Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: NCMmb/85vNCsPNTVd68oIPautCiDzPBjKKKsZCNhYzg=
Subject key identifier: 10:DD:72:17:41:9D:00:00:3F:5B:1C:02:6B:1D:F5:54:B9:85:A3:50
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 01965E3AE2CE360F5CD9869B9DFA4EC66386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 0F84
Signing time: Tue 22 Apr 2025 16:00:39 +0000
Manifest this update: Tue 22 Apr 2025 16:00:39 +0000
Manifest next update: Wed 23 Apr 2025 16:00:39 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: dYxFgBfQqgcCzK6sNGlKHx4cDDil4GslyIWj88iLQbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:e2:ce:36:0f:5c:d9:86:9b:9d:fa:4e:c6:63:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Apr 22 16:00:39 2025 GMT
Not After : Apr 23 16:00:39 2025 GMT
Subject: CN=10dd7217419d00003f5b1c026b1df554b985a350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:bf:4d:9b:d6:04:99:c4:d1:de:29:da:72:
b2:31:6e:b5:eb:c1:69:56:80:9b:c8:91:18:8f:3a:
03:a6:42:c9:8c:52:da:4c:ef:52:3a:36:a3:aa:8f:
f8:ba:d3:0e:5f:39:05:26:cd:4c:06:20:96:f6:93:
a2:d5:c0:fa:e4:f0:85:78:6e:7c:eb:87:36:02:50:
3e:3f:69:88:13:21:c2:6f:f3:e7:e4:bf:d9:19:50:
42:10:c4:38:5a:72:10:69:06:12:c4:28:63:ca:57:
ba:65:6e:59:e2:b1:41:f9:2a:62:e0:77:e9:61:cd:
9d:67:e4:b8:2b:9d:82:88:bc:5b:31:0f:c1:7a:3e:
93:d7:1c:6f:08:cc:19:72:18:d8:0a:7e:6b:9e:34:
e0:14:8b:1c:bc:b8:b4:d1:69:99:01:17:7a:08:b2:
6b:d8:35:11:86:03:26:33:c2:5b:07:8e:df:a0:b6:
44:a5:66:a2:c5:1b:03:0f:bd:49:74:83:39:e1:a5:
27:b2:53:ce:47:24:d9:3c:37:32:a8:3f:6d:21:1d:
e4:ea:83:14:40:b8:eb:02:26:de:19:f0:31:76:de:
db:26:d2:f4:15:b0:47:32:2c:9a:68:e5:ef:48:23:
93:ae:80:36:16:e6:5f:71:7a:11:42:eb:66:64:9b:
86:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DD:72:17:41:9D:00:00:3F:5B:1C:02:6B:1D:F5:54:B9:85:A3:50
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2b:85:25:55:b9:e6:39:7b:91:0d:e5:d9:7d:88:13:b9:67:
d5:03:04:a7:2b:58:f9:24:77:ad:f5:74:65:85:bc:be:4d:5a:
46:c4:3f:81:8c:9b:25:8d:0e:d1:4a:f0:81:66:02:77:92:08:
a9:20:0c:0c:b7:c2:ec:63:c9:f9:2b:91:f6:ef:dc:02:c2:14:
23:c8:a2:f4:37:09:13:b2:63:2b:78:76:f0:f6:9e:cf:b6:6e:
1e:04:2d:f7:3b:2f:e1:84:57:40:ec:6a:0d:ad:2a:eb:df:4d:
95:b0:79:54:a3:50:3c:14:eb:68:6a:9b:45:53:a2:da:c4:3b:
b8:8a:4a:01:f8:c8:da:bb:40:de:13:b3:07:20:79:48:47:13:
54:48:a0:87:4b:f9:0d:54:ef:f9:33:4b:52:88:5e:6a:11:c0:
1a:1e:6f:20:a9:99:b9:e1:d2:ea:2c:89:fe:a5:de:81:31:2d:
5d:67:fd:b3:5b:49:58:b8:5f:05:ac:5c:c8:c9:5a:e9:9f:b9:
94:ee:da:c7:36:83:20:d3:55:bc:56:9b:f4:76:54:1a:1e:fa:
9c:f0:99:b6:4d:6a:35:ae:19:76:9d:16:2f:27:77:52:50:d8:
ef:2f:55:0e:7f:21:82:f0:af:a1:cf:4b:ab:90:94:89:dc:b2:
b7:8d:1d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:12:43 2025 by rpki-client