Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
File: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft (raw, json)
Hash identifier: EhsXE6nOvkEr1WKyjWOHOnlOWgBGZpr/rGGCEbQgtZ0=
Subject key identifier: C5:C6:A2:3B:BC:BA:41:BE:69:B0:90:01:7B:50:2D:9E:3D:A4:70:7C
Authority key identifier: 9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
Certificate issuer: /CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Certificate serial: 01967868CD3186235B61B49D5357A4522D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
Manifest number: 127D
Signing time: Sun 27 Apr 2025 18:00:56 +0000
Manifest this update: Sun 27 Apr 2025 18:00:56 +0000
Manifest next update: Mon 28 Apr 2025 18:00:56 +0000
Files and hashes: 1: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl (hash: eA5VL3gzDcHkBzGyFjJTESIUF4CQqEkZqi/uiYKWGnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:cd:31:86:23:5b:61:b4:9d:53:57:a4:52:2d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Validity
Not Before: Apr 27 18:00:56 2025 GMT
Not After : Apr 28 18:00:56 2025 GMT
Subject: CN=c5c6a23bbcba41be69b090017b502d9e3da4707c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:7f:7c:21:c1:b7:19:23:ac:ea:bb:8d:45:
3b:c3:6d:70:8f:9d:b9:d0:03:b8:54:1b:fa:1f:32:
8e:a1:59:e0:b3:56:da:94:db:34:02:1d:95:3f:7f:
fd:6c:41:fe:18:2f:91:38:d3:4a:4e:3f:c9:27:6b:
8c:34:d1:5d:8e:14:5b:32:0f:1c:48:4f:26:0f:e3:
46:d9:14:04:7d:26:fa:cf:a9:0d:f9:45:bb:b1:30:
d7:51:cd:40:62:0f:78:87:74:4d:06:e4:73:71:df:
58:25:51:ef:d0:61:f2:6f:03:eb:cc:be:28:c1:af:
8d:98:5a:07:7a:45:e0:36:3e:24:f0:d5:72:66:d8:
7f:ac:19:d8:51:79:15:3c:fc:13:e3:de:29:05:11:
02:0c:f2:fb:a9:ca:35:ae:9e:0c:bd:6e:57:78:81:
d9:d6:1e:d4:00:60:1f:d6:10:b0:0b:73:f9:12:35:
b2:e3:78:9a:17:17:1c:0c:24:ee:dc:29:25:a0:3d:
01:8e:81:3f:df:70:d3:c7:ed:d0:c4:cb:54:81:59:
58:8e:ff:b9:c2:aa:3f:32:0d:35:a2:ce:55:b1:13:
3e:92:e6:de:78:22:9b:92:73:2b:26:8d:42:a0:ef:
79:b1:a9:f5:99:37:4d:3d:80:b9:dc:36:66:0f:87:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C6:A2:3B:BC:BA:41:BE:69:B0:90:01:7B:50:2D:9E:3D:A4:70:7C
X509v3 Authority Key Identifier:
keyid:9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:61:cd:a5:09:90:70:9f:3e:42:5e:95:af:5a:65:23:84:3f:
71:84:3e:e0:2c:79:b4:45:02:bb:e1:b1:f5:bf:22:b9:ad:3a:
ff:ff:da:f1:51:96:b5:df:1c:a7:a5:38:2e:c5:73:f7:48:f8:
2d:7a:1d:91:b2:0c:db:33:55:29:d3:4e:21:44:9a:1d:3a:93:
34:c4:21:31:9a:bb:c0:b5:02:df:4e:b9:13:99:e7:40:b3:81:
45:3b:f7:c6:eb:30:d7:64:d9:f8:d2:54:74:e9:fe:a9:1e:34:
f7:d9:6c:ec:ad:ef:fb:82:cd:3c:b8:e9:d1:d4:92:f6:3e:19:
ae:9a:4b:c0:ff:0a:1d:54:84:62:44:08:71:45:e8:fd:bc:3d:
99:67:34:8a:86:f1:73:de:36:5e:50:a0:4b:8a:35:cc:87:3a:
3c:c4:e0:3f:3a:41:3e:25:1c:9c:0d:2e:9c:5b:6e:04:5e:4a:
de:a2:27:f4:93:96:af:0f:85:6a:02:e3:12:01:cc:13:3b:bd:
ec:cf:c3:cf:69:d7:30:1a:04:86:bb:25:93:29:18:de:d8:88:
d9:87:19:f1:4c:ce:82:bd:65:69:3c:8e:fe:8e:4b:5a:f3:f9:
f5:43:8b:09:dc:d9:44:a9:25:fa:40:4f:f9:f8:61:5d:f6:f3:
a7:f6:9b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:18:57 2025 by rpki-client