Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
File: L8VFWRk_6APSh01pjzQpKPdjKgU.mft (raw, json)
Hash identifier: voVceYLgF0qHCGhQ6TfNbzcFHymIp8pVajGIS/FjLhg=
Subject key identifier: 76:F6:89:55:AA:06:AA:50:F3:70:71:BB:3D:CD:2E:6F:83:BF:2B:BF
Authority key identifier: 2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
Certificate issuer: /CN=2fc54559193fe803d2874d698f342928f7632a05
Certificate serial: 019653EE9559F502F0E430EF84BA3D5F53FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 16:01:06 +0000
Manifest this update: Sun 20 Apr 2025 16:01:06 +0000
Manifest next update: Mon 21 Apr 2025 16:01:06 +0000
Files and hashes: 1: L8VFWRk_6APSh01pjzQpKPdjKgU.crl (hash: 0SJfvIkK2dFTFcu3/duQfzboZS2uMbfT08Bx30V0ICo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:95:59:f5:02:f0:e4:30:ef:84:ba:3d:5f:53:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc54559193fe803d2874d698f342928f7632a05
Validity
Not Before: Apr 20 16:01:06 2025 GMT
Not After : Apr 21 16:01:06 2025 GMT
Subject: CN=76f68955aa06aa50f37071bb3dcd2e6f83bf2bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:d8:e7:52:d1:40:41:a3:1f:db:e8:06:17:
db:ba:83:cf:67:58:10:03:a3:11:54:74:f0:0e:e3:
a3:0f:96:ec:fd:4d:12:f8:ba:01:22:1d:81:bb:2d:
99:47:26:b5:0a:d1:41:11:02:b8:aa:e7:ba:92:bc:
bc:b7:13:f8:72:96:b5:84:41:9b:25:6f:db:59:dc:
10:8b:81:d2:39:44:75:de:f9:c2:f0:de:90:c7:14:
12:35:6a:23:f5:c1:b4:c6:6f:6b:6f:cd:a2:f1:0e:
d5:fd:f3:bc:48:c9:28:92:bc:94:31:78:80:9e:2d:
5f:f9:7e:81:32:c6:6a:96:0e:9b:a2:08:4a:af:7b:
29:d4:ad:df:1b:95:aa:82:59:5e:43:4b:c7:ef:cd:
81:9f:83:38:bc:98:f0:b8:29:49:d9:1e:fa:2b:f7:
48:95:8e:8f:6a:99:03:21:11:c7:11:45:d6:82:f1:
de:6c:e3:91:a4:2f:b4:75:c7:da:f5:68:ab:b5:7e:
74:9e:1d:0e:7c:97:36:08:5b:32:15:88:59:40:1e:
b8:6f:ea:d1:c6:84:1f:31:6e:cc:fa:05:90:59:08:
a0:be:b6:bf:ce:7a:50:cb:6f:70:d9:a4:fc:e8:6f:
cf:22:41:7d:3e:42:4e:dc:09:2a:af:45:dd:98:e7:
8d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F6:89:55:AA:06:AA:50:F3:70:71:BB:3D:CD:2E:6F:83:BF:2B:BF
X509v3 Authority Key Identifier:
keyid:2F:C5:45:59:19:3F:E8:03:D2:87:4D:69:8F:34:29:28:F7:63:2A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8VFWRk_6APSh01pjzQpKPdjKgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0842e3-908d-411a-9b69-f20cc798cb1d/1/L8VFWRk_6APSh01pjzQpKPdjKgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:48:cf:d5:17:e9:6e:f3:af:07:db:07:57:75:b8:dd:29:6f:
85:bf:ef:5e:95:af:73:eb:f5:f3:b9:0b:1c:19:ad:98:30:ea:
3b:44:9f:9d:99:31:78:6d:3b:28:01:dd:41:6a:28:f1:bc:40:
69:5b:d4:5e:99:5b:50:4f:d5:75:43:1c:d9:f5:f1:13:cf:83:
32:27:61:28:67:20:55:11:19:6d:d0:7c:29:76:64:16:9a:cc:
78:d8:4b:47:c4:aa:00:a9:62:36:a7:e4:8a:29:b2:f7:62:d6:
ff:c4:56:72:3e:90:7b:28:7b:13:48:35:21:18:ab:2e:11:d6:
3b:e9:0e:35:dc:4b:48:12:93:4b:c5:f1:c2:72:3d:aa:0d:a9:
ba:e2:84:6b:3f:99:04:45:30:05:d9:5f:61:a5:89:ee:08:91:
b2:b0:96:9c:39:7c:fb:f5:c2:4b:14:6c:82:e8:69:a1:9a:8a:
b5:55:b3:33:22:a1:57:a7:45:4b:4a:ba:0f:51:54:03:8f:2b:
7d:d2:1e:74:95:ae:bb:1d:f0:bd:e7:67:1e:38:f1:30:5b:38:
07:74:3b:ec:40:84:8f:3f:ef:03:26:7d:82:ba:4b:b2:6d:51:
c2:39:0b:21:b0:fe:86:ea:88:a2:d5:c5:85:5d:1d:73:4f:8b:
35:72:3c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:29:50 2025 by rpki-client