Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: JIBdCqB1s0X/w4anJ2wpmb8zHoF4gQ9G9msPQY/PSWA=
Subject key identifier: F5:9C:9C:1B:C9:A6:D5:0C:ED:95:25:CA:90:CA:92:97:3E:C2:1C:D1
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 01967E339B9AB2E0A9B457FD22C1AC0BB4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 150E
Signing time: Mon 28 Apr 2025 21:00:33 +0000
Manifest this update: Mon 28 Apr 2025 21:00:33 +0000
Manifest next update: Tue 29 Apr 2025 21:00:33 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: t7JkasgSvEe/T5ZgMhhr9YYq5lJdx+GJ6DwmiAXUbpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:9b:9a:b2:e0:a9:b4:57:fd:22:c1:ac:0b:b4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: Apr 28 21:00:33 2025 GMT
Not After : Apr 29 21:00:33 2025 GMT
Subject: CN=f59c9c1bc9a6d50ced9525ca90ca92973ec21cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:31:2a:37:c1:a3:b5:f7:d5:2a:36:56:28:
e2:a4:f0:63:f0:a3:71:58:9c:41:b7:7e:1e:4f:fb:
57:29:b9:0c:8c:a0:f1:6b:1a:d5:76:a4:b8:00:a7:
d5:2b:c2:fe:cb:59:31:4a:50:f1:0b:8c:e1:0a:5c:
74:4a:e2:c1:3f:71:1d:3f:ba:94:73:92:5d:21:f1:
59:7c:5f:49:ed:f5:57:d7:e4:7c:d2:79:6d:8d:e2:
aa:74:17:75:00:49:66:ac:83:00:34:77:5a:46:ed:
03:3c:78:6e:c4:4f:c9:26:da:15:74:79:19:fd:67:
4b:4d:09:0b:ca:3b:83:95:b1:ed:33:b7:db:e9:c2:
b4:78:d6:64:82:38:65:38:b0:72:ab:68:af:00:2f:
0b:95:43:22:1c:28:a7:4e:ed:82:47:62:4f:62:e9:
ae:b5:d8:c6:74:4d:09:d2:44:48:e7:19:ce:30:e4:
dd:75:73:be:c3:8e:47:4f:47:f1:cb:9b:ba:cf:00:
ec:67:4b:bb:8f:31:12:d6:07:79:93:36:95:17:ae:
30:f2:af:59:ad:15:ee:9e:49:bc:03:fa:b8:91:fa:
b1:7a:3f:32:85:2e:40:b9:b5:4a:b2:9a:fb:49:4f:
b3:b4:25:9b:1e:da:c2:9d:9d:d7:1b:40:1f:2e:6e:
be:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9C:9C:1B:C9:A6:D5:0C:ED:95:25:CA:90:CA:92:97:3E:C2:1C:D1
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:22:db:6d:fa:c5:58:23:e0:30:58:63:81:11:7e:9a:b5:83:
ad:78:69:e1:e7:8a:67:88:5c:03:37:4c:2c:49:59:f3:14:61:
0d:82:21:63:e3:61:7c:e4:3c:ab:d3:0c:39:27:52:80:67:df:
84:31:be:f3:0d:41:05:35:0b:3a:03:28:b8:40:73:1c:76:58:
30:6c:0f:42:f5:60:dd:99:b6:9a:42:d7:5d:d3:22:f3:94:5c:
88:46:8b:83:93:6f:be:37:11:f1:ee:25:03:4a:5d:d7:06:6d:
9e:72:b9:29:2f:7b:df:d8:cf:2d:53:4e:41:8e:c6:c6:b2:1e:
65:b0:b0:17:8b:0a:5a:4c:f3:d1:ec:94:6d:b4:f5:8c:1c:42:
16:ae:1d:cb:19:fa:86:ac:65:bd:e9:ad:40:38:66:b4:17:7f:
1b:4b:20:e4:aa:ba:45:6d:67:32:bf:6e:81:02:8a:d3:71:a6:
f4:08:02:ac:cc:a5:42:a7:22:e2:44:3e:e5:7e:98:44:3b:24:
02:7b:50:11:d0:ac:f4:96:61:a4:e0:91:8d:f6:55:6f:24:40:
01:49:a5:cc:42:d5:8a:fc:fc:1d:b2:fe:bf:64:ec:26:cf:49:
37:ca:51:30:2e:23:7a:ee:c7:23:e0:dc:ea:75:f1:96:7c:35:
da:66:d2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:08:42 2025 by rpki-client