Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
File: 8runwtAt4Uiqno-gmhx6K3cKGdw.mft (raw, json)
Hash identifier: rtNgAaohSIdXK3WByzD3fxBqMUI4WgsdDu0t/PZcSPQ=
Subject key identifier: 41:0C:47:C5:65:47:4E:FF:F8:AD:DF:DA:A4:4E:01:B8:E1:63:8D:F3
Authority key identifier: F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
Certificate issuer: /CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Certificate serial: 019681A30D853320E4892312FB008CECD999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 13:01:08 +0000
Manifest this update: Tue 29 Apr 2025 13:01:08 +0000
Manifest next update: Wed 30 Apr 2025 13:01:08 +0000
Files and hashes: 1: 8runwtAt4Uiqno-gmhx6K3cKGdw.crl (hash: AHRZhMYJFTIsbBPwLjYo8bsKnCNAQNU8aD/tjdN+osY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:0d:85:33:20:e4:89:23:12:fb:00:8c:ec:d9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2bba7c2d02de148aa9e8fa09a1c7a2b770a19dc
Validity
Not Before: Apr 29 13:01:08 2025 GMT
Not After : Apr 30 13:01:08 2025 GMT
Subject: CN=410c47c565474efff8addfdaa44e01b8e1638df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:8b:cf:3f:80:9d:17:0f:40:03:e9:af:52:
82:b1:32:68:df:d5:00:ee:f5:5a:e2:8c:59:a0:85:
8b:81:69:28:78:40:93:1f:56:a9:50:61:d9:d9:19:
0a:ad:2b:ef:c6:17:5d:55:66:8b:d2:5c:4e:10:06:
81:8d:73:c5:43:64:0b:67:c0:cc:3d:a7:10:6c:53:
f5:5a:f9:25:07:85:6f:f9:17:47:42:ee:92:fb:7e:
a6:4e:d8:23:fa:f5:14:00:67:6a:e7:ca:d4:34:ab:
32:df:e7:d4:0e:24:b4:26:55:c7:6c:9e:4a:57:85:
66:31:5f:18:66:95:d7:7b:24:c7:b3:24:df:73:26:
2d:fb:8b:d1:0a:21:77:30:71:6c:24:96:b7:9e:3e:
3f:e2:7a:93:f5:f6:54:ea:ec:f1:5b:7a:95:93:74:
f3:57:12:58:92:d8:eb:73:a4:c8:18:33:79:9c:de:
12:23:3c:5f:e0:0a:ac:ab:5a:5e:01:88:a4:60:26:
6b:49:f4:9f:d4:b2:c1:74:cd:b3:01:a8:f8:02:16:
2b:f5:8c:7c:7c:32:d3:f2:f3:a3:f3:5b:a5:64:c6:
8c:bf:cf:46:41:95:dc:c5:62:bd:9b:8d:34:9c:52:
37:49:87:e2:a2:b6:59:15:3f:97:46:75:be:4e:35:
bd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0C:47:C5:65:47:4E:FF:F8:AD:DF:DA:A4:4E:01:B8:E1:63:8D:F3
X509v3 Authority Key Identifier:
keyid:F2:BB:A7:C2:D0:2D:E1:48:AA:9E:8F:A0:9A:1C:7A:2B:77:0A:19:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8runwtAt4Uiqno-gmhx6K3cKGdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/957109-3892-4dc4-816a-5bdd142bae74/1/8runwtAt4Uiqno-gmhx6K3cKGdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d6:19:0b:2d:82:a6:69:be:9e:ff:9b:9a:72:39:f2:81:4c:
a9:3b:86:4b:f9:40:83:3a:3d:21:c9:d0:14:3a:49:55:04:e8:
60:06:67:63:c6:0d:8e:5f:c2:e8:30:68:c4:b7:df:aa:55:9b:
76:be:56:58:4e:ce:0d:02:ac:e2:2f:80:85:2f:85:41:40:8d:
fe:83:c6:a5:e2:e6:27:6d:27:3e:96:d3:fd:d3:d7:73:a1:a7:
59:ad:a9:8c:74:52:eb:aa:d4:12:30:c5:95:ee:65:ee:67:be:
c2:fa:74:81:9d:b8:ef:46:a1:45:ee:d1:c6:0e:25:b2:60:80:
cd:fa:d7:36:dc:2b:71:57:6d:e3:a7:63:2d:83:c7:0c:9b:96:
ab:99:69:53:ff:b5:7d:43:c9:0b:35:a2:35:6a:d9:85:71:7f:
86:59:bd:e3:bf:ff:93:48:b0:5f:dc:6a:21:ca:61:d1:a9:28:
49:ec:cd:42:e3:66:27:01:86:89:ba:95:7d:5c:b3:0a:c9:9d:
35:97:64:a1:69:46:d3:a6:e8:bc:93:42:3a:f3:2f:d2:ef:9c:
f3:56:40:7f:b1:67:4a:4e:46:e8:19:5f:15:6d:77:00:79:6d:
b9:a8:ee:3c:cc:29:7b:ad:f9:0f:eb:bb:86:4b:82:d2:f2:78:
69:20:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:54:16 2025 by rpki-client