Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
File: 8iyKma2nf70-JAFPXiTxr2lQXCM.mft (raw, json)
Hash identifier: UehT3ZhoIoa7EqG7QNAJfjgec9jUa5EbJClrBDhihQg=
Subject key identifier: CC:E9:32:BA:80:6C:B7:21:4C:0B:0D:61:F0:F6:61:09:9F:67:9B:BD
Authority key identifier: F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
Certificate issuer: /CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Certificate serial: 01965914517DEA73348B08487F2E1D07A542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 16:00:25 +0000
Manifest this update: Mon 21 Apr 2025 16:00:25 +0000
Manifest next update: Tue 22 Apr 2025 16:00:25 +0000
Files and hashes: 1: 8iyKma2nf70-JAFPXiTxr2lQXCM.crl (hash: H/F0OPEUYVbrfJhcv2rmakLCcoSJU5hM/yfNTkGJCgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:51:7d:ea:73:34:8b:08:48:7f:2e:1d:07:a5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Validity
Not Before: Apr 21 16:00:25 2025 GMT
Not After : Apr 22 16:00:25 2025 GMT
Subject: CN=cce932ba806cb7214c0b0d61f0f661099f679bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:6e:80:cc:b2:85:f8:16:f9:47:56:31:0b:
70:bd:0d:a2:b8:07:78:b9:0e:d4:df:dd:0d:5b:df:
df:5c:89:a1:df:f4:7e:e3:94:78:67:d6:0d:3e:fb:
29:fd:b2:50:62:a9:ff:89:49:ca:68:37:d2:e2:a9:
55:47:fe:2a:57:77:a2:d2:e7:f5:5a:f8:04:6f:f8:
7d:04:3b:f3:e2:19:a9:70:17:5a:15:72:5f:4a:4e:
62:89:1b:3a:05:d0:2e:03:4d:ca:75:eb:fd:b1:39:
ed:95:ff:3a:c4:11:36:af:d5:c7:3a:d6:4b:e8:ef:
43:79:4d:58:92:9e:bf:fc:7e:33:40:10:9d:c3:07:
82:e1:e6:59:5a:2c:7c:29:47:e9:3f:18:72:6d:91:
c5:f1:4a:4f:eb:30:fa:e5:66:4c:e7:bf:8f:b9:b6:
41:4d:b4:39:b8:9f:06:08:20:95:38:d9:a6:e8:2f:
2e:a8:a4:22:d9:9c:ed:da:00:d4:f6:ef:b2:ab:61:
8b:4e:72:0f:50:9e:f5:8a:91:9a:fd:fd:6b:0c:89:
a1:71:50:ab:77:f5:b6:a5:69:c1:7c:99:d6:75:58:
06:86:7a:20:0c:eb:75:6f:4c:bd:23:38:f4:fe:4b:
1d:e2:b1:bb:16:82:89:9f:66:4e:2b:d8:29:62:31:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E9:32:BA:80:6C:B7:21:4C:0B:0D:61:F0:F6:61:09:9F:67:9B:BD
X509v3 Authority Key Identifier:
keyid:F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:28:97:03:29:9d:40:66:d4:83:83:61:57:58:2b:ba:57:6d:
ab:4b:36:43:ec:f7:33:b2:d6:1e:69:46:d7:74:42:21:89:11:
12:2c:22:b2:27:fa:78:21:d5:a6:2c:c0:f4:46:95:68:ac:78:
77:2f:79:e4:6a:65:ec:25:56:06:bc:ba:44:50:ec:1b:be:37:
cc:b2:9d:69:95:19:82:58:6e:2d:d6:d7:7f:f4:e1:2b:3e:a9:
b3:85:3a:44:2f:4a:2c:c2:a1:d4:a4:18:fa:f0:2e:cb:a1:dd:
0b:fe:f4:09:0b:bd:11:54:74:4e:9b:fe:b8:5c:5c:2d:9f:d8:
92:52:96:23:0f:59:b1:65:57:3a:cf:c9:3d:49:5f:db:68:31:
fb:79:93:54:b6:f1:32:3b:c3:0c:40:c5:b5:8e:5d:27:75:1d:
be:27:de:1e:4b:0e:5a:0a:e3:1b:5c:36:2c:9e:28:88:37:e5:
f1:4f:e5:c3:fb:c3:2a:20:e3:90:3f:4b:ad:62:5a:88:e2:96:
ba:13:43:5e:3a:10:23:20:2e:97:d9:55:45:c9:12:3e:a0:c4:
29:08:85:29:b6:ea:69:07:92:5e:f4:d3:de:bb:0e:77:8a:f9:
f9:87:9f:8a:04:dc:95:06:a1:7c:2e:fa:04:e2:73:24:ff:f2:
88:5e:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:27 2025 by rpki-client