Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft (raw, json)
Hash identifier: ab4ISCW7m5W3STpuw1zTUzVxz48n93sZfZiEb6Wj7SI=
Subject key identifier: D8:09:EF:BE:C1:98:F2:E3:96:B6:C1:0B:52:D1:3F:67:FB:D6:3F:74
Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
Certificate issuer: /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Certificate serial: 01963AD36A94B9EB77F71DEDB7A0AA1AB3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
Manifest number: 05CC
Signing time: Tue 15 Apr 2025 19:00:55 +0000
Manifest this update: Tue 15 Apr 2025 19:00:55 +0000
Manifest next update: Wed 16 Apr 2025 19:00:55 +0000
Files and hashes: 1: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl (hash: YeOjApjLlxVA3eXHW91UXFsJ+WvoCc9V6OkyKIpAfWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:d3:6a:94:b9:eb:77:f7:1d:ed:b7:a0:aa:1a:b3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Validity
Not Before: Apr 15 19:00:55 2025 GMT
Not After : Apr 16 19:00:55 2025 GMT
Subject: CN=d809efbec198f2e396b6c10b52d13f67fbd63f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7f:60:36:9b:81:f5:65:69:5a:92:80:96:00:
f7:9d:4e:76:b9:8e:e9:07:bb:c7:46:44:3c:c8:d6:
b9:fe:d8:99:d0:18:66:5e:ef:20:f7:90:9b:44:88:
9b:ba:e7:5d:66:bf:19:14:01:64:30:05:6c:2d:c8:
91:d3:64:28:0d:2e:35:3c:64:42:7b:a6:65:8c:7c:
9a:bf:9d:5a:1c:4b:25:2c:69:43:5d:87:6b:aa:79:
19:34:54:b7:dc:59:73:ec:61:fd:39:86:d5:f7:39:
d8:af:0a:c8:16:2b:7a:b8:6f:fb:2c:a7:4c:8f:b0:
53:b2:c4:c3:e2:c8:f7:3b:38:f8:72:b8:ff:a2:74:
e0:8e:49:c4:03:7c:d9:21:23:57:5d:da:e5:f3:91:
dc:6d:91:5f:b2:13:60:3e:0c:88:b2:04:73:ba:33:
2d:1a:c2:6d:c4:94:84:44:9f:66:08:5a:f2:62:92:
59:f2:f1:a8:f8:90:c0:62:0a:6b:7e:bd:3c:ba:38:
d3:87:fa:fa:b4:d3:a6:d6:5a:6f:0a:09:33:cf:50:
ed:3b:e6:4f:e9:97:36:96:3f:d4:03:06:a2:fb:81:
da:15:e9:86:44:d8:c9:d7:76:3d:0a:fb:a5:69:c7:
9b:ea:40:92:a9:6a:11:dd:17:ea:a0:8c:f7:55:97:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:09:EF:BE:C1:98:F2:E3:96:B6:C1:0B:52:D1:3F:67:FB:D6:3F:74
X509v3 Authority Key Identifier:
keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2e:a2:c4:5b:04:a6:c3:36:00:b5:60:a0:05:02:45:f8:69:
95:fe:d5:ea:04:da:0e:3c:4f:d0:17:ab:c9:10:1a:72:d7:04:
63:25:d9:0b:49:0c:01:5a:ad:f7:d1:97:e4:99:e5:11:f4:de:
34:ee:5d:34:dc:40:bb:e7:f4:d7:0d:99:ff:3b:97:c1:13:b1:
dc:06:0e:0f:c4:cb:5c:21:53:ac:0f:e5:32:2f:5b:31:f0:b1:
94:c7:71:30:90:57:ba:ae:4e:c9:a8:42:82:b1:e5:8d:11:d1:
44:45:f3:c9:52:85:bf:e1:5b:50:b7:7a:ed:dc:22:b7:4e:26:
34:23:92:5e:38:df:51:8b:b0:65:b3:d5:aa:89:45:20:9f:12:
e0:fd:fa:9c:95:ed:35:1a:31:01:16:49:4c:79:a0:21:c6:20:
5d:99:cd:b2:1a:7c:78:2b:7a:74:9a:85:5f:75:e4:a5:0f:61:
a7:eb:9d:ba:08:68:78:14:a0:47:8b:c6:5d:a2:55:77:0b:4f:
e7:3e:39:ae:d0:c9:d0:e1:38:14:42:1a:5a:9f:41:ab:ac:62:
7e:c6:0f:0d:3d:69:db:e9:18:da:3b:d5:1f:c1:be:8b:df:90:
4d:5b:4c:93:f4:8d:a5:11:34:8c:85:24:be:12:23:33:95:5c:
7d:c0:bd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:20:13 2025 by rpki-client