Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File: 8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier: D0Ymree1wgd1Olsl9Pcdxz7ycWuULO6TfV4fqRKR9As=
Subject key identifier: DE:A3:C8:66:EB:D3:BD:32:89:C3:B6:1E:9E:EA:02:F2:B7:4D:03:26
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer: /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial: 01964E59C65DCEE5A946441A0502A67F6F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number: 14F5
Signing time: Sat 19 Apr 2025 14:00:28 +0000
Manifest this update: Sat 19 Apr 2025 14:00:28 +0000
Manifest next update: Sun 20 Apr 2025 14:00:28 +0000
Files and hashes: 1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: CL653slab3eHi4xi8nH/NpaDFDexPkLlOpHbJxDZsiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:c6:5d:ce:e5:a9:46:44:1a:05:02:a6:7f:6f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Validity
Not Before: Apr 19 14:00:28 2025 GMT
Not After : Apr 20 14:00:28 2025 GMT
Subject: CN=dea3c866ebd3bd3289c3b61e9eea02f2b74d0326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:b4:0b:e1:2d:ac:d1:f9:ac:1a:0d:29:bb:
a1:11:f7:f4:14:93:3c:6f:b2:70:8a:13:85:9b:b4:
e5:9f:cc:5b:c8:3b:15:f7:b1:dd:f4:11:c7:d0:8c:
47:af:32:af:82:27:21:41:d5:eb:de:7e:16:d2:31:
62:09:dc:c7:88:e3:99:eb:02:0f:59:bf:62:0a:58:
f5:96:aa:c6:96:a9:8a:66:3d:c4:52:64:72:02:fd:
ff:2a:48:38:30:0f:1b:e5:95:73:56:74:b3:8c:61:
e0:d6:02:71:b0:64:9c:c7:66:3a:11:b2:07:ce:e9:
a1:ac:45:db:a2:bd:5d:f8:9a:70:d7:5f:15:8f:d3:
fb:8b:40:74:cf:c1:87:98:1c:72:b2:b2:c1:29:db:
7d:c2:1f:0f:e9:94:c9:71:ba:ea:c8:f0:d1:03:45:
e9:ac:85:5d:df:19:45:6b:f3:16:24:ab:45:1e:a5:
2d:9c:33:e6:6d:4d:47:98:0d:dd:af:7f:e9:c9:4f:
6e:65:b8:34:15:6c:f8:3c:be:e4:71:e8:56:b6:4d:
5b:8a:6a:3c:61:ba:e7:4a:85:0e:b2:bd:a3:ee:75:
6b:83:54:c0:57:8d:77:0f:d6:ce:d2:28:4d:a1:65:
df:5c:e6:96:1b:d5:5f:6b:ea:e6:a9:b4:7e:cb:90:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A3:C8:66:EB:D3:BD:32:89:C3:B6:1E:9E:EA:02:F2:B7:4D:03:26
X509v3 Authority Key Identifier:
keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1e:2f:92:ab:e2:f1:b0:92:03:f9:83:ce:cf:0c:a5:f2:5e:
57:e7:09:63:24:fa:3f:ca:d5:7a:bc:90:a3:c7:6c:fc:d5:4a:
92:38:c9:37:9a:c9:bd:78:28:fb:96:34:ed:d0:c5:09:d0:f8:
ad:97:f3:29:6e:ae:5b:7d:6e:c6:5e:07:0d:15:13:8c:bd:c7:
24:4f:25:c0:40:af:70:4e:6a:de:48:26:2d:53:09:dc:1c:81:
b6:3c:b3:6a:20:ed:de:2b:72:84:ba:65:c4:c7:be:c9:18:05:
48:e9:34:b5:df:87:e3:7c:43:6e:33:d7:b3:6e:25:31:c3:15:
0e:ba:c1:a8:33:2e:2b:b3:64:e6:63:3d:9c:2c:66:1a:09:10:
ad:1d:58:9d:d9:d0:f5:ed:f0:b0:fe:65:28:7b:59:fd:c1:49:
02:91:a6:50:71:89:48:91:de:b3:89:9a:d5:a1:69:01:35:cb:
80:17:d9:c1:9e:13:3a:f3:f1:77:0b:fb:6f:50:ef:e9:4a:30:
d7:51:f7:f1:a8:96:a2:e6:29:13:dc:6a:d2:1c:f1:6e:dd:b0:
f2:92:ff:6f:a8:25:bb:ed:7f:00:a5:0c:05:d6:df:b0:6b:53:
a7:33:71:bb:ba:97:30:78:8a:54:d8:fd:45:e4:5f:ec:c1:62:
c4:37:7d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:00:48 2025 by rpki-client