Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
File: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft (raw, json)
Hash identifier: lbg6SIN6+P9avRK9KnQKG/t4cvCb/bP8FcCS7Tzp3m0=
Subject key identifier: 28:E2:FE:48:AA:D7:A6:72:BD:B2:3D:66:20:B5:88:BD:C2:53:72:DE
Authority key identifier: ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
Certificate issuer: /CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Certificate serial: 019681A275B199D9A83744AD6611E9578D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
Manifest number: 1350
Signing time: Tue 29 Apr 2025 13:00:29 +0000
Manifest this update: Tue 29 Apr 2025 13:00:29 +0000
Manifest next update: Wed 30 Apr 2025 13:00:29 +0000
Files and hashes: 1: 7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl (hash: WonwQ5PMp7Bxmxt3W5XG6JJVai4KgZrIWkobiBHEkiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:75:b1:99:d9:a8:37:44:ad:66:11:e9:57:8d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff33e8a3baae2d8d8560010c97c76f3b19fac9
Validity
Not Before: Apr 29 13:00:29 2025 GMT
Not After : Apr 30 13:00:29 2025 GMT
Subject: CN=28e2fe48aad7a672bdb23d6620b588bdc25372de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:1e:46:d2:fc:fb:be:1d:df:df:0d:c6:38:
7a:91:d0:ee:57:0f:49:40:dd:ea:a0:51:d8:a0:85:
4a:1a:67:73:aa:0c:0b:f0:f8:89:8e:2b:fa:21:7f:
e0:09:5e:a2:9b:4a:95:ac:72:bf:79:28:58:55:d6:
f6:37:63:3f:0f:49:c3:96:7e:b3:3f:7a:68:42:f4:
83:5e:e7:e5:65:92:db:c9:6e:d6:20:b7:8b:3d:f8:
88:10:65:06:7d:93:79:a2:1a:b0:f2:ff:e2:43:02:
cc:b1:e7:d0:d9:4b:f2:c6:a0:eb:cb:9b:13:a6:5a:
36:50:74:e7:9a:80:93:0f:2d:dd:99:08:e2:31:36:
86:14:28:e6:c7:19:45:be:77:d9:86:b5:b0:dd:0e:
ae:45:c1:ec:da:37:2f:fa:61:09:e7:1a:69:2f:b0:
76:48:25:9b:ff:8f:ee:5d:77:b0:ce:e9:28:2a:c8:
6c:d2:03:78:57:07:d0:f8:92:9e:cf:21:8e:b0:f3:
f4:dd:5c:99:b6:16:93:c0:54:32:77:c7:4d:09:c1:
21:bc:1c:e6:a5:6c:64:50:13:4c:0a:b4:a1:04:81:
ed:21:6b:51:bd:e4:63:9d:fd:c0:64:07:01:9c:a1:
82:51:a4:87:01:d6:04:70:3a:b7:cc:ea:0c:43:b6:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E2:FE:48:AA:D7:A6:72:BD:B2:3D:66:20:B5:88:BD:C2:53:72:DE
X509v3 Authority Key Identifier:
keyid:ED:FF:33:E8:A3:BA:AE:2D:8D:85:60:01:0C:97:C7:6F:3B:19:FA:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8z6KO6ri2NhWABDJfHbzsZ-sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f05332-beef-4f42-88f8-0dce271f7e61/1/7f8z6KO6ri2NhWABDJfHbzsZ-sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5e:8e:50:23:f5:60:a5:fe:d8:2b:82:59:6e:d4:21:fe:7a:
8b:78:b2:fc:a8:f0:92:67:89:1f:99:de:08:db:0c:85:45:c2:
e7:a3:4b:8b:c8:b4:9d:5c:33:68:ee:fb:e3:91:b1:68:4c:8b:
e9:be:b6:47:79:7c:81:ca:29:41:7e:8d:d5:79:15:74:03:51:
6b:41:27:be:62:0c:99:e1:10:32:d3:35:d9:48:eb:0f:4b:0c:
6e:9d:af:78:48:ca:22:bd:cc:ae:3f:ed:42:0e:da:17:e1:b6:
c3:2f:6d:21:ff:08:3c:3c:09:b8:f9:e9:35:53:a5:af:f9:c3:
b6:ca:9a:dc:b6:57:0b:b4:a1:e9:a8:9a:3f:0e:dc:e3:fd:04:
3e:63:10:d5:31:bf:a4:56:cf:78:25:e3:7e:fd:66:21:af:a9:
99:a7:12:b0:6b:92:43:85:02:d0:5a:9e:a9:ab:8e:b7:ba:87:
ec:ae:48:3d:dd:c6:5d:f1:8f:83:4f:51:c5:95:80:5b:b0:0d:
28:b6:20:42:c2:e3:67:0e:13:a0:04:a4:f8:a0:29:93:59:cf:
d2:7d:7d:fd:39:1d:47:b2:9e:a9:8e:bf:c8:03:15:c6:4b:36:
c2:87:5a:04:0b:da:34:79:58:b3:a3:b7:17:4e:61:8f:05:7b:
f4:2a:7a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:23:39 2025 by rpki-client