Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: FLnr50Vf8N8YfuVbqW1Bzaal6V5bmCLmvSHAJXZDY0E=
Subject key identifier: 8B:0F:6D:C8:B0:5D:FE:3C:95:BA:A8:DD:9D:0E:16:8D:57:A5:F0:5A
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 019678688744EDAF79CDB4ACB420846647A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 18:00:38 +0000
Manifest this update: Sun 27 Apr 2025 18:00:38 +0000
Manifest next update: Mon 28 Apr 2025 18:00:38 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: hrUOa9rEOsHcTFScEHUibSaywDXVyhjJ0Z9ScjQqGRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:87:44:ed:af:79:cd:b4:ac:b4:20:84:66:47:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Apr 27 18:00:38 2025 GMT
Not After : Apr 28 18:00:38 2025 GMT
Subject: CN=8b0f6dc8b05dfe3c95baa8dd9d0e168d57a5f05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:28:85:c3:64:7c:4d:63:f6:52:a0:ed:87:
ca:44:06:e9:dd:cb:fb:32:a2:1f:89:21:73:de:36:
58:c1:bf:c9:e6:58:4a:c4:f3:3e:22:44:2f:31:f1:
0b:88:1d:2f:d8:49:79:b9:49:48:c0:9f:64:4a:c2:
a4:29:fa:00:d0:d1:e2:2a:12:77:08:4c:1f:65:64:
98:d0:ba:71:8e:cd:da:d9:95:12:2e:01:99:15:b9:
d5:34:1e:1b:c0:5b:ad:de:8d:3e:c3:82:17:08:41:
26:b1:18:0f:1c:54:e3:59:7e:a6:5c:db:eb:21:12:
77:0f:bd:92:d4:d7:3f:4b:a3:a5:fe:b1:ca:e6:8d:
86:40:61:40:19:a0:44:49:b5:e3:65:ed:a7:1f:9a:
b6:e6:cf:df:ad:0e:cc:1e:3e:d2:6e:20:fe:70:bd:
9f:7e:d2:c2:8a:6a:10:18:bb:d5:cd:db:50:2b:a0:
46:75:a2:5d:47:d6:10:90:d9:37:bc:f7:b4:eb:02:
93:19:21:55:e2:62:c1:d0:50:37:a7:ec:76:7a:6a:
13:a1:e0:bb:40:a9:cd:52:36:b6:27:ed:65:ff:b2:
f6:11:2f:49:43:73:3e:a5:8a:a7:d9:f1:2a:f0:74:
89:c5:4e:3b:3b:32:1a:f5:a2:fa:06:95:3a:a2:3e:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0F:6D:C8:B0:5D:FE:3C:95:BA:A8:DD:9D:0E:16:8D:57:A5:F0:5A
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d2:b9:ad:c9:c5:75:e7:50:85:27:b3:67:1e:fb:9d:f2:53:
6b:8a:4e:f6:96:cd:e0:de:44:ac:2a:d9:4a:82:19:cc:2c:03:
1e:a8:b2:fb:24:12:96:c7:b5:2a:36:65:d1:6b:5b:df:4e:91:
f3:ce:cb:9b:68:7e:9c:eb:bd:3d:5f:d5:c1:55:15:97:0b:2e:
0f:cd:62:a6:df:47:0c:c9:4f:32:a4:00:63:e3:9e:b9:f7:b3:
d6:0d:53:b3:5f:ca:41:3a:cc:54:e9:ef:78:6a:bf:10:e4:43:
97:a4:b2:c0:5e:7b:b5:8e:b3:61:19:8a:cb:30:50:86:0e:74:
ff:72:73:7c:fa:be:8b:4b:d0:75:8d:f9:46:dc:85:56:d8:0c:
f2:57:5c:7a:4a:0f:48:d5:bb:7c:a8:d4:2f:10:54:58:d9:ce:
18:f4:16:0f:0b:7d:3d:d9:08:41:12:ce:02:ea:14:83:82:61:
3d:e7:eb:5f:c9:32:57:30:e5:2d:23:94:b8:44:f9:39:a6:66:
0a:1d:bb:33:c0:28:ae:de:90:94:38:c2:af:bd:77:fe:3d:74:
0a:9c:6d:b6:07:f4:97:71:fa:2d:23:6b:87:bc:56:56:c3:1c:
21:4e:da:d2:3e:bc:12:8a:fc:3c:5c:a6:ad:6d:47:6f:34:20:
54:00:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:33:36 2025 by rpki-client