Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
File: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft (raw, json)
Hash identifier: NZ4+xTNQIcY3zwjAQnrnduNzsxSUNRmXu8YeRuRNW3Q=
Subject key identifier: 85:18:48:60:28:85:7D:BD:10:28:CD:E8:83:DE:76:D6:D5:16:AD:D4
Authority key identifier: A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
Certificate issuer: /CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Certificate serial: 019655DC9412122F42EEC9A0E9FC328235B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
Manifest number: 0156
Signing time: Mon 21 Apr 2025 01:00:41 +0000
Manifest this update: Mon 21 Apr 2025 01:00:41 +0000
Manifest next update: Tue 22 Apr 2025 01:00:41 +0000
Files and hashes: 1: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl (hash: EWBRANH8hLBFq0Jycuz1LlyTjJAcmBB9vSte0nJIYTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:94:12:12:2f:42:ee:c9:a0:e9:fc:32:82:35:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Validity
Not Before: Apr 21 01:00:41 2025 GMT
Not After : Apr 22 01:00:41 2025 GMT
Subject: CN=8518486028857dbd1028cde883de76d6d516add4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f9:bf:84:32:28:9d:83:0c:f9:e7:5b:57:73:
85:37:9a:4a:15:22:f4:a9:bf:d0:26:bd:0d:39:aa:
55:bc:b4:dd:b5:9e:2c:c0:66:8a:37:e6:a2:8a:05:
79:87:7a:91:68:c7:35:9d:46:6b:e7:e2:87:cb:de:
12:6e:88:c1:9e:11:6e:a2:9d:d6:b4:62:cb:6f:85:
6d:dc:a0:90:03:fe:78:6b:a4:76:7f:3c:33:b8:24:
a7:fb:97:5c:6a:7f:a8:4c:d1:22:28:1a:72:0d:25:
35:d8:fd:0b:8a:ac:1a:78:3e:4c:83:4a:83:45:30:
9a:05:7d:72:67:09:74:57:5f:21:c6:30:9d:c2:73:
91:86:60:91:bc:0d:21:42:38:28:1f:3a:22:97:71:
8f:60:da:5a:43:1f:96:a8:3a:af:ef:9c:cf:7c:57:
0a:60:c8:70:41:53:2e:7b:1b:4e:2a:13:6e:86:fe:
17:ef:6b:4b:7a:cd:b2:4c:0c:27:34:5f:af:65:39:
82:c3:a8:d8:b4:ea:94:c5:21:f0:8c:c9:9e:31:f5:
16:ae:1f:af:81:ef:67:3a:79:b0:6b:9e:18:d2:4a:
9c:09:91:f3:49:d4:f2:51:dd:6c:d3:a7:96:5b:f7:
31:5a:b2:8c:43:35:db:e0:a8:8a:2d:b1:10:e2:9a:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:18:48:60:28:85:7D:BD:10:28:CD:E8:83:DE:76:D6:D5:16:AD:D4
X509v3 Authority Key Identifier:
keyid:A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:00:4a:d9:08:82:3c:83:4a:66:3d:00:82:b4:b3:5b:ab:d5:
ab:0e:86:57:ef:7e:a4:38:44:48:e5:95:4c:dd:1b:ca:67:4a:
96:32:15:1f:2e:18:27:4f:a0:c0:d1:76:80:4c:12:21:e4:a9:
00:a3:aa:f8:a1:8c:5f:1a:17:01:19:19:88:8f:81:5a:8b:a4:
bd:18:d7:a8:eb:b6:93:00:2b:ac:2d:3b:ea:b4:81:77:4a:b2:
47:f4:89:d9:b8:54:a1:fd:3b:33:41:73:26:21:be:e4:81:b7:
90:9f:5a:f2:1c:94:ab:a2:1c:09:b0:32:8b:ea:d3:05:3f:70:
44:c6:b9:3e:7e:f8:52:68:11:f1:a8:c9:59:29:9d:70:5f:17:
fb:81:57:0d:9c:b9:f2:f8:dc:d7:2b:40:c3:4f:e6:08:f9:d3:
b1:05:a0:39:35:00:bd:68:92:d9:62:75:c8:e8:e2:79:86:ba:
69:70:e4:5a:9c:66:df:ab:e6:1d:a5:6f:62:73:23:39:50:9d:
18:32:90:ce:96:74:eb:4e:da:2e:56:c0:36:3e:c9:57:1b:90:
57:ed:1a:8a:a6:d9:d4:ea:21:ca:fd:12:90:19:f9:a5:b8:3c:
90:4f:d0:7c:f4:38:e1:38:3c:8a:4c:83:0d:d8:71:7c:8b:e8:
d3:da:be:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:07 2025 by rpki-client