Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier: dhzM7VxlcLau4GKUnIUVLlkR6+DGvD5SqWHJk8GAZ/k=
Subject key identifier: 89:E9:87:C8:5C:91:91:D6:4F:BC:74:1A:62:AD:ED:5B:87:CA:5D:D1
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial: 01958C6028A065F931F00D1A807ECB3928DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number: 0A6C
Signing time: Wed 12 Mar 2025 22:01:06 +0000
Manifest this update: Wed 12 Mar 2025 22:01:06 +0000
Manifest next update: Thu 13 Mar 2025 22:01:06 +0000
Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: 2Xdsq2V+U93EEWTXwA5LEpIU4AOlnbQquljae7dH6CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:28:a0:65:f9:31:f0:0d:1a:80:7e:cb:39:28:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
Validity
Not Before: Mar 12 22:01:06 2025 GMT
Not After : Mar 13 22:01:06 2025 GMT
Subject: CN=89e987c85c9191d64fbc741a62aded5b87ca5dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:0c:ae:4a:5f:97:0a:d2:05:7e:e6:2c:f3:
18:2b:db:cc:a9:c0:4c:52:46:17:06:93:c8:25:d4:
df:d3:8d:81:bb:3a:4d:69:bd:3c:31:f6:5f:cd:41:
0c:cb:57:5e:63:8a:ea:09:08:86:2f:39:e9:80:11:
6e:7a:22:03:3b:f8:ce:ee:af:2f:1d:9c:9b:86:a9:
f2:8b:e8:51:b6:c0:db:16:d0:f4:40:87:73:a3:47:
b9:24:42:28:7d:79:62:e8:04:87:28:d5:42:05:e8:
fc:97:54:0f:d3:5b:f7:5d:67:1b:ea:9a:6b:8d:3d:
20:be:ff:2a:21:96:58:9e:cf:07:c2:bd:c0:57:e2:
c6:f1:e3:de:80:78:56:84:6d:ff:87:e9:a6:e5:a5:
25:fb:24:5d:1a:b0:f0:95:44:97:11:0b:6b:10:4f:
df:7a:4d:cc:c6:d8:88:cc:86:ca:a9:e1:76:f9:99:
c0:45:dd:d0:3f:d5:be:b1:74:79:de:51:89:e2:66:
ab:0b:e7:59:b1:65:0f:94:0d:a2:84:a6:e1:33:7c:
2f:eb:22:84:67:15:97:dc:a4:14:34:c5:f8:17:ff:
ba:fa:36:c1:e7:26:29:33:2d:c5:5d:1d:7f:c6:0b:
44:e7:80:e3:36:6b:a9:4e:1d:c6:14:cd:64:95:1f:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E9:87:C8:5C:91:91:D6:4F:BC:74:1A:62:AD:ED:5B:87:CA:5D:D1
X509v3 Authority Key Identifier:
keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c4:a7:bf:f4:d8:81:f8:5c:34:f0:26:ca:7c:80:89:8d:dc:
a2:bf:b2:92:55:0f:20:01:5f:fe:81:99:2f:4e:02:ae:a6:d4:
b6:3f:99:90:7a:5c:15:e5:7c:1a:1f:03:4f:e3:61:c7:21:f9:
ef:c1:e1:f9:66:7a:e3:6d:44:73:94:19:f4:85:0a:b8:b5:47:
20:d2:ee:a3:ee:2f:4a:ca:b3:10:87:0a:96:75:0a:d4:d1:77:
b0:dd:90:ef:a4:25:b4:07:f9:00:d4:f6:b2:31:af:3b:38:d4:
2c:54:7d:84:e3:b9:b0:8b:8e:f4:80:9f:ff:37:9c:2e:cd:04:
2f:d8:61:1a:c3:fb:71:72:8d:96:09:46:de:94:ba:92:e1:c2:
2d:d3:b2:23:fa:60:b2:8a:37:f2:b8:04:af:c5:8c:36:0b:e9:
30:bd:6e:0b:28:1a:f1:30:03:c4:2a:5c:86:9e:cd:b8:b4:e9:
38:e1:22:48:43:6b:de:14:28:5a:a3:bc:1c:7b:b7:41:96:9b:
e1:71:a7:9e:6e:60:19:bf:33:9f:61:41:24:fb:41:53:27:e3:
4b:c4:e9:d5:72:69:ca:0f:af:19:3a:6d:a4:9e:2b:1b:8c:5d:
d3:75:8b:eb:ac:85:5d:13:15:83:74:dc:e9:6d:f2:e9:94:6e:
f8:e7:a1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:34 2025 by rpki-client