Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier: OtjrAp+smoPqaCtdDfHBUAplD/m8VHbQcarNbP9a+7g=
Subject key identifier: C9:4A:A7:40:46:6B:04:68:5A:13:72:84:2E:F6:A2:74:7E:D4:DE:93
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer: /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial: 01965537B622F8344E07AF2F188BB8A15550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 22:00:36 +0000
Manifest this update: Sun 20 Apr 2025 22:00:36 +0000
Manifest next update: Mon 21 Apr 2025 22:00:36 +0000
Files and hashes: 1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: /k8AZ3UJMxRU8pHSCGEJqyMN1GEhKXbUPjUagxL4Zgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:b6:22:f8:34:4e:07:af:2f:18:8b:b8:a1:55:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
Validity
Not Before: Apr 20 22:00:36 2025 GMT
Not After : Apr 21 22:00:36 2025 GMT
Subject: CN=c94aa740466b04685a1372842ef6a2747ed4de93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:cd:bc:5b:4c:ad:96:67:4a:48:a3:d7:e1:
2f:03:6b:9c:0f:a6:d6:80:4c:90:c5:68:af:27:19:
70:de:1d:c5:e8:80:44:1a:bc:20:ca:fb:d2:19:68:
37:68:dd:da:c6:ed:23:bb:95:d5:28:e8:62:31:9a:
bc:77:9d:5c:72:d4:0e:3f:20:4c:0d:c2:38:a8:cf:
1c:b3:9f:82:8c:e4:b3:ff:ea:93:03:45:80:a8:2a:
45:05:64:ba:75:da:93:8d:aa:38:25:a6:41:e9:ee:
44:65:71:e1:2e:28:8f:e6:1c:3b:0e:59:a0:66:90:
13:a5:6e:1e:fb:37:92:24:62:5b:e1:1a:1b:84:68:
5c:b0:e0:6d:f9:55:0f:41:ec:83:2f:dd:4f:a6:18:
e3:fc:55:f3:53:f0:41:99:e5:0a:56:22:55:e4:33:
65:a5:33:2b:22:a2:1f:06:79:4e:19:d5:03:6d:f3:
f7:a8:7c:0b:32:08:3f:ae:34:c9:db:2a:12:ad:ab:
02:eb:46:e3:86:0d:0b:81:23:19:cb:ed:19:72:44:
c6:15:de:2f:c5:aa:d2:8f:c5:98:74:a2:a2:78:c0:
61:a8:db:6a:9c:59:48:6e:df:a7:f0:78:d8:99:a4:
90:86:29:50:d5:57:82:43:3f:c2:3e:b7:87:e4:90:
db:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4A:A7:40:46:6B:04:68:5A:13:72:84:2E:F6:A2:74:7E:D4:DE:93
X509v3 Authority Key Identifier:
keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:58:c0:77:6c:eb:78:75:e9:24:23:09:2c:fd:05:6c:83:69:
c1:d6:f5:75:55:18:0c:a6:88:e1:df:a2:7d:49:c4:76:3f:26:
70:66:20:93:20:75:2d:57:48:e9:51:db:80:25:db:83:de:c9:
7e:13:d7:e0:0c:86:96:76:19:fb:9a:1c:8b:1d:f0:31:72:eb:
d3:1b:ab:7a:4f:86:71:96:34:8e:6e:b4:d4:42:d6:49:9b:03:
06:01:1c:56:bf:b6:80:6f:4f:5a:d3:ed:e2:5d:84:dd:8a:2d:
34:14:b5:c5:e1:30:d9:ea:e5:d3:fd:ef:4d:4d:08:b4:6e:5b:
96:6d:a8:66:17:6b:e7:14:a3:02:66:b6:80:2f:4b:59:fc:71:
a0:90:3e:25:8c:ab:b4:77:1d:cb:51:bc:8e:8e:1f:37:44:b5:
8c:aa:db:f8:3c:a8:81:12:ac:1f:82:1d:5a:b3:11:07:0a:55:
20:3a:41:0c:63:40:7b:3a:38:a9:83:4e:89:a9:8c:1a:ed:87:
03:80:83:e6:3d:1c:ec:83:51:5b:58:f1:8f:e3:e0:2e:9d:f3:
4e:db:f2:9a:39:6a:6f:0b:98:0b:66:45:2a:f7:56:f7:75:4e:
e3:18:b2:29:3d:e0:56:1e:81:7f:a5:a0:e9:3b:f4:ce:11:90:
33:84:eb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:32:39 2025 by rpki-client