Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.mft
File: 8lszZFa0ffwPOdyRpriCpKq76rM.mft (raw, json)
Hash identifier: m4qKYV17C6+NHb9zj+fxEySoqcKH3qOnQ2Zh2iS0zBg=
Subject key identifier: 9F:8F:84:AA:B3:01:18:94:25:9B:1F:5A:5B:E8:DD:67:99:48:16:D4
Authority key identifier: F2:5B:33:64:56:B4:7D:FC:0F:39:DC:91:A6:B8:82:A4:AA:BB:EA:B3
Certificate issuer: /CN=f25b336456b47dfc0f39dc91a6b882a4aabbeab3
Certificate serial: 01965237161C886216834089A5A23DFC73F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.mft
Manifest number: 0FBC
Signing time: Sun 20 Apr 2025 08:01:03 +0000
Manifest this update: Sun 20 Apr 2025 08:01:03 +0000
Manifest next update: Mon 21 Apr 2025 08:01:03 +0000
Files and hashes: 1: 8lszZFa0ffwPOdyRpriCpKq76rM.crl (hash: Y1+1VfjlyrDTjCOH87tI6JrZm9oZszpEXVyigKbdUWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:16:1c:88:62:16:83:40:89:a5:a2:3d:fc:73:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25b336456b47dfc0f39dc91a6b882a4aabbeab3
Validity
Not Before: Apr 20 08:01:03 2025 GMT
Not After : Apr 21 08:01:03 2025 GMT
Subject: CN=9f8f84aab3011894259b1f5a5be8dd67994816d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:ca:71:06:56:81:c0:40:2c:0a:b6:b9:b0:
a8:8a:13:ca:72:5e:5a:48:50:89:57:ed:50:91:64:
ce:07:5c:da:3c:36:44:02:34:18:b1:65:65:4a:85:
62:28:a5:db:fc:6e:94:ed:27:d6:53:dc:82:9e:f5:
e6:a7:e9:02:74:4f:34:74:21:b0:7e:ff:bc:73:39:
d1:17:c1:e2:27:83:bf:67:a4:ab:c6:dd:7c:57:9d:
ac:69:52:54:5a:52:25:a8:d3:61:a0:90:d6:f5:ad:
22:b8:4f:e6:b0:30:4b:ae:53:94:8c:57:ac:71:01:
c9:c1:5a:5e:6b:40:13:db:32:16:3d:74:08:94:3a:
79:6a:e7:1e:90:95:11:92:9d:c4:a0:dc:ee:11:6f:
e5:3b:50:a7:ec:95:7c:c9:32:16:6e:31:1a:69:02:
fc:dc:2b:c7:26:56:b6:7f:f9:2d:82:39:7b:d2:b4:
bc:2c:9c:89:01:77:12:0d:e5:8b:65:40:61:8b:14:
64:61:dc:a1:fd:ca:0c:26:a8:78:d9:39:33:05:91:
83:df:ea:85:c2:e0:11:8e:95:15:7a:27:cc:50:35:
82:de:09:91:b2:0b:3e:c1:42:3c:d8:78:3e:65:df:
38:7e:90:b1:9e:40:d7:3c:87:53:b5:ff:ba:a2:6b:
c6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8F:84:AA:B3:01:18:94:25:9B:1F:5A:5B:E8:DD:67:99:48:16:D4
X509v3 Authority Key Identifier:
keyid:F2:5B:33:64:56:B4:7D:FC:0F:39:DC:91:A6:B8:82:A4:AA:BB:EA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cf:19:17:4f:9d:84:cb:02:7c:ba:4f:5a:23:19:8b:f5:fa:
6c:d6:81:c9:14:d2:66:19:d1:49:14:27:c0:4f:41:de:4b:6f:
7f:9f:90:31:1b:a1:90:78:63:fd:a0:bc:11:15:0f:82:b6:ea:
74:5a:fa:2a:eb:eb:27:2e:68:02:42:9c:2a:23:ca:13:78:86:
68:0b:8b:f5:a5:72:66:78:0a:a7:be:b5:d9:ba:89:bb:f0:76:
4d:4c:00:6e:c9:b0:d2:9f:d0:cd:72:bc:3b:25:bb:e1:de:ad:
14:df:d9:90:75:75:9b:99:1a:58:92:36:df:a1:cd:8e:75:d4:
2e:7c:71:38:d2:14:b0:34:3f:16:49:ac:83:d5:43:26:7e:ce:
34:78:5c:fb:60:af:20:48:df:85:45:4f:8f:92:b8:af:19:57:
b7:1d:c7:30:e2:a1:2d:c5:70:04:87:ed:2d:47:26:e9:47:95:
30:17:7c:c1:de:8c:77:86:35:a8:f3:67:3d:9c:7e:64:c2:10:
0c:fe:da:f7:00:de:9d:e7:ec:d0:e9:55:77:15:6f:e5:39:78:
a5:86:fe:5b:3f:91:44:68:d0:24:4c:32:5b:8b:67:82:78:c2:
c0:0b:81:9a:b4:22:b1:48:bf:4d:c0:05:16:75:2b:04:a9:a4:
b0:5b:7c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:40 2025 by rpki-client