Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: 3R1A12zno9YoCIaHeS6v6mtf/YUXShFOdQqmzAVlYXc=
Subject key identifier: F9:14:25:50:75:61:0A:B5:7B:AF:E0:30:75:56:2A:E8:7F:5D:3E:34
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 01968580230A4AA4CCCDC89C12E6BA21E1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 1514
Signing time: Wed 30 Apr 2025 07:01:29 +0000
Manifest this update: Wed 30 Apr 2025 07:01:29 +0000
Manifest next update: Thu 01 May 2025 07:01:29 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: uJ0Ovqh4FoAMj+Kg/f7Gm0HfT7UakReAsjK7DE+y33I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:80:23:0a:4a:a4:cc:cd:c8:9c:12:e6:ba:21:e1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Apr 30 07:01:29 2025 GMT
Not After : May 1 07:01:29 2025 GMT
Subject: CN=f914255075610ab57bafe03075562ae87f5d3e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ce:cc:5b:cf:61:ec:0e:cc:7b:da:ba:3d:6d:
7b:cb:99:7a:6a:ae:8b:83:d2:a0:6b:5c:e8:e1:a6:
4d:e8:9d:59:12:a6:85:57:61:ae:a2:96:62:08:c5:
f0:c9:be:0c:f9:ea:7c:3d:79:23:71:9a:1d:42:c8:
37:cb:bf:bc:99:e8:85:90:e8:49:89:b1:7b:68:93:
5a:83:17:f0:d7:07:80:b9:bc:91:d6:be:7a:f8:80:
54:64:40:c2:c6:33:22:95:62:fc:58:6d:2e:ba:a0:
25:64:f5:51:74:0b:fb:1c:92:09:f1:df:f3:7c:ae:
26:40:7a:78:23:1f:b9:48:1a:14:27:59:5f:3e:03:
f4:5b:8f:c7:36:c1:ff:c2:9d:ee:87:06:69:28:b6:
1d:39:6a:62:13:70:6e:36:1a:78:5f:c3:be:1e:b1:
be:f6:3b:e0:a3:ae:22:7b:a2:ff:67:a2:33:32:69:
45:71:97:c2:51:59:af:e0:5a:08:0a:b9:8a:31:c1:
bd:62:50:55:9c:0d:d7:4f:45:10:3a:67:a3:fe:ab:
08:be:65:57:98:a7:70:69:2c:2e:71:92:34:8c:5b:
a0:a3:ea:c2:8f:ad:cb:19:6a:4f:eb:5b:99:ca:93:
8c:99:de:49:2a:d2:83:ba:a4:9d:3c:9a:6f:36:00:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:14:25:50:75:61:0A:B5:7B:AF:E0:30:75:56:2A:E8:7F:5D:3E:34
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:74:30:22:6f:19:a3:3c:a9:ed:77:da:7a:8e:81:cf:1e:c2:
6a:11:c5:ed:58:9a:b2:fb:4e:dc:7d:da:08:71:95:b2:06:38:
5b:6d:a6:07:ab:d9:04:a8:b9:47:0d:08:10:2c:40:30:35:00:
8e:e6:35:54:e4:58:c8:20:2e:a2:59:8f:aa:c9:8b:c2:de:13:
e4:f1:dd:77:46:65:0f:20:53:7b:34:22:55:84:d7:65:6e:75:
1b:74:5d:cd:e6:55:a6:2b:cf:a5:da:99:d4:1c:94:13:a0:1a:
dc:d1:5a:08:b6:97:ee:38:78:f2:fe:9d:8c:fe:81:28:a2:eb:
d9:fc:a0:37:fb:b4:f7:c1:bd:f4:33:a3:39:fc:d7:d6:b7:d2:
47:2f:d5:4b:5e:f0:24:9e:c1:ee:89:0d:bd:94:23:e8:62:a4:
c4:b0:23:e5:c9:d5:11:59:87:d4:fd:1a:48:63:6c:f2:8d:46:
51:c6:c5:6d:19:d3:7c:81:76:15:8b:54:ee:83:ac:64:63:6b:
d4:1f:36:83:97:b2:e9:1d:13:a9:4a:f5:04:dc:db:5d:00:e3:
63:2d:81:2f:f3:50:71:36:ed:aa:bc:91:e1:4e:88:95:bf:bb:
0c:ca:0c:b8:f9:6e:04:ce:38:49:ab:18:ed:dd:36:66:f4:4a:
10:e3:cd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:46:50 2025 by rpki-client