Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File: 718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier: mjI/Tqza1+32yK0WzcRtSJUOHIf5YyHyo+OTOY1a2rc=
Subject key identifier: 50:D8:F2:5C:4E:92:B4:95:31:1C:B0:AF:EE:4A:28:CC:0C:02:5D:43
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer: /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial: 019677FB73F8C42CEE037BEECA7566E42141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number: 0F08
Signing time: Sun 27 Apr 2025 16:01:29 +0000
Manifest this update: Sun 27 Apr 2025 16:01:29 +0000
Manifest next update: Mon 28 Apr 2025 16:01:29 +0000
Files and hashes: 1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: aBz0kfSa9OSfnaRXrhhti5PLkESmuD8Y1VXm3kNXvFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:73:f8:c4:2c:ee:03:7b:ee:ca:75:66:e4:21:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Validity
Not Before: Apr 27 16:01:29 2025 GMT
Not After : Apr 28 16:01:29 2025 GMT
Subject: CN=50d8f25c4e92b495311cb0afee4a28cc0c025d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:c8:7f:79:3e:98:57:25:22:8c:93:f6:38:
96:14:35:c3:67:06:c6:45:21:d6:25:35:c2:1d:ca:
09:3f:42:1e:a8:a3:ec:a4:2a:26:50:07:48:84:0a:
53:19:4e:73:9d:75:f6:f5:5d:45:5d:e0:cb:75:77:
45:e6:42:df:66:30:57:c2:2d:34:0d:2a:9c:65:da:
a2:c4:c5:9e:c7:a4:59:ed:74:de:de:a2:63:7c:cd:
ee:14:cb:fc:e9:ee:db:99:0a:29:40:b0:f2:a6:8e:
ac:5b:83:95:55:b0:02:d6:b7:bd:b1:58:31:45:22:
17:01:69:57:22:c3:18:c9:ac:ca:1c:10:e2:00:8c:
dc:f6:3f:7b:3c:06:88:c0:69:ff:b1:f8:10:58:79:
09:3a:58:d2:35:6d:05:65:06:cb:0f:3e:ab:86:e9:
1e:75:4b:ae:02:26:81:cc:ac:bb:9b:e6:b1:04:58:
5a:a4:e2:67:26:9c:4f:e6:ed:06:18:96:c5:b0:d4:
fc:72:bf:d8:07:9f:47:50:c2:c5:22:c5:3d:e7:e9:
8d:11:ff:11:f7:69:9a:51:8e:e3:a0:bd:99:77:36:
7e:98:43:e2:b6:44:f6:2c:30:b7:4a:0d:21:55:a1:
3d:5b:5e:a2:bc:48:ad:83:ab:b7:99:a8:c6:78:2a:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D8:F2:5C:4E:92:B4:95:31:1C:B0:AF:EE:4A:28:CC:0C:02:5D:43
X509v3 Authority Key Identifier:
keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f0:8b:7a:05:75:82:89:f8:50:31:07:a9:9e:82:88:5e:34:
79:ca:43:de:f5:42:2e:85:e0:10:b4:d3:da:ef:a7:56:fa:cf:
53:3c:f6:e7:13:42:1d:8b:cd:7b:67:60:dc:95:f0:f1:39:d3:
d0:03:3f:03:b7:25:d3:b5:2c:cf:81:91:84:22:4f:97:50:b0:
96:e2:2a:bc:26:3b:f8:36:fe:7a:c2:e3:35:33:54:82:81:fa:
3a:82:68:f7:cf:4b:a2:31:e9:e6:f8:dd:90:30:08:95:82:bf:
14:3a:17:55:1b:5a:33:11:0e:c3:af:c5:06:cd:1b:47:e1:a1:
30:2d:55:f2:93:ec:e4:45:86:01:aa:6e:aa:3a:87:3f:5d:69:
48:56:ba:f0:bc:cd:11:23:30:5b:ad:2b:b5:cd:0e:7c:e0:90:
e0:c4:a1:08:24:3d:ee:f2:1d:72:db:a1:22:4b:42:0e:90:5a:
51:8a:2c:72:e1:5c:fe:dc:62:6e:7f:40:79:de:96:38:47:e0:
65:5d:c7:ab:56:83:de:cc:29:88:15:80:97:37:af:b6:83:e0:
e2:b2:62:53:cc:5b:cd:7c:1e:3e:5e:dc:12:2f:ed:9e:f1:0e:
2c:64:23:93:5b:a5:67:92:69:f5:be:68:ab:4b:0c:ee:9c:8d:
37:df:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:42 2025 by rpki-client