Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: 0v8RhbGdnGBirYwUxCHxx+JgA4gf1VoWl7ncGeGdw28=
Subject key identifier: 0A:6C:5A:6A:FF:BD:9B:61:EA:95:EE:19:A7:07:58:05:68:D6:7B:3D
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 01965537F85EFA8BD80F0E1D48DD9E67B69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 1238
Signing time: Sun 20 Apr 2025 22:00:53 +0000
Manifest this update: Sun 20 Apr 2025 22:00:53 +0000
Manifest next update: Mon 21 Apr 2025 22:00:53 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: VkPC5exJcLKxiZI3qVinM9IgiJoBo9MuY1cFjeT0n+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:f8:5e:fa:8b:d8:0f:0e:1d:48:dd:9e:67:b6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Apr 20 22:00:53 2025 GMT
Not After : Apr 21 22:00:53 2025 GMT
Subject: CN=0a6c5a6affbd9b61ea95ee19a707580568d67b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:f0:fe:94:3b:8d:9d:f1:62:df:00:da:14:
77:3e:cb:a4:88:ff:7b:22:10:f5:af:78:be:ae:fd:
2e:3f:3c:83:5c:f9:09:b3:ec:55:db:e8:39:ef:ae:
2f:71:4e:82:82:c1:4d:a7:86:69:90:3c:c1:04:ca:
87:1c:71:cb:56:9e:30:8b:1f:eb:44:cb:fb:17:01:
9d:34:60:cf:eb:61:6f:02:0d:8c:48:39:71:41:b8:
2c:22:d3:0e:b4:43:79:56:3e:e4:d7:95:58:7d:f0:
c3:bf:1e:6e:3e:9e:ef:a1:9e:74:b3:31:aa:02:7a:
62:91:4b:4a:80:0a:3c:4e:01:86:2b:78:da:3e:60:
61:e0:84:8e:97:31:5d:c4:8b:89:b0:ac:2c:fb:76:
cf:56:5e:e6:bc:f8:84:a8:cb:65:00:ef:57:53:ff:
99:75:69:c5:7f:dc:fe:d4:8d:d8:a8:b3:e3:2a:79:
af:a1:37:ef:53:a5:91:61:30:0d:a0:e9:65:71:4e:
eb:0d:d6:57:7c:4a:e0:b6:9d:ea:dd:34:7e:26:c3:
8c:2a:1e:08:de:f8:10:73:55:62:26:35:5d:dd:2d:
7e:7f:20:61:86:f6:be:a0:be:14:f2:e3:3b:ba:39:
70:60:fa:3c:c0:a6:22:d3:86:89:85:50:e1:f4:66:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6C:5A:6A:FF:BD:9B:61:EA:95:EE:19:A7:07:58:05:68:D6:7B:3D
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a9:b0:d1:6f:5c:19:18:64:84:3a:8b:9f:c3:d5:0a:d6:71:
2c:74:2c:a6:9e:19:5d:aa:63:f8:0b:d2:3c:5a:32:e4:2c:f3:
4b:d9:32:9a:b2:21:d4:66:50:fd:96:81:84:1d:ef:51:ce:70:
03:ba:70:cb:f8:56:78:85:18:c8:90:35:16:0e:6f:0a:bf:d9:
0c:d4:45:99:ff:7d:e7:e6:52:4a:78:a8:41:f0:57:69:e2:eb:
6f:30:01:28:46:e2:41:45:0d:53:ee:e7:93:dc:93:e6:a7:cc:
02:f4:3e:d2:15:93:db:8d:1d:94:bd:e3:1a:e5:ca:76:a7:1d:
90:03:03:97:ff:94:ee:ae:2e:46:13:75:eb:a3:c6:de:d7:82:
c9:af:f2:84:6a:16:66:27:bb:96:25:db:52:5f:ce:d6:a3:2d:
76:e3:79:49:11:7b:c8:4f:17:d8:23:06:c4:62:f9:08:b3:8a:
33:56:de:dc:b0:6c:2b:d2:4e:84:6e:bf:85:cf:0c:7e:c6:72:
72:52:c9:05:19:4a:9b:ea:e5:c8:69:d1:96:92:e5:52:12:2f:
2b:ef:18:28:4b:fd:69:4b:82:4a:79:b4:12:e1:27:db:79:d5:
2d:9a:14:c5:67:6d:7e:a3:d0:fa:9d:3a:4e:d1:87:38:3a:26:
ff:ca:d9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:31 2025 by rpki-client