Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File: 8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier: w87Xr0PWnJUAwAsK6Pdz8tThfYk8XTKrNrDXMr960p8=
Subject key identifier: 71:72:39:86:9F:FC:DD:CF:52:62:D4:6F:2E:0B:4A:32:C2:B3:E2:E4
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer: /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial: 019654255F9F6A9524DC0CE48380423F94DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number: 0CA2
Signing time: Sun 20 Apr 2025 17:00:57 +0000
Manifest this update: Sun 20 Apr 2025 17:00:57 +0000
Manifest next update: Mon 21 Apr 2025 17:00:57 +0000
Files and hashes: 1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: Y4QmuTObB//eaqsSIuF4ZQzijK/lCNBMuKsyz/Kr1AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:5f:9f:6a:95:24:dc:0c:e4:83:80:42:3f:94:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Validity
Not Before: Apr 20 17:00:57 2025 GMT
Not After : Apr 21 17:00:57 2025 GMT
Subject: CN=717239869ffcddcf5262d46f2e0b4a32c2b3e2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:fc:6d:ab:97:7a:57:99:df:cd:58:58:72:
6c:b8:7c:14:5d:9e:77:aa:39:db:1d:0e:4e:36:92:
55:6d:ec:83:dd:ae:b6:d2:6b:44:98:1c:64:b0:87:
fb:9c:97:41:fe:97:64:f6:f6:43:26:07:07:37:cb:
cd:7f:8c:ab:12:c0:8d:75:68:c4:90:b0:52:18:27:
07:1b:eb:10:54:a7:fe:8f:a7:fe:5d:26:bf:b9:48:
c6:74:45:a9:94:e1:6f:22:ae:73:af:10:9b:c1:28:
d3:40:a6:c7:3d:cd:ee:24:bc:46:c5:64:03:5d:41:
f6:ef:5e:d4:c3:24:97:c0:03:f1:29:8c:e1:79:8b:
3e:df:be:a4:44:f0:70:f9:f8:af:f3:f5:69:74:03:
c5:a9:92:a1:a9:a6:25:cf:ca:0a:66:ae:77:b7:ce:
65:a4:73:c7:d9:14:82:79:21:80:06:8e:e9:ce:96:
ec:40:8c:f7:27:bb:11:c3:45:aa:ef:c1:f5:38:77:
84:fb:0d:1e:ec:da:2d:18:6e:db:91:28:1d:38:e8:
aa:6e:c4:9e:a8:97:90:06:6b:35:55:6b:6b:25:69:
ac:92:36:54:8c:3e:69:c5:a3:63:f0:26:5c:76:d1:
66:fe:a1:1e:90:27:75:50:b9:a3:dd:8c:80:28:e3:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:72:39:86:9F:FC:DD:CF:52:62:D4:6F:2E:0B:4A:32:C2:B3:E2:E4
X509v3 Authority Key Identifier:
keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:57:b2:58:7b:b4:c1:ba:7f:b8:e0:28:54:41:80:c8:47:40:
6a:6c:47:c5:9f:6a:d4:2f:68:bc:d4:71:ff:42:1f:cf:18:88:
66:ec:e8:3d:b2:96:57:a4:9b:3e:2c:59:4b:0a:37:ee:0e:f8:
c5:7b:b3:b2:1d:01:0d:cc:c8:8d:37:bc:cc:0c:6e:de:31:4f:
b9:d9:08:68:84:96:eb:25:19:ed:36:2c:e7:7e:aa:04:6c:19:
b0:f0:2e:15:9a:54:19:5e:43:5b:f6:ee:ca:a7:d3:93:ea:e4:
71:f3:9a:29:ab:82:b5:5f:df:c9:01:92:a8:54:5d:93:8b:94:
f9:32:59:b9:6b:71:56:cb:a8:59:8c:9a:55:7d:75:9f:58:e5:
3f:b1:bb:fc:44:e5:6b:26:b2:35:5b:0d:69:7d:42:77:ee:0b:
d9:09:44:29:6e:56:fc:9e:a9:bc:fc:be:9f:dc:91:3e:d9:ba:
78:34:47:e5:6f:63:95:00:78:15:26:f7:91:99:db:14:00:aa:
ba:84:4d:2d:e4:95:f7:71:4f:e2:cd:ab:c0:cd:1c:ca:e0:b2:
fa:92:ea:27:1e:58:20:03:d5:b4:f2:2c:52:76:ae:c6:58:55:
66:1b:02:36:27:63:41:c9:58:f2:c4:41:be:4a:bd:01:73:60:
39:c8:b7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:50:58 2025 by rpki-client