Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier: MX9XnQJDA/A3K5J33UiVHeVgniasqBO699EF8+EnzD4=
Subject key identifier: A3:18:63:10:50:52:F6:6D:53:07:80:A0:D3:54:0F:32:84:45:EA:17
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial: 019659149E0C81A3C938E65016517CEC87EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number: 030F
Signing time: Mon 21 Apr 2025 16:00:45 +0000
Manifest this update: Mon 21 Apr 2025 16:00:45 +0000
Manifest next update: Tue 22 Apr 2025 16:00:45 +0000
Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: bb5sX2EupATwiobtKDcZJ41+ZHiQPVoWMT57suZM504=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:9e:0c:81:a3:c9:38:e6:50:16:51:7c:ec:87:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Validity
Not Before: Apr 21 16:00:45 2025 GMT
Not After : Apr 22 16:00:45 2025 GMT
Subject: CN=a31863105052f66d530780a0d3540f328445ea17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:38:3b:b3:83:35:5c:2d:1f:12:b9:37:78:
9e:21:2b:5f:66:84:17:4f:89:b6:fa:d1:ad:96:6e:
e3:3d:cc:8c:24:98:7e:c5:ff:10:b5:3f:f7:d1:58:
3d:32:69:e2:9c:83:11:09:28:c4:1d:b0:be:15:2d:
eb:dd:7a:a9:a3:51:3d:11:7f:49:8c:d6:4b:14:08:
8c:4b:96:31:f7:59:34:5f:53:6a:e3:cd:1a:e4:c2:
51:56:2f:e3:1b:4d:d6:69:d1:59:d8:cc:32:61:a1:
df:0d:4e:ee:46:4f:bb:71:77:01:d8:79:2e:2b:8f:
36:e2:13:1e:ca:15:8d:ab:05:28:f8:63:ca:a6:ec:
b4:f3:f2:28:70:c6:d9:3b:6e:de:ee:29:79:a2:ea:
8a:55:58:53:be:55:6d:f3:e1:4c:b7:d9:ae:e8:0c:
ae:44:59:c9:38:09:02:5b:17:af:68:e2:01:2c:2e:
72:10:0a:63:06:f7:cc:c0:28:7a:6d:a8:d9:3b:83:
d3:30:f2:96:b9:ab:37:99:e0:b4:96:5c:9c:61:c1:
78:06:1e:19:d6:37:01:41:52:0d:52:9a:d6:cb:8c:
2b:05:f9:d8:7b:f6:ef:c6:57:3e:36:b0:98:58:09:
50:f4:eb:05:02:8a:13:01:39:23:26:07:05:5b:91:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:18:63:10:50:52:F6:6D:53:07:80:A0:D3:54:0F:32:84:45:EA:17
X509v3 Authority Key Identifier:
keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:71:8c:17:4e:3b:5c:b2:0d:54:b9:0e:97:d3:35:4f:9b:54:
6d:2c:01:05:32:57:59:ad:c8:41:90:24:fd:3b:11:41:89:00:
f8:89:26:3d:d4:59:2f:b7:3e:b5:93:85:7a:c7:70:25:35:d2:
b7:aa:33:65:5c:f2:f9:a3:b2:6b:74:ba:49:60:9a:b6:7d:9e:
5c:68:7b:8a:41:85:14:2a:51:28:29:c3:09:c9:d8:cb:12:12:
66:ac:a6:c2:39:49:84:9d:4a:fc:41:99:31:b1:b0:65:6c:12:
43:2d:31:84:4a:7e:44:cb:24:5d:3a:d6:29:73:63:59:3c:0d:
64:0b:d0:8f:5c:6d:6f:bd:c4:8c:bf:ae:d7:82:a4:ef:7f:ad:
d6:49:17:ec:45:2a:7f:04:21:58:81:35:22:fc:df:6a:7b:40:
4c:d4:44:ff:2c:a6:ea:70:1c:52:24:6d:a0:2c:da:7b:c5:54:
60:92:52:e1:46:04:3e:72:4a:29:48:ea:10:80:ab:41:f8:fa:
56:d2:33:c8:41:30:fe:11:b5:9b:b3:d8:4c:fd:33:91:94:fa:
cd:a0:5b:58:37:e9:aa:87:17:b8:81:ed:68:cd:39:16:31:21:
3e:4d:88:c1:95:8f:6b:f0:63:21:ba:76:4d:94:10:60:fe:c5:
a1:a1:64:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:01:43 2025 by rpki-client