Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File: R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier: LG7aNDStgdtW9C95ERRATObsVITsRCn0GDohZnMdTi4=
Subject key identifier: E8:AF:AC:BF:54:BD:D3:0A:39:D0:7F:62:16:4B:45:65:00:C1:64:BE
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer: /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial: 01965726447446169DF7B294797C4EB5978F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number: 14FA
Signing time: Mon 21 Apr 2025 07:00:47 +0000
Manifest this update: Mon 21 Apr 2025 07:00:47 +0000
Manifest next update: Tue 22 Apr 2025 07:00:47 +0000
Files and hashes: 1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: b0aVv/cZreFki/PHeEuxA8h1BmnYEIRq0laqQoWlftw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:44:74:46:16:9d:f7:b2:94:79:7c:4e:b5:97:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Validity
Not Before: Apr 21 07:00:47 2025 GMT
Not After : Apr 22 07:00:47 2025 GMT
Subject: CN=e8afacbf54bdd30a39d07f62164b456500c164be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:2f:e2:5d:31:4a:fc:fc:4c:6f:e6:3b:0a:
d4:de:90:15:90:8c:65:b2:d2:32:f2:24:ba:02:a9:
43:c6:70:3f:a4:f2:8f:aa:45:28:bd:b3:89:bb:ab:
a3:bb:98:25:65:22:5d:46:04:09:ef:42:74:6e:58:
ab:51:1d:8a:ed:26:60:2b:8a:86:a3:7c:d6:5b:8a:
cc:31:29:7d:15:37:f9:67:62:80:c9:ea:9f:2a:ff:
49:28:ae:cd:a4:e1:35:96:64:29:11:64:1a:ca:12:
b2:6a:ef:41:08:16:90:3b:f5:c9:58:45:02:5d:7b:
d0:1d:4b:a1:09:f0:e7:91:e3:12:d1:09:80:21:9e:
43:a0:2f:a7:1f:f4:3e:ab:2c:37:a6:0c:43:ba:53:
20:73:8e:fc:1f:37:e9:5d:17:a4:ce:29:de:d8:08:
2b:56:67:52:86:5e:50:d1:c8:50:fc:6e:33:d3:bd:
02:19:8e:9a:5c:49:13:05:9d:c4:a0:a2:95:b0:55:
f5:13:d4:cc:c4:bd:c2:0a:60:e2:ce:1c:a0:32:ee:
09:37:61:ff:d9:99:35:20:fd:be:e5:69:f2:f3:33:
e3:8f:58:1d:d3:38:fe:c8:b4:36:f0:48:de:d7:fb:
e7:d3:5f:ec:18:ef:43:1f:0c:60:bf:fd:17:8f:60:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AF:AC:BF:54:BD:D3:0A:39:D0:7F:62:16:4B:45:65:00:C1:64:BE
X509v3 Authority Key Identifier:
keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c4:5b:ba:4b:1f:c5:ad:ce:71:bb:63:05:e8:f8:74:ad:5f:
ed:c6:7f:c9:a7:bb:1a:b5:1c:b3:9f:c4:04:1e:73:02:06:4e:
d0:2a:88:d8:3d:bc:55:c5:44:2f:2b:27:a1:1b:be:3b:63:43:
0f:53:cd:2d:69:c0:29:76:11:67:19:59:5e:24:1e:92:c3:08:
74:a7:7f:f6:d7:5c:f1:6f:ca:92:fd:ee:5f:2d:4a:5f:a5:62:
b5:6e:3c:35:d6:69:ec:c9:bd:f3:25:e8:48:f1:cf:27:d7:7a:
e2:45:b8:ee:ee:2b:f9:ed:f7:bc:64:c0:f1:3b:57:fe:de:b6:
28:ee:e8:b3:8f:a9:59:72:4b:da:1f:98:c6:db:f5:3b:6d:8a:
e9:93:2e:a0:95:10:ba:a0:30:2c:54:ec:c6:2c:0c:9f:a9:88:
54:0f:ca:3a:7d:18:4c:5c:0e:c1:dc:10:36:80:89:e4:58:aa:
8d:83:75:02:9a:cc:dc:c7:8c:b0:fc:2d:7a:8c:92:a6:5d:37:
a8:c2:34:ec:43:9d:69:e3:9a:6f:2e:00:a6:a0:9d:19:dd:f3:
9f:35:d1:eb:8b:57:4a:42:9c:c0:98:d1:5e:6c:8d:b0:d1:16:
ed:84:83:04:02:74:88:60:d9:80:8a:1a:09:e1:38:2a:85:0c:
f2:8a:1f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:41 2025 by rpki-client