
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
File: 8mAhR5HPhJn8k68B96Q_XL6QKpg.mft (raw, json)
Hash identifier: 6qti3SS9kH2nC4bZrlfWMr09paMeJlBS5YZYsWy9cRE=
Subject key identifier: F9:90:1A:7F:FE:29:90:AF:B4:76:4D:2A:A6:49:53:83:9B:9C:64:F0
Authority key identifier: F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
Certificate issuer: /CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Certificate serial: 019611A1C08B36135AB982F0CB4D599E6BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
Manifest number: 0DC0
Signing time: Mon 07 Apr 2025 19:02:15 +0000
Manifest this update: Mon 07 Apr 2025 19:02:15 +0000
Manifest next update: Tue 08 Apr 2025 19:02:15 +0000
Files and hashes: 1: 8mAhR5HPhJn8k68B96Q_XL6QKpg.crl (hash: VZEXbq98+BpWTU+TYWE/LFIPuq8hslPURn0vczXlxFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 19:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:c0:8b:36:13:5a:b9:82:f0:cb:4d:59:9e:6b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Validity
Not Before: Apr 7 19:02:15 2025 GMT
Not After : Apr 8 19:02:15 2025 GMT
Subject: CN=f9901a7ffe2990afb4764d2aa64953839b9c64f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:e4:9b:3c:b3:a1:86:87:e3:66:70:23:a1:
35:f8:40:30:bb:58:d0:82:f7:e5:be:50:f4:7e:a0:
90:7d:0b:3c:2f:36:6d:0c:e5:89:56:43:a0:37:75:
d9:47:82:9e:d5:52:d2:8a:fd:f0:08:e2:b1:92:2f:
df:56:77:82:e6:c5:55:69:82:d0:e8:81:88:ec:30:
6f:58:48:16:4b:ab:81:fd:e5:37:64:44:2c:74:f2:
46:8e:a4:fb:60:e1:9a:ec:a4:4d:0d:92:64:6d:56:
94:21:b1:47:27:4a:6b:6e:a5:e3:bd:48:42:e5:18:
e1:ba:d9:39:03:16:42:c8:64:db:43:56:7a:9f:2a:
b9:08:08:5a:e5:0a:84:76:45:72:88:8b:9b:ba:5f:
0f:f5:b0:eb:28:42:30:95:52:b1:dd:3f:71:70:10:
a6:15:ad:f0:a6:26:ac:bc:64:0a:14:74:24:27:a0:
10:8b:84:12:11:a8:33:17:4f:cf:79:75:55:a9:57:
19:4a:47:7a:d9:4d:35:d6:b9:d8:a1:d1:40:6e:e7:
61:72:bf:08:9c:0c:e8:6d:2d:d4:07:3f:3c:18:ca:
a5:0d:e5:0a:0f:ea:5f:0f:98:16:32:20:93:6a:8c:
cb:8f:3d:f7:ff:0d:4d:ea:8b:6c:c7:7d:4b:2a:57:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:1A:7F:FE:29:90:AF:B4:76:4D:2A:A6:49:53:83:9B:9C:64:F0
X509v3 Authority Key Identifier:
keyid:F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3a:3d:d8:17:22:b8:a9:05:b8:fb:2e:8c:7b:9b:b3:e9:71:
46:f6:b0:48:9d:30:a9:bd:f0:fe:fe:ef:47:5c:ec:b8:ce:9d:
de:0f:62:c0:a1:83:db:39:99:d9:cd:f7:f2:1d:97:97:7f:1b:
51:a5:78:d6:5e:d5:0b:e1:e1:68:b5:b1:f9:9f:b4:82:f3:d5:
14:89:5a:d8:35:a4:ed:31:9a:8a:68:79:e1:c1:ed:a2:0c:5b:
c5:56:96:c7:89:03:11:f4:d1:31:3a:e0:2d:38:a8:c2:14:23:
71:0c:c0:87:31:f7:e0:df:b5:1c:12:36:32:a7:06:23:0c:f6:
7b:29:76:40:9e:2a:27:08:e4:22:0d:9a:9d:69:24:d5:11:ab:
90:cd:b5:25:fd:15:7b:f3:61:45:22:e7:cc:31:b1:43:a7:3c:
90:a9:fb:9f:a9:44:9d:40:0e:f1:f3:0a:c9:2f:27:a1:2e:12:
bc:ed:24:71:4c:4e:71:72:c5:1e:a9:a2:6e:98:e6:58:31:83:
3c:78:7a:fc:83:af:9c:a4:3d:e5:16:93:65:59:16:5c:4b:15:
cd:96:1b:f5:b9:43:e8:4e:83:38:2a:c6:05:b7:08:be:8a:91:
85:1a:89:ab:e1:66:ea:03:27:e2:8f:60:7f:61:30:21:50:46:
a2:44:82:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:45:39 2025 by rpki-client