Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
File: udCVzONbOja-8QjvdipiGvRmJiE.mft (raw, json)
Hash identifier: VatQ0PDZlaAotxMv+p5Mraqj6NcTOyCWo5jcZmW7T+A=
Subject key identifier: 94:E1:66:80:1C:7C:4E:12:35:E6:EF:F9:35:A2:70:AE:39:5F:1D:82
Authority key identifier: B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21
Certificate issuer: /CN=b9d095cce35b3a36bef108ef762a621af4662621
Certificate serial: 019650ECE13E8D2EE75BB5C75F525C3DC10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
Manifest number: 0250
Signing time: Sun 20 Apr 2025 02:00:23 +0000
Manifest this update: Sun 20 Apr 2025 02:00:23 +0000
Manifest next update: Mon 21 Apr 2025 02:00:23 +0000
Files and hashes: 1: udCVzONbOja-8QjvdipiGvRmJiE.crl (hash: q7k1nKdnsvD0NL5WZtYb9HJlYbNjpdZM+rSJjFFzJVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ec:e1:3e:8d:2e:e7:5b:b5:c7:5f:52:5c:3d:c1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d095cce35b3a36bef108ef762a621af4662621
Validity
Not Before: Apr 20 02:00:23 2025 GMT
Not After : Apr 21 02:00:23 2025 GMT
Subject: CN=94e166801c7c4e1235e6eff935a270ae395f1d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cb:71:61:89:61:15:36:97:4d:d5:6f:18:3a:
0a:6d:76:17:63:e0:d4:ac:6d:62:7b:f6:0a:24:58:
d6:ba:0b:c1:5d:72:a6:04:78:57:92:0e:30:3d:be:
53:2f:54:24:b4:8e:26:e6:4c:a2:0e:1f:0c:94:1d:
45:82:76:2e:ea:6d:35:be:1c:a4:84:13:83:4c:fc:
f2:45:34:ad:82:5b:6b:65:e1:8d:73:c6:e4:a8:49:
8a:5b:fb:3d:69:74:d3:0d:98:b9:4b:48:0c:0c:bd:
c5:74:48:26:31:5d:30:54:44:79:90:f6:0c:19:a7:
7f:be:48:80:c3:75:24:d7:63:57:d5:44:7a:ff:28:
22:7d:2c:ec:cc:de:ef:5a:dc:d8:6a:2d:74:31:b7:
98:4c:4e:b1:eb:d0:8f:15:bd:de:74:2b:92:d8:a1:
dd:d0:a1:31:4f:c0:44:f1:86:3e:2b:6b:38:00:33:
29:a6:53:82:c2:30:29:51:76:9a:bb:9c:5b:25:40:
29:b2:ae:6a:36:6a:34:16:93:e7:1f:1d:33:c4:bf:
9c:97:76:82:4e:45:4a:d9:44:07:01:9c:de:8b:7d:
01:4e:0b:f8:f8:0d:da:53:10:aa:00:9e:07:77:fd:
f6:fb:f6:23:7b:05:0d:9b:b3:d8:93:06:66:dd:39:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E1:66:80:1C:7C:4E:12:35:E6:EF:F9:35:A2:70:AE:39:5F:1D:82
X509v3 Authority Key Identifier:
keyid:B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:bc:9f:2e:21:b4:58:9c:09:fb:98:54:79:aa:9c:45:3d:26:
2a:b7:f4:d5:0d:87:9b:50:03:f0:7e:30:05:a3:35:4e:c6:ff:
b9:ec:94:bd:a5:c6:94:00:b8:a6:48:6d:3b:0e:d4:e8:b8:f9:
af:68:c9:15:64:02:dc:32:2e:3c:6d:e8:c9:e8:63:b9:b9:4d:
01:36:42:10:d4:aa:fa:c1:47:25:30:65:eb:63:2a:d2:8d:6f:
84:3e:04:06:a1:1c:63:91:7d:7d:4c:aa:06:36:c1:2d:5b:75:
38:29:66:3d:45:14:71:b2:c9:45:3a:8e:d5:7d:43:05:84:83:
0e:15:3c:24:04:1c:dd:b6:46:c3:d6:41:88:b6:16:bf:c4:9e:
a7:d2:73:ea:39:fe:2b:e9:59:1f:67:03:7e:e8:58:97:1e:69:
43:dc:27:12:37:14:0a:67:62:ef:3f:7b:7f:f1:cd:b5:a1:0c:
ce:6b:7a:79:90:11:ef:60:13:84:6f:e5:6d:29:1b:9a:7e:43:
34:de:c2:68:51:c0:0a:15:39:cd:ce:6f:3f:74:01:21:83:43:
32:9d:d2:ce:44:45:76:5d:8f:f9:9e:09:59:f3:44:43:03:45:
a4:a8:c9:c5:45:45:2f:9a:e7:89:ea:ca:68:ef:db:e9:2f:77:
5f:79:f4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:02 2025 by rpki-client