Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
File: sl8gfyfZGpE36LZdKQEpmHGqOh0.mft (raw, json)
Hash identifier: xawOcxz96oulZxZYXVLi8XYXsJUZQl8kg2IBe0n3yys=
Subject key identifier: 3C:3B:25:BA:2F:17:90:1A:BA:CA:2A:FF:84:7F:5A:60:15:EA:9D:76
Authority key identifier: B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
Certificate issuer: /CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Certificate serial: 01968925154C9A7DC70E6D523B14CE8C5CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
Manifest number: 50
Signing time: Thu 01 May 2025 00:00:30 +0000
Manifest this update: Thu 01 May 2025 00:00:30 +0000
Manifest next update: Fri 02 May 2025 00:00:30 +0000
Files and hashes: 1: sl8gfyfZGpE36LZdKQEpmHGqOh0.crl (hash: w6AO+UOUwlGZTS8tCt/xgyeJ3rbQi0Op976YnChjkAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:25:15:4c:9a:7d:c7:0e:6d:52:3b:14:ce:8c:5c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Validity
Not Before: May 1 00:00:30 2025 GMT
Not After : May 2 00:00:30 2025 GMT
Subject: CN=3c3b25ba2f17901abaca2aff847f5a6015ea9d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:df:6a:66:19:db:a8:24:70:bf:65:f6:b2:48:
83:e2:e7:17:85:86:3e:f0:69:38:b3:7c:f0:7c:ab:
4f:88:cc:48:48:63:18:2a:2d:f5:b6:a3:95:9f:9b:
52:25:b6:3b:85:0b:b3:4e:d7:3f:a1:ac:c2:fb:87:
59:91:29:68:3b:55:d1:47:6b:5f:9c:df:d4:bc:f9:
28:24:c4:c8:f2:c3:06:f1:11:c9:92:17:3a:3e:1a:
4b:02:64:65:2f:d3:e8:3c:7b:a0:5d:c5:8a:92:27:
ca:ad:d4:de:93:58:bc:15:7d:e4:25:5c:e9:3f:55:
9e:4f:f4:1a:a9:e5:26:db:0e:0d:04:29:13:c8:e7:
4e:17:41:42:b7:93:97:04:00:bc:67:e0:a8:1d:cb:
34:05:53:95:c3:68:6a:7e:f8:1b:5b:90:43:0e:a3:
e9:ab:4d:ae:04:5c:eb:49:2e:5b:c5:51:32:35:3a:
79:3a:2c:bd:cb:c6:80:ca:95:99:e2:48:ac:17:e4:
24:6e:d7:5e:b0:86:5c:56:2d:80:f4:d9:2c:70:a4:
cc:3d:d4:92:05:72:8c:fa:fe:35:5e:48:94:33:52:
dd:38:9f:45:1a:69:4f:6e:cf:33:58:51:9c:89:f1:
50:13:dc:f7:1f:c4:be:b6:70:ec:f5:4c:fc:01:68:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:25:BA:2F:17:90:1A:BA:CA:2A:FF:84:7F:5A:60:15:EA:9D:76
X509v3 Authority Key Identifier:
keyid:B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:10:72:ac:ea:28:f3:ff:18:00:41:de:52:10:aa:71:d1:df:
08:d3:6d:2e:73:ac:ae:f0:14:73:5b:22:37:34:2b:b3:b7:e7:
a7:3f:1a:79:22:34:f5:44:10:f9:86:56:52:d9:40:05:87:9e:
01:93:a4:8c:db:08:47:ea:e6:b9:85:e1:03:04:75:f1:ef:0c:
36:2e:15:ce:65:a1:06:ff:dc:d0:ff:c5:9c:fb:0a:5a:ee:e9:
ae:7b:7f:8f:d6:75:d8:0b:af:e8:24:f1:67:80:ee:62:6a:7c:
43:66:8d:93:94:9f:f9:a3:d0:fb:ac:52:ef:74:e6:39:f8:54:
01:67:a1:ca:79:d1:fd:4a:e3:58:2e:be:50:6e:1a:fd:df:11:
51:8b:54:29:0b:e8:92:d9:7a:fe:ce:61:c2:cf:a0:a5:be:5a:
a7:e7:39:c9:8f:cf:a0:ec:e4:02:e5:45:5e:88:53:cb:52:f2:
7f:c0:47:11:11:f3:a4:12:47:fa:96:55:95:47:d8:23:5a:a2:
29:a2:c4:f3:0f:ba:14:82:ba:30:2c:30:78:c8:58:7a:6d:36:
64:64:d1:db:b4:07:5a:fa:a0:b5:14:ed:87:22:ca:2a:28:dc:
9e:9e:8b:ef:f5:24:51:96:63:0d:1b:86:73:c5:38:8a:04:e3:
4d:97:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:32:30 2025 by rpki-client