Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier: I4K5a1jT9AP35MjepiCPgl7iWtJoVP/woO7zgHZiwB4=
Subject key identifier: B8:EC:DD:39:0F:E6:53:02:E0:1B:15:03:1A:14:65:51:D1:2D:D5:57
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial: 0196857FE4C627C9FD6B03D3ED7E3FF9D515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number: 08B8
Signing time: Wed 30 Apr 2025 07:01:13 +0000
Manifest this update: Wed 30 Apr 2025 07:01:13 +0000
Manifest next update: Thu 01 May 2025 07:01:13 +0000
Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: YVPZuXjEawXXJaUKFcFmkfnHjmX/Xc+f1oJQw9kbyFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:e4:c6:27:c9:fd:6b:03:d3:ed:7e:3f:f9:d5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Validity
Not Before: Apr 30 07:01:13 2025 GMT
Not After : May 1 07:01:13 2025 GMT
Subject: CN=b8ecdd390fe65302e01b15031a146551d12dd557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:c2:d0:51:53:32:39:ff:b4:69:02:4e:ed:
df:27:2f:30:86:67:98:b5:b7:58:3c:94:c5:90:3c:
a9:01:a9:1e:45:33:76:f6:5f:3a:57:88:07:f2:63:
12:bd:f5:14:75:74:0d:1d:c0:66:44:f4:79:0b:d8:
55:40:ee:51:a7:86:a2:02:cd:aa:5c:8b:77:35:05:
fc:dd:40:5c:fa:07:34:51:2e:92:8d:52:7c:c3:65:
9d:16:9b:f3:43:30:b6:ce:c4:16:24:4f:09:9e:2e:
35:af:56:9e:54:86:c2:f6:6b:05:3a:62:9c:03:f2:
7e:b4:15:32:b5:b0:13:6c:15:ca:7d:d7:12:59:30:
16:50:30:87:09:c3:93:23:ba:69:12:8a:7d:7a:26:
b3:bc:ca:9f:cc:9a:bc:dd:70:49:9d:af:5e:41:12:
27:b7:a8:50:2a:25:42:74:9d:f2:ec:02:5a:91:a6:
98:2a:67:4f:b5:51:6d:97:69:b6:ef:73:4c:22:4a:
9c:75:c7:f2:74:aa:63:3c:07:57:a6:d3:40:a3:f1:
08:93:f9:31:70:c1:55:3d:82:80:55:54:3e:f1:58:
57:3b:b3:f3:7d:23:e3:be:d7:b4:9f:8f:d0:07:74:
12:76:32:68:69:90:83:00:21:c2:87:93:01:04:db:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EC:DD:39:0F:E6:53:02:E0:1B:15:03:1A:14:65:51:D1:2D:D5:57
X509v3 Authority Key Identifier:
keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:37:6a:f6:fc:0d:fb:85:e8:f3:60:fd:7d:81:38:de:43:3e:
2c:f9:46:ea:2c:2f:24:95:42:bc:64:ce:3e:c9:37:44:a8:ca:
12:56:9b:fe:be:ab:5f:5f:95:d3:b2:a5:b9:13:a7:43:10:f6:
73:e9:a4:69:26:f3:6e:1c:a6:c6:e1:2f:b7:30:d4:da:3a:1d:
d3:97:10:c9:fb:5d:e0:52:be:16:3c:0a:8f:8e:e6:24:37:83:
98:c7:cb:e1:5c:0f:08:f4:b2:f0:2a:c7:78:41:8b:f3:b4:85:
f5:87:e8:f4:fd:59:a2:e5:9e:7a:fc:18:57:47:2d:ab:c6:e6:
12:01:de:2f:f2:e2:45:c6:ff:7f:71:6b:a4:d8:b6:2b:3d:ff:
e4:66:07:3a:ba:26:ab:f1:42:db:d3:bd:2b:ff:ea:d4:e4:ce:
f2:76:90:73:f7:34:7a:16:6f:f0:3c:bd:64:a2:8e:b6:c0:47:
fd:02:a6:5e:05:32:cc:54:0e:c6:bb:41:38:3f:49:20:55:d9:
10:ae:c9:c7:d5:2f:60:8c:db:47:72:9d:ea:8d:03:59:24:ba:
8c:8c:88:9c:38:3e:6e:64:49:17:bc:ec:ba:c4:30:d6:e0:89:
74:69:6a:dd:8c:d7:78:8a:07:f3:06:58:1c:c3:b6:54:0e:6e:
a4:1c:ad:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:02:56 2025 by rpki-client