Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
File: B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft (raw, json)
Hash identifier: OnHx0R5K2aNkMdR+hSy07qOiyWngZJZb1NEEQZD3yxQ=
Subject key identifier: 5D:EC:ED:10:A0:0D:39:9B:8C:07:A8:AC:FC:99:FB:FF:55:D9:DC:13
Authority key identifier: 07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
Certificate issuer: /CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
Certificate serial: 01965E3A98920EEFB8E208430187A3A3D22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
Manifest number: 0ED8
Signing time: Tue 22 Apr 2025 16:00:20 +0000
Manifest this update: Tue 22 Apr 2025 16:00:20 +0000
Manifest next update: Wed 23 Apr 2025 16:00:20 +0000
Files and hashes: 1: B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl (hash: M+k3IqL+Ly3OmjLMe8vv8wgnETfgU+X1s3zcsDslUQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3a:98:92:0e:ef:b8:e2:08:43:01:87:a3:a3:d2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
Validity
Not Before: Apr 22 16:00:20 2025 GMT
Not After : Apr 23 16:00:20 2025 GMT
Subject: CN=5deced10a00d399b8c07a8acfc99fbff55d9dc13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:e6:7f:3a:a7:a3:96:1f:bc:f2:10:81:f4:
98:97:d7:4f:71:4e:f6:29:18:48:72:82:b6:c3:6d:
35:9c:87:66:e4:96:a7:cd:48:c9:c8:ab:b7:90:61:
37:52:11:ea:be:95:3c:c8:21:a5:1d:2d:b2:f4:e9:
15:49:7d:58:61:3b:00:69:81:fb:04:58:3b:0f:6d:
8f:0d:e0:1a:3a:e9:ae:b2:c1:b9:56:f0:8c:77:eb:
ba:40:98:bf:e3:35:48:9c:47:98:58:06:db:3e:50:
f6:15:84:b2:ab:26:60:bf:e7:51:4e:7d:35:df:e1:
44:63:bc:9b:0e:a9:be:94:4d:d7:a8:01:4a:6c:1e:
23:04:2f:6f:ed:78:e2:39:a8:34:fb:21:44:5b:13:
12:da:13:ff:06:7f:61:88:1b:26:42:0b:df:30:d5:
87:85:5f:fa:60:72:90:89:2d:c8:f2:f1:24:fe:5b:
04:5d:ce:eb:63:12:ab:a9:4d:34:4c:83:6d:25:e3:
42:9f:08:c3:16:8c:9f:a2:e1:de:56:69:28:11:cd:
9e:1e:d8:ea:09:ed:68:90:30:7a:66:94:1c:85:33:
0a:46:d3:80:97:11:d3:ab:3a:36:f6:6f:c9:ff:5c:
f9:d2:87:fd:7d:eb:69:1a:de:2d:f7:ce:e5:b5:28:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EC:ED:10:A0:0D:39:9B:8C:07:A8:AC:FC:99:FB:FF:55:D9:DC:13
X509v3 Authority Key Identifier:
keyid:07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8a:ae:c6:97:13:a4:2d:da:4f:e5:5f:a7:54:1d:a9:b6:9d:
b0:25:5a:19:dd:c9:a2:bd:80:13:8f:b5:4e:ce:6e:83:7e:67:
e1:df:a8:81:8f:11:1f:20:29:82:7a:a5:f2:65:db:55:e6:ed:
d2:49:f9:85:ea:3b:5d:d2:b5:c4:96:af:c2:20:e1:06:4b:0d:
dd:ad:54:dc:c7:ad:6c:ad:7e:24:2b:a9:3a:22:2e:65:19:f2:
e3:43:a8:74:ee:68:b3:97:8c:0b:6f:3a:c1:6f:eb:46:02:17:
a2:38:41:a2:f6:0f:07:1f:86:47:dc:33:b8:02:a2:7c:9c:97:
bf:23:45:af:a8:41:db:01:f9:83:df:a9:b0:17:77:4d:0a:53:
f2:89:7a:7b:5e:f7:9a:2e:95:18:61:2c:45:78:d8:c3:07:75:
36:d1:45:c0:36:64:81:f3:8d:40:a6:37:b9:ea:75:fe:fb:7a:
c3:b9:2d:4c:f6:1d:e6:d5:8a:21:92:c4:7d:6a:d0:00:be:87:
1f:94:79:ea:ee:d1:6d:16:9d:e3:e4:39:d7:c3:a9:42:42:7b:
82:b5:2a:cd:90:7c:82:01:c9:24:43:75:65:05:1b:a4:08:ed:
d9:60:03:c1:48:75:7e:6a:bb:58:65:40:40:c6:f1:63:c6:e7:
98:72:8a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:03:40 2025 by rpki-client