Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
File: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft (raw, json)
Hash identifier: VzhEy0S18JjThSaJDyIdj4dKExKgjwyh6kZadlQi3Tk=
Subject key identifier: 02:6F:2B:4A:99:56:83:65:63:A1:91:4E:3B:45:B1:39:90:8C:60:64
Authority key identifier: 9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
Certificate issuer: /CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Certificate serial: 019655A62AB8B16F32064DBD1A9D53F1058B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
Manifest number: 126B
Signing time: Mon 21 Apr 2025 00:01:15 +0000
Manifest this update: Mon 21 Apr 2025 00:01:15 +0000
Manifest next update: Tue 22 Apr 2025 00:01:15 +0000
Files and hashes: 1: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl (hash: V7COwJKa+9eQKma+g0HzXwnOLocQZtdFZcH07cF9mGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:2a:b8:b1:6f:32:06:4d:bd:1a:9d:53:f1:05:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Validity
Not Before: Apr 21 00:01:15 2025 GMT
Not After : Apr 22 00:01:15 2025 GMT
Subject: CN=026f2b4a9956836563a1914e3b45b139908c6064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:52:f6:8a:36:1c:ae:f8:cf:39:d2:44:38:
66:e7:5d:70:39:90:20:f2:2b:86:17:fd:cc:7d:bf:
bb:84:fd:17:ae:34:3b:70:49:df:fd:e6:ab:59:80:
5e:c3:29:f3:d5:c6:b4:04:09:53:09:2b:52:d5:45:
e6:d0:8d:dd:10:34:58:1c:aa:16:3c:b8:00:91:84:
bb:dd:44:fc:6f:5b:be:42:d2:6d:fb:16:85:00:2b:
f2:ee:9a:a0:6c:d3:6d:e0:38:c4:84:0c:f7:aa:6a:
48:37:58:f7:8f:c4:4d:e8:c9:e8:59:35:bf:da:96:
9b:d0:27:ec:a5:37:4a:fb:58:11:4c:ac:75:a3:25:
5d:f8:c4:aa:03:75:c5:63:62:ea:cf:f2:42:a4:93:
7d:ad:c5:3a:14:0d:43:eb:20:19:c7:ba:cc:44:75:
a2:54:b1:35:4e:2e:02:8c:12:f8:25:62:2d:9c:28:
f0:4a:ea:f3:54:22:29:61:15:2a:f3:77:4e:75:44:
7b:07:ad:62:4f:f0:10:ef:50:f9:62:6a:4f:0e:70:
71:8e:2d:b4:75:38:28:f4:de:9f:ee:93:4f:0a:3e:
83:89:72:09:b8:48:96:df:09:be:5d:a6:2b:a9:ff:
d3:66:57:28:15:e1:3b:67:c9:a1:90:9e:17:97:c8:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6F:2B:4A:99:56:83:65:63:A1:91:4E:3B:45:B1:39:90:8C:60:64
X509v3 Authority Key Identifier:
keyid:9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c7:10:de:dc:22:0f:94:8a:20:ed:35:3e:67:19:e3:4c:ee:
d6:c2:fe:c0:1f:ff:30:d5:b5:7d:b9:3b:1a:9f:41:70:ed:ae:
66:ac:86:6a:e0:e6:66:6e:45:6a:22:b8:15:05:6e:c0:9c:26:
be:24:09:18:df:9a:7d:48:7f:4b:5d:62:63:ea:49:ff:8c:27:
3d:4c:bd:f2:8a:79:02:b1:91:dd:7b:bb:dd:14:59:18:b7:88:
53:12:c2:96:a3:1f:d6:e1:61:df:aa:c0:3f:a5:b1:d1:cb:be:
d0:e3:02:c3:6f:4d:0b:9a:29:3c:7b:1f:f6:78:05:3b:14:84:
b2:a0:8f:0e:f7:34:dc:97:26:0b:be:c4:48:f8:41:1e:e3:35:
77:e7:fd:23:3b:49:25:b5:f2:c5:b8:cb:49:56:79:3a:76:79:
b3:60:57:62:a6:38:12:a4:ba:98:a2:a1:02:e8:ae:d8:0c:dd:
6f:b7:19:0d:e5:1b:5a:3f:7c:4a:b3:30:1d:3e:a5:3b:55:20:
8e:5f:28:07:ed:85:f3:18:56:39:84:de:64:ad:3a:40:dd:f8:
3e:a9:38:9b:12:89:58:51:fa:54:9f:7a:02:f8:c0:31:e6:28:
02:b8:6e:f3:b3:89:9c:34:de:bc:21:73:4c:b8:d5:a3:27:ac:
7a:ce:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:37:13 2025 by rpki-client