Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File: _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier: lj7j5pr1tLm5Ogbec+rYfWV2iMRdTXne3K+r28sCoE8=
Subject key identifier: B3:CF:03:5C:BA:C2:88:41:E3:F0:35:6B:70:98:A4:66:FE:B1:D2:9B
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial: 019655A5D3C3BB726EB672FD9166375687FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number: 14FB
Signing time: Mon 21 Apr 2025 00:00:53 +0000
Manifest this update: Mon 21 Apr 2025 00:00:53 +0000
Manifest next update: Tue 22 Apr 2025 00:00:53 +0000
Files and hashes: 1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: h5dJToFWJ5T4LWVHknsmZOjiFecMIowwYZYiutfyW8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:d3:c3:bb:72:6e:b6:72:fd:91:66:37:56:87:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Validity
Not Before: Apr 21 00:00:53 2025 GMT
Not After : Apr 22 00:00:53 2025 GMT
Subject: CN=b3cf035cbac28841e3f0356b7098a466feb1d29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:54:22:81:a9:68:98:51:c4:eb:b8:a6:5d:
20:32:22:ed:59:d7:a4:cb:0f:f5:57:a2:cf:f5:6d:
f1:5e:80:89:b1:95:9b:07:a6:c3:83:ac:ba:b5:fb:
64:39:7c:c9:1b:d5:44:77:0e:f2:d9:7c:8e:3e:61:
d1:1f:86:8c:ea:ab:a3:cd:02:c0:a0:db:d2:88:aa:
c3:3d:35:19:37:fe:36:d3:e6:aa:b5:6e:1d:53:ef:
be:78:58:c7:d4:2a:48:a1:32:da:ad:87:6a:6b:2c:
4d:47:db:1e:95:be:c9:ac:1c:71:4c:43:3d:57:f9:
c8:ff:00:4b:39:e6:f2:84:3f:34:34:01:99:7b:95:
f5:18:2c:d9:7c:d5:da:36:26:1e:4e:ec:02:e8:1b:
6b:db:d8:96:e6:e9:90:b2:58:c6:1c:a9:c1:74:20:
db:d1:bb:80:fc:e9:12:57:fe:c6:8b:15:31:8c:d3:
a8:58:39:d1:7b:d7:a4:47:1e:3a:2c:ff:f4:6e:0e:
16:fb:c4:20:c2:13:0c:76:a7:c1:54:35:14:07:aa:
02:b1:a5:ee:04:aa:e4:b9:c8:6e:f8:0b:fa:84:0c:
a0:7d:28:21:da:d6:af:9a:b1:3c:ff:5a:ba:cc:1e:
e1:b4:85:99:66:47:c0:99:44:af:46:96:a8:7a:5d:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:03:5C:BA:C2:88:41:E3:F0:35:6B:70:98:A4:66:FE:B1:D2:9B
X509v3 Authority Key Identifier:
keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:20:71:9a:18:c2:c3:fe:cc:c8:dd:cc:22:81:d0:e4:c3:1d:
e2:3a:9f:ba:10:94:37:6b:7e:a2:c5:10:47:fc:0d:8c:03:5e:
73:f9:c8:89:30:b2:5b:89:72:eb:7e:f0:0d:56:34:ce:21:7b:
2e:68:62:89:ac:47:54:87:f9:d1:d8:28:be:09:0f:03:f2:0f:
55:b4:02:70:8c:5b:94:18:a7:74:5a:09:5c:38:d4:11:fd:72:
a4:36:28:7c:fc:8d:17:ac:7b:69:0b:b3:08:14:b7:b0:65:b5:
ff:72:f1:f5:ce:63:68:e8:be:12:06:05:ee:cf:c4:cf:e8:ee:
d2:73:6c:31:51:37:d3:a2:46:1b:29:4a:7b:9c:9b:5d:7c:91:
2b:17:12:8b:b5:37:05:28:4a:1f:0c:d8:b8:66:bb:92:4d:d5:
6e:02:b8:bf:0b:9d:8b:b3:71:22:f1:ee:08:0d:41:19:31:39:
4d:1d:9a:a6:4d:18:04:b6:37:cb:24:29:9c:ae:b1:55:f5:a3:
ec:7e:49:7b:ad:d6:79:5b:36:0f:6d:a9:4f:14:c8:56:a6:9c:
ca:88:8c:9d:22:e4:26:ed:e0:b1:d3:cc:ca:3a:70:7b:9e:f5:
84:74:eb:69:c1:55:14:56:2d:4b:9b:7f:31:40:91:ae:3a:7b:
00:46:61:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:50:56 2025 by rpki-client