Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
File: Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft (raw, json)
Hash identifier: 06KZJUg7TxxNFPeTQO/QUX0B7SwzQpJaKAdK6hXcGDI=
Subject key identifier: 38:94:F4:10:09:D1:6F:05:B0:80:EE:19:E4:24:BA:91:5F:6B:F0:DC
Authority key identifier: 4A:EF:BC:FA:7F:05:9F:F1:07:27:EA:61:9E:59:13:9D:A3:74:18:EF
Certificate issuer: /CN=4aefbcfa7f059ff10727ea619e59139da37418ef
Certificate serial: 0196572646BEC65C199E8E4D1C3AA87831AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
Manifest number: 14FB
Signing time: Mon 21 Apr 2025 07:00:48 +0000
Manifest this update: Mon 21 Apr 2025 07:00:48 +0000
Manifest next update: Tue 22 Apr 2025 07:00:48 +0000
Files and hashes: 1: Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl (hash: GoSwyghR71MYvO5LqyFBsnO8VXgmqMFvmcTKrSKGo20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:46:be:c6:5c:19:9e:8e:4d:1c:3a:a8:78:31:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefbcfa7f059ff10727ea619e59139da37418ef
Validity
Not Before: Apr 21 07:00:48 2025 GMT
Not After : Apr 22 07:00:48 2025 GMT
Subject: CN=3894f41009d16f05b080ee19e424ba915f6bf0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b8:7e:83:33:ab:97:08:5f:1e:13:a1:1c:68:
71:91:98:5f:bd:73:53:57:de:fe:a2:84:fb:f2:00:
3d:63:77:9e:b7:14:4f:48:8e:17:b6:33:c7:d5:ef:
e9:5e:24:81:97:34:27:37:2c:0d:03:21:d9:54:c2:
02:c2:52:d8:d3:c2:06:1a:5b:c3:5f:98:fe:70:cd:
e9:e2:a5:2d:2b:1b:32:63:7c:10:ab:ca:ad:bc:67:
5a:63:18:26:a6:d6:59:95:40:63:a7:84:27:40:e4:
9a:57:9d:2e:fc:64:7b:fd:25:1e:fa:eb:a2:f8:55:
36:98:f1:3f:7d:17:65:ea:dc:dc:66:2b:38:da:df:
ca:00:c3:36:41:11:92:8f:2a:3c:16:fd:21:cf:95:
6b:56:17:c2:48:a0:5e:25:db:84:16:3e:0d:fb:fc:
8f:0b:2a:41:ad:2e:a9:34:bf:8a:80:81:07:83:2a:
2a:2a:e8:3b:13:db:76:b5:39:85:da:fc:84:c4:d1:
5d:3d:f6:fd:e2:2e:bc:0a:70:b3:b2:3e:87:73:72:
4d:63:62:5d:8f:cc:2f:5e:b8:ce:53:23:16:5b:6a:
0a:ca:ab:9c:b7:3b:8e:f3:08:e1:fd:02:4e:0a:6f:
fd:fe:97:6c:2a:8f:64:77:70:41:26:ed:de:a6:89:
2a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:94:F4:10:09:D1:6F:05:B0:80:EE:19:E4:24:BA:91:5F:6B:F0:DC
X509v3 Authority Key Identifier:
keyid:4A:EF:BC:FA:7F:05:9F:F1:07:27:EA:61:9E:59:13:9D:A3:74:18:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/63cff3-c9eb-4211-b92e-45f56b42c6ac/1/Su-8-n8Fn_EHJ-phnlkTnaN0GO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a9:c9:50:54:cc:28:1c:60:35:f5:19:e0:f1:2b:28:07:fa:
de:ff:8a:49:4a:e3:da:b4:0b:21:78:ef:26:2c:7b:f6:68:2f:
bc:dc:4b:8b:94:9f:7b:95:ba:00:b8:89:14:84:58:8a:c5:6b:
09:03:56:fa:e5:79:ba:c1:1d:f5:86:82:5b:10:f9:03:71:65:
ec:25:cf:62:ff:29:d9:2f:c0:cb:97:3c:65:c1:78:ee:cf:9f:
20:ba:36:f2:45:8b:4c:d6:5c:4a:07:b9:cb:75:95:b4:88:a0:
fd:23:eb:be:9b:e1:eb:a3:59:d1:6c:a5:1e:75:6a:54:ad:b2:
9f:43:c3:c6:9b:6b:0b:f5:2f:14:2c:d7:b0:ae:f0:9e:e2:e5:
a6:fa:f4:2b:fa:0f:4f:a7:47:0d:99:b4:c3:82:14:3f:2b:71:
34:02:f7:77:c1:af:6f:3c:dd:f3:fd:15:0b:29:38:b4:43:67:
b0:6e:8f:8a:e8:1d:18:2d:95:81:e6:16:ab:53:46:e3:77:29:
b2:b2:e6:08:27:73:2e:ec:70:b0:9c:1c:af:5b:93:37:fa:5b:
aa:4b:79:57:ec:4d:16:47:2a:e5:1d:6d:71:28:e0:0a:91:7b:
18:01:49:02:35:b8:a1:52:b6:41:86:df:8a:d9:71:84:11:c4:
55:65:8f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:38 2025 by rpki-client