Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File: A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier: TdVm6HmYtqSOHR52Ejk65cPmWU84QGt6UdjamH60cZg=
Subject key identifier: FB:AA:14:7E:76:30:09:9A:F9:23:94:41:C9:71:04:33:72:40:FA:4C
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer: /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial: 01964F6D80E82F15BE12FB62C254F1923710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 19:01:38 +0000
Manifest this update: Sat 19 Apr 2025 19:01:38 +0000
Manifest next update: Sun 20 Apr 2025 19:01:38 +0000
Files and hashes: 1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: SNThTSxapzLTxvGWlG1B/3sIBuKvS7KxREt7/MJoPAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:80:e8:2f:15:be:12:fb:62:c2:54:f1:92:37:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Validity
Not Before: Apr 19 19:01:38 2025 GMT
Not After : Apr 20 19:01:38 2025 GMT
Subject: CN=fbaa147e7630099af9239441c97104337240fa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c6:b7:a2:70:ec:e3:e5:ae:39:5d:b8:bb:6f:
f2:13:2e:40:9a:38:10:4d:5b:16:8e:fc:e2:3c:c6:
9b:11:ed:c3:f1:04:06:fe:61:43:da:36:5a:b0:c0:
c3:c6:e1:00:e9:fa:4e:15:0c:e7:c1:a7:2b:e6:da:
f7:e9:c8:79:8e:33:c1:bc:d2:62:78:4d:85:85:3a:
53:f8:72:52:11:cd:1d:08:99:22:b1:37:09:f8:77:
29:46:b0:60:cd:6a:3c:09:25:45:96:f8:60:dc:6d:
5b:44:ca:53:58:4c:36:98:e3:79:c4:ff:8f:10:c8:
cc:f1:0d:62:01:e2:e6:fe:38:ec:ac:b2:6d:62:08:
13:bb:33:2f:28:58:a1:66:e9:78:50:be:20:be:29:
59:f9:32:8d:74:7b:dc:6c:11:69:0b:4a:0f:4f:81:
16:ab:c5:7d:1a:2f:5c:71:af:e3:a1:4e:51:fc:8b:
04:3a:9a:1e:93:36:08:0c:fa:86:60:bf:0c:69:27:
88:c9:57:80:a2:83:57:b8:41:b5:8a:ca:e7:c7:4d:
e7:d7:d8:64:b7:74:7a:92:bd:bf:95:51:10:dc:f5:
b1:1a:47:af:79:ff:38:0e:41:64:6d:f9:bb:9b:7d:
cf:75:f2:c3:47:b5:c9:4c:55:b9:6a:f3:a6:1b:37:
a9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AA:14:7E:76:30:09:9A:F9:23:94:41:C9:71:04:33:72:40:FA:4C
X509v3 Authority Key Identifier:
keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8c:c7:54:32:0f:c4:5e:07:24:18:20:e4:fb:6c:bd:f3:c4:
66:57:88:11:f4:ef:59:a5:be:ea:ef:25:02:bb:43:b9:ea:c9:
ed:a1:74:1b:26:58:58:6b:28:b7:0b:bc:b3:4e:79:c9:58:3b:
b5:07:c1:45:db:82:42:05:55:a6:9c:1a:8e:ec:2c:37:af:14:
f6:a5:60:a1:1b:d7:2e:b4:e5:b0:fd:07:59:e2:08:7c:fb:7f:
a8:54:d5:c3:63:46:ac:d3:20:97:55:1c:75:cd:80:c4:cc:07:
e1:50:d7:66:d1:31:7c:cc:d6:78:f6:67:dc:f6:5f:e7:75:7a:
01:45:ef:f3:7d:99:5b:6a:89:65:96:19:ab:e8:2d:66:c7:08:
cf:9c:cd:5f:57:9a:cb:f7:b8:9a:31:98:26:bd:30:b1:50:6b:
a2:a7:18:e6:5c:20:05:5a:c5:19:0c:d4:4a:f4:cf:8f:05:fb:
f8:d6:a9:56:f7:4d:f0:28:d4:6e:ed:c9:3c:27:66:42:c0:db:
9f:1d:77:13:0f:f9:d6:19:d4:9d:08:9b:c7:c9:60:dd:8d:57:
2b:68:19:c1:d2:66:35:4f:98:86:4d:74:d4:85:1e:d0:cb:b4:
48:8d:7c:17:81:e4:b5:4c:5b:4b:d9:ff:c7:e4:d8:2e:2e:d2:
21:8b:43:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:24 2025 by rpki-client