Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: 3wcwqtqwJBxsgLkyW96maxj21k+cZRPvNBnW6hjT91s=
Subject key identifier: 7F:3B:1D:7E:1B:5C:12:C3:53:8D:D7:DF:41:B9:81:4B:99:F6:FE:77
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 0196515BD9D4F4C2BFC1BBFC59260B6FCEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 0FFA
Signing time: Sun 20 Apr 2025 04:01:35 +0000
Manifest this update: Sun 20 Apr 2025 04:01:35 +0000
Manifest next update: Mon 21 Apr 2025 04:01:35 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: ri2CClg2TFh3QaCUn66XYXu2+MyQEWQ+UYhlgsJmEw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:d9:d4:f4:c2:bf:c1:bb:fc:59:26:0b:6f:ce:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: Apr 20 04:01:35 2025 GMT
Not After : Apr 21 04:01:35 2025 GMT
Subject: CN=7f3b1d7e1b5c12c3538dd7df41b9814b99f6fe77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:7a:9a:fb:a4:cc:22:6b:f6:93:9f:67:ff:
3d:b4:18:65:24:51:ad:8a:ba:3f:5f:22:d2:e4:7a:
5a:ce:95:61:24:76:53:d5:bc:6b:93:42:38:aa:1a:
94:ab:c7:f9:99:49:bd:17:53:38:25:c4:33:ff:bf:
12:95:b6:84:fd:cf:ad:cf:96:bb:bc:7e:3c:83:e0:
bd:8e:31:cc:49:23:fa:91:8e:ea:43:0f:2c:36:45:
14:f2:ed:8b:b7:3f:a6:95:6d:ac:c3:9f:7b:12:66:
54:11:46:25:17:e7:12:23:0d:86:28:a9:c2:75:f6:
f3:0f:19:8b:f1:8a:87:e8:6b:fe:e4:ec:a2:6f:b8:
45:b4:70:76:82:3f:7e:e9:c8:d4:dc:5d:3e:34:e3:
6e:16:f3:1e:20:3c:c1:88:0e:dd:56:10:c4:6e:cd:
c8:07:b0:16:af:93:ad:fb:5d:b8:36:5a:cc:9f:1a:
e9:01:49:7c:ce:78:35:21:0f:0a:2e:f5:81:f6:75:
ab:69:d3:df:a2:82:60:be:dd:4c:3b:73:a8:1d:93:
9e:c6:33:00:f0:88:33:c0:a7:75:a2:ec:13:43:00:
1b:0e:87:da:3d:eb:31:88:36:1e:0e:50:b2:9d:f4:
7e:f5:aa:75:1e:10:6a:f2:ef:98:62:26:49:4b:0f:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3B:1D:7E:1B:5C:12:C3:53:8D:D7:DF:41:B9:81:4B:99:F6:FE:77
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0c:87:6f:a8:c8:f0:42:70:05:5c:50:86:7e:7d:8e:1c:ac:
87:95:e8:5d:13:95:19:9a:95:b8:95:ef:b0:11:4f:9e:9c:d2:
d8:3a:f2:19:10:8f:0e:e8:c7:65:8c:5f:3c:44:b7:58:1b:34:
75:64:7e:6b:ba:17:a4:1b:bc:3e:f1:bd:e5:2d:3b:1c:da:40:
4a:5b:8e:16:38:02:e7:8b:4b:c3:72:1e:64:c4:21:63:a0:44:
3f:50:37:28:46:f0:76:2d:80:70:41:57:ea:11:2d:bb:11:87:
ab:00:30:66:78:7a:fe:4f:01:83:77:0f:4c:8c:b4:c9:5d:b3:
75:b3:a4:b4:da:10:14:77:c3:2e:4a:72:af:f9:5b:cc:7c:0f:
69:78:16:6e:0a:03:fe:9d:d8:ec:f4:71:9c:1f:01:c9:0b:65:
31:0b:e7:75:fc:8c:a8:0d:a9:3d:37:78:ad:ce:a6:dd:25:47:
aa:53:64:3b:8b:db:dd:f1:a9:4c:e6:50:8e:f8:2d:1c:66:a6:
9f:29:12:a0:eb:8e:26:e1:09:95:ea:cf:ae:55:ea:73:9f:9e:
d5:ad:63:25:5a:99:76:d4:b8:d7:d4:78:76:c8:cc:76:13:83:
70:ee:aa:9b:5f:76:1f:c5:08:72:8b:0d:45:bb:ea:dc:7f:1f:
e3:0e:1c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:42 2025 by rpki-client