Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
File: ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft (raw, json)
Hash identifier: jCoIA+WrFGstos/Y8BAUmB23KDCBHVAL4ERiDKZduGo=
Subject key identifier: 1B:BD:88:BA:08:03:23:25:A9:7C:4F:FF:BA:49:6A:70:14:09:AF:A9
Authority key identifier: 00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
Certificate issuer: /CN=0018a3328c44f08f65243c61e064fefed6413c04
Certificate serial: 01965CF1EC16F61EE3E91866E5877E20C9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 10:01:20 +0000
Manifest this update: Tue 22 Apr 2025 10:01:20 +0000
Manifest next update: Wed 23 Apr 2025 10:01:20 +0000
Files and hashes: 1: ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl (hash: KKtLngFf3KBbmPVjfF1XpRzZpoc4Jay8py/LcxtOqkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:ec:16:f6:1e:e3:e9:18:66:e5:87:7e:20:c9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0018a3328c44f08f65243c61e064fefed6413c04
Validity
Not Before: Apr 22 10:01:20 2025 GMT
Not After : Apr 23 10:01:20 2025 GMT
Subject: CN=1bbd88ba08032325a97c4fffba496a701409afa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:58:a3:0d:da:8b:a7:30:60:87:28:87:72:
3c:41:f6:5f:c5:f1:6f:89:08:17:7b:75:bd:49:0f:
9d:dd:18:b5:af:0c:03:98:a2:3d:d4:08:b2:cb:a3:
d0:cc:4c:81:2c:e9:72:bf:b1:1d:2f:e4:98:75:eb:
be:cd:c8:38:cb:64:26:d4:e0:53:22:19:53:f1:b7:
bc:1c:ea:8e:64:e5:32:70:bf:dc:32:6c:fc:a2:df:
f2:13:32:f1:b2:17:8e:4b:a4:11:7e:24:88:c5:a5:
52:d9:20:01:25:c2:63:18:56:cf:d2:ed:4b:7d:80:
84:9b:6e:c9:da:5f:18:b9:8b:83:09:e7:6b:3c:cd:
78:55:ea:fb:b1:3c:bc:23:e5:21:ca:d6:b0:9c:d5:
3b:9c:4d:72:97:51:53:08:cd:38:9d:25:18:65:b1:
d3:b2:4d:42:1b:ea:3f:9d:c8:67:e3:94:d6:8e:27:
bb:92:be:82:1c:b3:95:72:59:96:20:80:49:8d:ae:
ae:f3:c0:12:02:a4:b1:56:f8:72:5c:59:26:7c:e9:
80:ac:a1:f1:d6:97:b7:44:7d:3c:f7:3e:76:07:61:
2d:42:10:49:c1:0a:69:eb:48:1d:aa:67:0b:6d:6d:
88:ce:56:0b:40:ca:cf:71:e9:88:94:0e:3d:cb:bd:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BD:88:BA:08:03:23:25:A9:7C:4F:FF:BA:49:6A:70:14:09:AF:A9
X509v3 Authority Key Identifier:
keyid:00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9a:a2:53:4a:d1:34:ef:95:c1:2f:7e:58:ff:4b:f1:51:d9:
ba:4c:26:b0:3c:db:ec:db:e8:be:e1:02:57:ba:9a:5b:29:24:
cf:aa:66:bb:e0:10:c9:77:c6:7a:e9:a6:e2:45:95:fc:4b:b5:
19:5b:32:e1:43:b7:16:77:ab:58:9f:d8:06:0f:06:44:5b:7c:
0d:79:04:bc:c0:63:05:9a:b4:3c:b0:e2:2b:d3:6d:d9:d6:b0:
3c:20:4b:64:80:10:62:2d:da:79:9d:e2:fd:93:28:d1:4f:4b:
02:c5:2a:5a:08:90:66:1b:c9:fe:35:fd:01:7b:cd:de:f3:a6:
dc:6e:ae:e4:ca:31:b4:f2:56:fe:4c:4c:68:88:c1:ab:27:3f:
d6:d5:54:37:29:51:20:d9:1a:7d:3e:b8:9a:6d:c8:cf:7f:a1:
4e:84:9b:16:21:c1:e8:96:c1:9b:4a:c0:8f:eb:ff:37:71:e9:
c5:84:62:c7:70:47:56:0d:f3:60:fe:21:a1:f1:6a:1e:e9:10:
82:f7:7d:28:13:28:fc:18:ae:4a:b6:d8:60:27:dc:77:eb:b7:
c3:0f:dd:b7:c1:bd:3b:9a:42:56:b6:b0:35:8d:ee:92:af:94:
7a:79:b4:cb:90:42:10:d3:09:9e:93:2a:78:a4:d6:e3:ef:e9:
ab:73:5c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:47:46 2025 by rpki-client