Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
File: v8qNbiIJkMc424yExmshnwNFVgw.mft (raw, json)
Hash identifier: 3AkTxLRjElqOuclyoIDaUFs2UNpuED2iwVaQe+lxWr8=
Subject key identifier: 03:C6:65:F3:31:A0:D9:22:8D:41:FF:5D:8E:97:FF:9A:4B:75:F9:E1
Authority key identifier: BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
Certificate issuer: /CN=bfca8d6e220990c738db8c84c66b219f0345560c
Certificate serial: 019655388B00A917E08FE6C7FA8AB984791A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
Manifest number: 0EF6
Signing time: Sun 20 Apr 2025 22:01:31 +0000
Manifest this update: Sun 20 Apr 2025 22:01:31 +0000
Manifest next update: Mon 21 Apr 2025 22:01:31 +0000
Files and hashes: 1: v8qNbiIJkMc424yExmshnwNFVgw.crl (hash: 218R06UTEjesJZtkv+M7QPz8S4mDnWoWw+9fxikHj4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:8b:00:a9:17:e0:8f:e6:c7:fa:8a:b9:84:79:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfca8d6e220990c738db8c84c66b219f0345560c
Validity
Not Before: Apr 20 22:01:31 2025 GMT
Not After : Apr 21 22:01:31 2025 GMT
Subject: CN=03c665f331a0d9228d41ff5d8e97ff9a4b75f9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:8f:1f:fb:c2:25:6f:56:cc:a4:17:20:e3:
4c:38:ea:f0:88:8d:6c:80:9a:a8:ad:72:40:5b:50:
ef:54:1f:b8:dd:4d:d0:e5:4b:f5:c8:ce:a3:24:ac:
df:c0:f1:d9:3e:76:1d:25:88:28:4b:ea:cd:d4:54:
06:14:4e:a2:f3:42:e6:24:dd:39:77:88:56:a3:0e:
f3:76:3b:e9:20:b6:ee:9a:7f:a3:60:98:3a:ba:8f:
0a:a0:c6:30:34:d6:56:84:69:c9:7a:01:00:86:a3:
b8:e6:ed:7d:57:f1:1a:70:1d:d2:ec:e4:7c:b8:9c:
c0:89:a1:4b:84:83:5f:7e:26:58:cc:0e:c6:cf:fe:
85:e2:9a:5a:13:1c:03:f5:b7:ea:ca:59:04:92:18:
9d:3a:7a:bc:66:57:bd:5b:1a:df:74:02:8c:e4:4e:
89:2a:47:ad:c9:a7:41:18:39:97:bb:fb:7e:98:2c:
b8:9b:67:e0:ea:80:11:45:46:11:7c:a4:37:bf:e9:
a0:cd:b0:ad:46:50:ca:44:98:5c:b6:75:1f:7d:ab:
7b:9b:5b:df:bf:14:c0:7c:9c:7a:81:f0:74:0b:72:
55:2a:8b:9e:05:13:ce:93:f4:e9:ad:ef:b6:fc:d9:
ac:19:d2:ef:54:53:2c:b9:09:74:d9:2c:2c:1d:81:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C6:65:F3:31:A0:D9:22:8D:41:FF:5D:8E:97:FF:9A:4B:75:F9:E1
X509v3 Authority Key Identifier:
keyid:BF:CA:8D:6E:22:09:90:C7:38:DB:8C:84:C6:6B:21:9F:03:45:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8qNbiIJkMc424yExmshnwNFVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e43194-c37b-4e7a-9150-20e27f879ae7/1/v8qNbiIJkMc424yExmshnwNFVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4d:5c:94:9c:59:3d:ac:a1:c8:fd:74:cd:75:a5:d9:f4:3d:
68:ad:4c:c0:fd:f9:e7:ee:a4:ab:f9:d5:c6:8d:80:93:5e:02:
e5:db:f0:2f:a9:41:ca:84:1d:06:f7:b4:05:88:a5:63:59:81:
91:93:be:cd:e5:f6:77:7b:99:f8:36:8a:9c:d3:81:3d:6e:57:
20:b9:f4:ed:9c:9f:dd:89:ab:61:28:32:e2:39:8e:84:d8:f1:
8d:f5:ea:54:9a:5a:8e:37:0d:5d:f8:cb:77:fa:fc:ca:88:b0:
2c:e5:82:20:d7:c8:83:be:2c:57:eb:59:3b:48:1e:06:10:df:
f9:a5:d8:12:22:61:6e:1a:a8:f1:80:d6:2f:f9:71:c7:02:47:
d8:68:5f:11:b9:c4:ce:d3:a8:3c:44:fa:c9:bc:0e:78:66:2b:
97:d8:9e:e0:3b:2b:ba:e3:7c:92:fb:f7:7a:60:96:18:9f:7b:
98:1f:a8:a1:e4:da:90:a5:23:28:e0:75:00:39:8f:f6:b7:55:
8a:8a:eb:ba:20:82:bd:b1:2f:ed:ae:35:91:62:f8:c0:dc:27:
68:91:c3:cb:f9:e2:c1:92:ce:1f:b1:30:f9:a8:4b:b4:c4:78:
96:9b:0b:10:a8:f1:71:70:7e:b6:88:e8:50:8c:2b:11:be:84:
66:26:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:02:51 2025 by rpki-client