Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: 7HzGy02BX9laeZgYjtHvl+34SOMJdUBtjLIVVBQkJis=
Subject key identifier: 1F:B9:6E:A6:9E:0E:46:53:4E:A0:EC:40:B8:A0:20:E0:FE:7F:1B:50
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 0196572643B540D0FC8063C20512F269DC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 1235
Signing time: Mon 21 Apr 2025 07:00:47 +0000
Manifest this update: Mon 21 Apr 2025 07:00:47 +0000
Manifest next update: Tue 22 Apr 2025 07:00:47 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: WlibBWgCFO1Euv3PUEbalFNoLaUkOIvlXX3rS8G43rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:43:b5:40:d0:fc:80:63:c2:05:12:f2:69:dc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Apr 21 07:00:47 2025 GMT
Not After : Apr 22 07:00:47 2025 GMT
Subject: CN=1fb96ea69e0e46534ea0ec40b8a020e0fe7f1b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:4d:1f:e0:87:bd:8e:d5:a7:ee:08:26:62:
28:74:96:74:5d:64:8d:d0:9a:dc:90:4e:3f:5a:06:
e6:7a:c5:ea:68:35:24:cb:c2:2f:2e:e7:d4:c9:2b:
4a:82:e7:10:dd:25:78:6c:93:46:19:60:77:58:43:
2d:d2:4a:d9:27:95:19:4d:d4:60:eb:8b:a4:6d:73:
2a:a9:3f:de:77:c4:e9:53:e7:e6:b0:5e:ec:2c:86:
fd:c8:72:f3:f0:f1:78:e9:ef:fe:7d:ca:1e:49:17:
92:55:ee:29:08:8e:93:e7:d5:47:0a:4e:6f:4b:50:
77:73:ff:f5:60:b9:30:ab:c1:49:17:cd:08:42:2b:
ae:f2:9e:02:66:c7:48:c3:57:34:63:ce:07:4e:3b:
6c:fa:24:33:92:7f:41:5f:76:24:15:49:8b:8b:6d:
bf:39:42:69:49:ef:0d:d1:32:4f:38:94:86:e7:ca:
b0:1c:04:b1:f0:87:72:da:c9:cc:d0:4f:af:22:69:
85:99:3d:86:db:51:ec:67:9e:38:e0:51:62:57:d8:
82:17:cd:cc:b8:f4:95:9b:72:63:a3:b7:c7:02:85:
73:96:d4:d5:9f:6a:b6:fc:e2:09:29:b0:41:45:1f:
10:02:2f:4c:ef:fc:d2:28:72:b2:13:c1:00:c9:38:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B9:6E:A6:9E:0E:46:53:4E:A0:EC:40:B8:A0:20:E0:FE:7F:1B:50
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0b:4b:70:66:6d:ee:b7:41:3a:a0:c0:2c:78:8d:ca:6b:61:
80:05:05:fe:4b:24:d5:13:26:39:be:2a:ba:57:0f:95:b8:7a:
c1:ca:99:59:81:97:5e:a5:10:37:8f:86:64:7d:21:a2:8d:9e:
9e:e2:7d:33:f5:63:5a:2c:9c:9b:b5:5f:0f:2a:b6:5f:6e:d0:
b2:da:df:ba:bb:32:59:84:01:e9:46:23:89:c7:89:7b:ff:9c:
0e:38:85:b1:5a:b7:04:06:e8:99:10:b8:a5:d0:d8:40:0f:0c:
ee:06:e9:1c:ef:e5:7f:d1:9f:da:3a:6b:94:5b:1b:e5:8f:91:
81:cb:db:46:57:bb:cd:c2:96:b2:3e:42:d4:b5:73:c9:1c:7e:
59:d1:64:e5:53:ab:b9:34:c9:c2:bc:88:ad:9e:32:2d:7f:90:
c2:ae:17:0a:64:09:37:2d:f6:f7:18:da:be:39:96:66:47:95:
7a:ba:8d:61:36:34:30:21:3e:d9:91:f1:02:b4:4b:fe:b1:0f:
47:08:9e:ff:9d:66:1a:a4:5d:68:d9:84:6f:d0:ab:7d:47:14:
3f:15:4c:dd:98:53:1d:e4:72:ad:3a:a1:c2:0d:7a:ed:04:41:
39:ad:b2:bf:05:5e:b9:ff:e1:88:d2:c2:a3:75:32:bc:3f:d7:
03:89:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:04:42 2025 by rpki-client