Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
File: g76BmaF8rKps1S15QSNtpuVuG-o.mft (raw, json)
Hash identifier: 2MD4txvfrhn1NdIvuy4GDUv4409FyhLGMbItdb0cCVc=
Subject key identifier: 64:62:7C:26:3B:A7:7D:37:16:7B:19:E8:4B:EA:24:92:19:1B:44:26
Authority key identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
Certificate issuer: /CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Certificate serial: 01967BD744C28CC5D79B4DE29C296FD00949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
Manifest number: 0896
Signing time: Mon 28 Apr 2025 10:00:27 +0000
Manifest this update: Mon 28 Apr 2025 10:00:27 +0000
Manifest next update: Tue 29 Apr 2025 10:00:27 +0000
Files and hashes: 1: g76BmaF8rKps1S15QSNtpuVuG-o.crl (hash: hT1QC7A0rsyUzIgpH/2CtFb5xmaWdfx7ZbN7Pqry2NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:44:c2:8c:c5:d7:9b:4d:e2:9c:29:6f:d0:09:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Validity
Not Before: Apr 28 10:00:27 2025 GMT
Not After : Apr 29 10:00:27 2025 GMT
Subject: CN=64627c263ba77d37167b19e84bea2492191b4426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:39:f8:61:c9:78:4c:87:35:c5:9e:50:a2:
37:dd:8d:f7:d3:d3:09:7c:c3:b2:78:c1:80:de:51:
0f:3c:10:cb:2f:4e:53:c2:2c:00:d3:ae:ea:e3:61:
ff:bb:ef:13:ac:e6:2a:6b:37:4d:6f:9d:5c:3c:99:
47:4a:3a:52:f2:d6:12:85:f3:73:41:44:35:61:cc:
68:f9:0d:f2:f9:9c:95:a4:72:89:60:42:39:e4:13:
b7:6b:dc:f7:bc:d3:38:ab:d5:0d:2d:5f:cf:33:61:
ae:30:6f:9b:88:d3:e8:25:aa:b4:05:13:fd:41:6b:
8b:a3:84:e2:a9:c3:b4:a8:f6:ae:3c:08:34:a6:e2:
ce:04:87:6a:68:83:8f:7e:c4:dd:2f:fa:ea:17:c4:
5e:2a:37:fb:ee:20:e7:f5:a6:3a:f5:1e:84:e6:92:
75:34:0b:b0:6c:0b:19:4f:c6:7a:7c:c7:7b:d2:75:
c8:ec:78:e2:66:c8:5c:8d:e6:29:4a:fd:a0:f5:3c:
5d:f7:7c:c8:1f:78:55:97:be:e2:24:6f:83:bc:03:
71:23:31:86:bd:fc:44:03:3e:ad:2d:19:b3:d5:bf:
f8:65:ec:0e:22:ac:97:dd:57:af:50:bc:94:9a:d2:
fc:78:7d:d9:5d:0e:e6:89:7c:1b:db:bc:2c:d6:2c:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:62:7C:26:3B:A7:7D:37:16:7B:19:E8:4B:EA:24:92:19:1B:44:26
X509v3 Authority Key Identifier:
keyid:83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:84:0c:47:a1:b8:1f:c6:a9:a9:f6:d6:0a:1a:4f:25:ff:6a:
6c:72:99:cd:58:c2:f7:69:f2:3e:11:28:75:75:d4:3d:42:ca:
0b:bc:ef:20:3d:ec:fd:a6:4c:f1:de:9b:e3:e5:b2:1b:7f:78:
79:77:bc:e6:57:53:51:1c:1c:db:93:08:9d:27:71:e6:e3:db:
37:f7:06:b2:e9:d6:dc:a3:9f:98:26:66:a5:cc:65:14:b9:4a:
2c:0a:42:42:fd:e0:0f:0b:45:66:9a:2b:e2:e0:bb:00:98:7e:
7d:cd:53:ac:b2:4f:27:3f:10:63:d6:61:0e:e6:28:ac:f0:ab:
b2:7b:ae:fe:73:fb:b4:85:52:f5:bf:8b:64:23:2b:6b:30:e0:
00:99:3c:b0:79:3c:9b:bf:3d:59:a1:a3:1c:1d:e0:7f:fc:33:
57:0c:65:3c:5e:df:33:44:ca:d0:df:40:a1:91:b4:fb:44:31:
a3:dc:42:f9:d5:a3:6e:1e:a4:99:fd:3b:c4:08:fd:1a:60:b9:
b8:7a:77:4b:1e:fe:08:29:44:ee:81:63:b1:dc:19:7d:1c:a3:
01:df:d7:0d:78:87:25:52:22:b1:fa:72:d5:fc:6d:26:28:96:
c9:b6:c2:b1:d5:42:5a:e3:a9:21:fa:99:53:dc:31:a5:30:99:
a5:ed:48:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:36:08 2025 by rpki-client