:f3:a6:ca:c3:e8:92:44:88:24:7c:85:fc:05:41:69:
17:d3:e1:5b:22:b9:ae:b4:c4:f6:86:ca:34:5f:cc:c5:26:4e:
5d:a5:59:e4:17:cc:c3:b1:4c:ed:58:da:9c:e0:47:e1:9c:13:
2e:1f:1e:fa:56:64:d3:fd:d1:00:b1:18:33:6b:36:8c:36:9b:
65:c0:1a:d1:3b:e1:58:91:f9:36:51:a0:2f:2b:bc:9b:03:24:
bc:9e:d6:3c:51:12:e7:3f:02:a3:ad:f5:d1:bf:4f:33:01:06:
c5:d9:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:33:26 2025 by rpki-client