Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
File: Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft (raw, json)
Hash identifier: z/6tixZbPNNgSybj6klxBcVoynw+pdsgvUkGUiN4aIo=
Subject key identifier: 47:B1:C3:74:72:9A:A8:FB:C8:0F:56:54:4E:CF:9D:3B:CB:26:BE:9A
Authority key identifier: 4A:EF:BC:FA:7F:05:9F:F1:07:27:EA:61:9E:59:13:9D:A3:74:18:EF
Certificate issuer: /CN=4aefbcfa7f059ff10727ea619e59139da37418ef
Certificate serial: 019677FA9E823669616F78E781083BE3C34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 16:00:35 +0000
Manifest this update: Sun 27 Apr 2025 16:00:35 +0000
Manifest next update: Mon 28 Apr 2025 16:00:35 +0000
Files and hashes: 1: Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl (hash: OfQhkSX71vFLMdoLZ/9Au2W4WyYS9nCYEzlE199ca5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:9e:82:36:69:61:6f:78:e7:81:08:3b:e3:c3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefbcfa7f059ff10727ea619e59139da37418ef
Validity
Not Before: Apr 27 16:00:35 2025 GMT
Not After : Apr 28 16:00:35 2025 GMT
Subject: CN=47b1c374729aa8fbc80f56544ecf9d3bcb26be9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:73:05:88:1b:b6:59:28:ab:6d:84:da:55:
06:9b:62:e6:03:d7:64:de:ad:1b:cb:f6:bc:ad:b9:
8c:7c:38:45:bf:4e:bf:c1:7a:2f:e0:0c:19:0a:6b:
fc:a9:18:9d:29:ea:98:d2:52:4c:bc:a5:af:d6:ba:
6d:5a:93:53:c9:a3:f9:76:5f:cb:84:7f:18:c5:68:
e6:6a:42:0b:72:3b:28:e6:d7:5b:07:3c:e4:b3:23:
5a:ff:42:2f:0d:1a:e9:9c:0a:ab:d7:ee:bb:f7:6d:
c6:cf:89:cc:31:5f:be:16:5d:1b:18:8a:fa:ce:2b:
ec:8c:bc:1e:51:e3:d1:79:d1:62:d6:71:61:2c:b6:
eb:8c:11:56:41:52:8b:7e:a5:d1:80:48:b8:43:4e:
80:04:9a:a3:c1:89:62:48:33:08:e7:53:11:1a:cc:
ab:45:9b:42:20:a7:20:e5:97:b1:ef:f8:a8:7a:bb:
16:83:a2:e6:56:24:d4:72:e0:c5:e8:de:24:97:01:
ce:22:09:db:df:41:1a:eb:26:62:d6:6a:4c:04:87:
42:c5:12:f0:e5:da:f5:ef:a0:c2:0d:3f:75:c2:00:
d2:35:1e:d2:67:df:99:e7:84:f3:09:9e:5f:9a:a6:
e2:ea:c4:6c:30:e9:70:4f:93:4d:41:ce:d8:08:ea:
48:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B1:C3:74:72:9A:A8:FB:C8:0F:56:54:4E:CF:9D:3B:CB:26:BE:9A
X509v3 Authority Key Identifier:
keyid:4A:EF:BC:FA:7F:05:9F:F1:07:27:EA:61:9E:59:13:9D:A3:74:18:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2a:35:3b:b1:05:24:86:75:89:82:b3:a0:d4:7b:6b:c0:24:
2f:8e:b4:3a:73:c2:04:6d:89:43:8e:f7:58:0e:c6:1b:4c:cf:
43:8f:dc:5f:e7:47:5c:3d:80:70:fd:dd:bd:df:c9:f9:db:b2:
56:1f:1d:9c:11:84:97:a5:b7:e8:31:f6:ff:82:d7:1e:02:51:
14:1c:60:a7:5b:ab:9f:45:2d:ba:d3:a6:62:9e:2c:d5:29:90:
b0:a2:de:81:60:35:65:07:6d:23:f8:3e:18:98:94:42:7f:3b:
1f:ef:98:94:36:60:8c:70:05:2d:0d:ef:8f:20:03:47:67:4a:
40:67:c1:5b:b8:91:f2:24:90:1c:a1:a7:77:fb:0e:8e:53:f3:
64:ae:ca:5d:ea:07:f2:66:0f:14:77:91:62:eb:c3:86:e1:e7:
f5:3a:e3:e4:b7:53:2c:73:ac:7a:b4:94:13:ba:ce:08:0d:f7:
31:c2:e5:83:97:2e:23:90:7f:a3:71:99:47:e4:e9:10:aa:76:
19:15:e9:a6:24:c2:43:ee:d9:9f:f6:fe:fd:14:0f:be:42:a9:
b3:fe:bb:00:f1:5d:83:fc:b8:7e:a9:1e:fb:47:42:55:eb:b9:
dc:fa:57:7b:66:90:12:38:6f:cf:0b:70:d4:60:ea:10:a4:60:
d6:be:83:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:57:37 2025 by rpki-client