Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json)
Hash identifier: dWl1d7avyegewZVyZUR908Pg/v7MbZPVj7PILWJUbfk=
Subject key identifier: 07:94:86:8E:4D:12:10:5B:6A:42:F0:07:4B:6C:68:E1:DC:6B:4F:8C
Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Certificate serial: 019655DC9D120FB5C2457277BB6584C69B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
Manifest number: 086F
Signing time: Mon 21 Apr 2025 01:00:43 +0000
Manifest this update: Mon 21 Apr 2025 01:00:43 +0000
Manifest next update: Tue 22 Apr 2025 01:00:43 +0000
Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: ut99Uws8RK+F+NFFgbm0Mv+5QkH/2ZrwWQ5wKU/yxus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:9d:12:0f:b5:c2:45:72:77:bb:65:84:c6:9b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36
Validity
Not Before: Apr 21 01:00:43 2025 GMT
Not After : Apr 22 01:00:43 2025 GMT
Subject: CN=0794868e4d12105b6a42f0074b6c68e1dc6b4f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:1f:63:9b:ad:b7:c2:c2:e4:3c:fd:d6:e8:
ed:6f:d2:49:bd:88:f3:40:0c:02:1b:6b:73:99:b7:
4d:ff:58:e9:42:b1:f4:a7:e0:b2:2f:0b:44:17:0c:
01:fa:85:d6:3d:31:58:cc:e6:1a:98:9a:2d:a8:02:
4a:18:28:29:4b:78:41:f0:2b:11:d8:ea:92:c5:e5:
18:bd:55:ff:52:e1:1a:43:53:bc:60:1e:6d:e0:00:
43:40:c6:f0:76:e9:4d:a6:3c:0e:01:f5:63:34:b2:
3e:9d:4c:46:e0:6f:bd:cb:ff:f6:ac:19:da:ae:f9:
ec:c1:43:b2:27:fd:e3:bf:48:9e:31:fe:db:88:b5:
2c:13:df:c8:3c:d6:54:8f:91:80:d7:5a:6a:49:bf:
7f:9f:d6:d0:18:43:ff:11:2f:00:40:dd:52:e3:df:
39:d9:ff:ec:a5:13:42:4c:33:72:fd:ea:30:1e:d8:
58:c7:15:c5:52:d1:26:15:59:ad:a6:64:4c:51:67:
2e:79:78:3f:f1:c6:a7:e9:71:71:a6:fe:ec:81:14:
57:f5:be:fd:bb:00:93:5f:ce:d4:3d:b4:68:b4:8d:
23:02:b9:e8:25:a5:60:12:0e:c3:ad:a4:2d:a7:6f:
97:3d:4b:3b:56:23:50:57:ff:3e:21:f1:71:9f:a5:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:94:86:8E:4D:12:10:5B:6A:42:F0:07:4B:6C:68:E1:DC:6B:4F:8C
X509v3 Authority Key Identifier:
keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2b:9a:8d:73:50:27:dd:b8:32:29:db:2e:22:a5:02:2b:bd:
33:bc:cc:b4:b8:38:16:12:c5:0b:59:85:87:5d:86:bc:07:09:
37:5c:95:bd:fd:4d:d3:a1:c9:42:b0:41:53:ad:1c:f1:ae:7a:
39:f6:75:f4:d3:3c:d0:2a:64:74:ef:4c:2d:74:fc:29:4d:59:
26:22:94:3f:82:fe:54:ce:c4:e4:4c:0a:cc:99:a0:5d:21:ca:
b1:fc:5a:75:e8:56:64:c4:54:42:81:40:26:0f:fd:77:5b:c0:
9c:c1:f1:2f:a8:eb:3f:e7:4d:82:4b:4f:c0:84:c1:61:f9:33:
15:97:68:42:4a:36:5d:23:90:0c:1d:34:f3:b4:f4:75:1f:77:
8b:e8:72:18:10:b7:40:eb:a2:17:97:0b:9d:a7:cf:c2:76:f2:
85:bd:e1:cc:32:1c:5c:a1:5f:1f:7a:43:d8:54:f6:ae:0c:2d:
29:5d:81:79:42:e9:12:78:17:1e:ed:4a:a7:20:99:96:be:6d:
f6:c1:06:52:1f:7e:ab:48:98:15:1b:66:24:33:89:f2:f9:7a:
59:25:f3:87:0f:86:2f:9d:14:c5:1e:66:29:ab:11:7d:b8:1a:
5b:9c:ea:25:cf:34:d4:a7:f0:c5:fa:51:df:ee:6d:ee:4f:8f:
76:cc:07:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:17:38 2025 by rpki-client