
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier: PPtOkLu+dqcmVlQbY35UybEI2wnOeOuybofxzbAjhCU=
Subject key identifier: C3:E1:84:2E:37:19:62:17:35:7A:56:69:48:A4:4A:7B:1C:92:A3:58
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial: 01965D965509FF35BE75396E7DE452A51AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number: 0B6F
Signing time: Tue 22 Apr 2025 13:00:55 +0000
Manifest this update: Tue 22 Apr 2025 13:00:55 +0000
Manifest next update: Wed 23 Apr 2025 13:00:55 +0000
Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: W4mexWvqMW+9LwnAk/I2sM6EMqKoBbKvw3QOaLpRf4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:96:55:09:ff:35:be:75:39:6e:7d:e4:52:a5:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Validity
Not Before: Apr 22 13:00:55 2025 GMT
Not After : Apr 23 13:00:55 2025 GMT
Subject: CN=c3e1842e37196217357a566948a44a7b1c92a358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:94:ea:93:ed:8b:d2:4b:f5:75:78:e7:1a:
4c:10:21:77:7e:a1:d6:5d:b7:82:15:6d:4e:ab:e8:
c3:42:fa:a7:e4:84:42:d6:51:cd:ec:5d:ec:2f:53:
e7:30:5a:37:e1:f5:89:55:cb:4b:76:79:f8:22:32:
45:ef:0c:24:a2:a6:92:ac:33:4c:ea:11:ab:3b:a8:
63:fc:5a:6c:76:b5:cd:3d:98:20:00:f0:fd:c4:33:
85:e0:26:78:02:85:39:65:a3:dd:92:ca:01:17:3a:
26:bc:88:bf:19:7b:e1:29:29:f1:04:f7:37:52:cb:
9f:d5:21:ef:12:3a:d3:3f:56:d4:b9:d5:d8:b8:e2:
85:a4:45:74:82:88:9a:af:da:24:a7:ac:5f:56:b1:
04:5b:c6:18:62:b6:3a:97:c0:c9:92:ec:b3:a5:d0:
86:d4:94:b1:60:20:0f:58:fb:7d:11:6f:3f:0e:de:
5a:0f:f4:ad:23:ac:5c:e4:08:33:d1:82:e9:74:86:
30:43:96:74:b5:e4:c2:bb:de:ae:1d:c8:75:35:90:
4c:13:ab:ae:62:36:00:62:db:e8:44:fe:af:de:fe:
c6:e2:76:2a:0e:c1:3d:9f:8b:3a:2c:3e:db:2c:e6:
c6:f6:8e:bb:48:05:44:20:4d:d8:cf:f3:77:dd:e3:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E1:84:2E:37:19:62:17:35:7A:56:69:48:A4:4A:7B:1C:92:A3:58
X509v3 Authority Key Identifier:
keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f2:cb:87:42:65:ba:18:5a:16:d5:9c:22:d4:94:62:78:e8:
d9:18:93:74:70:ea:e8:3a:af:32:58:a1:fa:0c:ae:e8:22:7c:
63:50:27:6b:f4:ad:d7:f9:a3:a0:9a:53:e6:64:1a:9f:be:b9:
8d:5b:58:e9:03:67:c3:d0:32:6f:ca:07:91:0e:c4:3a:82:c7:
95:cf:51:1f:55:f7:12:44:4d:e2:8a:21:c4:d3:03:34:e5:de:
0d:c4:2c:80:8d:24:90:21:c9:bc:2f:a0:23:4b:6e:35:89:34:
51:56:aa:4d:85:c6:a3:8f:f4:22:eb:22:be:02:af:24:ac:c7:
16:6c:80:dd:ea:85:c0:f0:f3:b0:1b:ee:ed:a4:41:3d:dc:f9:
d5:b6:be:2d:ac:81:c9:a9:a6:1d:8f:f0:c3:65:3c:54:31:e1:
3b:25:c6:dc:35:6f:a8:8f:4f:f2:c4:f3:76:32:70:d7:33:98:
3a:7f:37:43:d2:c6:c1:a2:04:a8:55:7d:2c:26:5f:4a:5a:81:
19:02:3b:ce:0e:de:b0:99:e5:c1:40:8f:50:24:3f:ef:a1:0d:
fb:9d:4c:ea:6e:ec:d8:a8:f7:10:04:e3:17:09:74:c8:62:90:
04:bd:68:f0:6e:93:41:5c:54:97:57:fc:31:af:85:e4:53:a9:
95:28:bc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:53:02 2025 by rpki-client