Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File: 8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier: i8FYLM7JZ1xloHrN2St7U2fPtHv1BEq+gcHX5tfJ/ic=
Subject key identifier: 70:BE:A4:7C:37:B4:DF:AB:A3:A4:89:DB:53:93:35:88:B5:C5:B7:30
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer: /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial: 01967BD7862CA5CE432FEFEB71B45F2B7C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number: 150F
Signing time: Mon 28 Apr 2025 10:00:44 +0000
Manifest this update: Mon 28 Apr 2025 10:00:44 +0000
Manifest next update: Tue 29 Apr 2025 10:00:44 +0000
Files and hashes: 1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: XxfqYyl6NrzZC0ImPIDxkzKFpYgdTibAPeqGrIQr3D8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:86:2c:a5:ce:43:2f:ef:eb:71:b4:5f:2b:7c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Validity
Not Before: Apr 28 10:00:44 2025 GMT
Not After : Apr 29 10:00:44 2025 GMT
Subject: CN=70bea47c37b4dfaba3a489db53933588b5c5b730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:24:3d:2b:c4:ab:ca:bd:b0:cb:58:d3:01:
5c:5f:c9:a8:94:ae:af:b5:43:95:08:cf:65:ec:cf:
ec:2e:7b:95:f1:4b:e7:a3:5d:2b:2a:d0:e5:a9:8c:
b0:23:82:bd:c6:5c:e2:be:19:7c:7c:9e:a5:dd:85:
a2:1b:a6:82:63:f0:6a:a1:19:5b:36:5f:d1:8f:5e:
e9:2e:d2:14:ae:db:b0:f7:68:a8:8e:66:de:e5:2d:
8a:cf:47:c0:d0:6c:1f:47:1d:75:71:6c:56:eb:92:
33:36:50:29:82:6d:da:f2:5a:47:fb:07:5b:22:1a:
6b:a9:bd:67:15:bd:09:68:54:e2:fc:65:0d:f5:6b:
3c:d8:c8:9b:68:23:42:2d:b5:9a:ef:08:58:2d:34:
cd:d4:21:31:1d:dd:3f:1d:3d:87:11:60:98:92:b5:
67:ed:b5:61:dc:9c:b2:c2:7f:6b:fc:c3:51:46:73:
67:0a:f1:6a:32:66:c8:43:c8:f1:85:45:78:f6:23:
8e:51:3c:14:a2:31:4c:0c:14:52:16:e7:fc:f6:00:
65:f1:6f:d8:fc:ee:1f:fc:b4:1e:78:40:b0:ee:62:
c0:6f:1f:50:ef:ee:52:03:06:9b:74:12:24:b0:b8:
0d:8f:0e:93:1c:30:f5:42:b0:b8:64:e9:c0:06:cc:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BE:A4:7C:37:B4:DF:AB:A3:A4:89:DB:53:93:35:88:B5:C5:B7:30
X509v3 Authority Key Identifier:
keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c7:4d:03:ed:4a:91:c2:c4:28:f3:c8:c5:e2:37:1f:1a:bd:
9a:1c:f9:8e:bf:10:19:1d:38:72:50:08:a8:2c:d0:39:a3:7c:
b2:48:28:c9:f9:c4:a6:41:0e:b4:ee:41:12:df:c8:71:c2:1a:
e5:67:08:ef:d9:66:e6:5c:11:bf:18:8b:69:92:cf:05:d2:15:
90:7a:16:be:59:51:9d:93:0c:66:fe:5e:ec:59:b8:7c:31:f8:
b5:2f:60:42:59:af:db:ce:01:13:66:f0:62:80:42:6b:38:12:
ae:27:d9:50:33:38:b6:ce:07:06:83:f9:96:a8:df:f4:0d:27:
8b:ba:3f:33:72:94:de:41:a7:33:ea:ad:68:84:c1:d4:13:15:
0d:c1:27:28:89:60:92:95:1f:c4:d8:7a:a0:37:c4:37:b7:97:
fe:09:e8:5e:4d:23:7c:80:fd:2a:b5:1b:51:d5:c8:91:13:a9:
67:ed:d3:16:b8:27:09:8c:88:31:9b:86:e3:6e:31:ef:b0:95:
a0:0b:19:46:ea:fd:72:91:f3:d4:12:90:b1:71:cb:29:d0:bd:
f8:5b:c9:d3:cc:67:e8:27:67:b0:dd:ea:59:61:4f:7e:ac:28:
ae:83:3a:e6:49:09:90:8b:14:38:7c:6b:e9:b2:0d:ba:44:0a:
0f:a4:c1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:35:49 2025 by rpki-client