Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier: DzKO1cRAR/jkzkL6rZYgx6Q1RFtvdhvUQW1hKmYw3Ac=
Subject key identifier: 06:2D:2B:DE:61:4C:02:9F:B2:6B:BE:29:A9:00:A4:0B:36:3A:14:40
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer: /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial: 01958B16E523A0A3444215CD3313C2234EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number: 05A2
Signing time: Wed 12 Mar 2025 16:01:28 +0000
Manifest this update: Wed 12 Mar 2025 16:01:28 +0000
Manifest next update: Thu 13 Mar 2025 16:01:28 +0000
Files and hashes: 1: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: ZN3Ns3OiE3x+uO5jX6hJOhX9B5To1sdABC86got/x54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:e5:23:a0:a3:44:42:15:cd:33:13:c2:23:4e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Validity
Not Before: Mar 12 16:01:28 2025 GMT
Not After : Mar 13 16:01:28 2025 GMT
Subject: CN=062d2bde614c029fb26bbe29a900a40b363a1440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:86:c0:84:7f:05:53:fc:09:c8:05:f1:2a:
a3:bb:3d:e0:d2:4f:0f:6b:ef:0a:c6:e1:fe:d3:8f:
1c:80:f6:6f:ce:43:2d:97:26:6d:a7:cf:96:96:7b:
9a:05:a0:46:41:58:19:44:15:52:4b:c2:1b:30:ec:
e7:03:9e:da:0e:54:92:83:4d:2c:c0:c4:f0:47:de:
43:5d:cd:e4:bb:94:97:56:88:14:4c:49:79:4d:54:
15:47:7b:85:39:7a:ef:13:b4:7a:4b:a7:9c:f9:66:
68:c9:2d:f1:44:38:1c:57:73:2f:79:ec:c0:fb:c2:
03:27:bb:42:b0:73:f5:99:d7:e3:6a:d7:2b:64:d0:
80:ca:88:d9:d3:a1:10:26:c9:9f:9d:a9:da:50:bf:
48:2d:7d:ac:cb:ce:42:c5:cc:74:62:59:d9:60:c8:
4f:40:fd:57:db:4d:e1:9e:a4:8c:85:4b:8b:1d:d8:
a3:e7:4b:02:10:42:c3:c8:1f:1c:0c:7e:f8:b3:dc:
97:80:2a:b4:74:13:22:60:ee:1a:a8:24:8e:bd:e2:
e8:94:1f:ff:ee:f8:a2:4e:45:d8:f7:80:68:bf:55:
e9:e8:ee:73:18:67:4f:d4:eb:33:d9:c0:23:ca:22:
37:d6:2a:70:69:06:29:10:07:e2:05:a6:3e:a0:35:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2D:2B:DE:61:4C:02:9F:B2:6B:BE:29:A9:00:A4:0B:36:3A:14:40
X509v3 Authority Key Identifier:
keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:63:8d:f5:4e:de:09:49:63:6b:72:3c:d7:94:9d:1e:2e:bf:
c2:0d:b6:2e:43:9e:cd:ab:61:80:c8:00:be:7c:7c:98:4d:45:
ab:2f:22:63:35:eb:87:95:49:00:2b:c2:e1:98:7f:9e:5c:ef:
07:4b:e9:fc:9c:d1:5d:2c:dc:9d:4b:02:67:5e:73:cd:8c:be:
44:54:57:82:08:5a:a2:cf:df:b1:17:42:bf:ff:33:4f:32:77:
f1:90:d2:9b:66:e1:c8:35:94:7b:1f:58:9c:63:d3:d9:1b:52:
50:f5:50:62:27:02:19:18:eb:98:03:b4:f9:71:27:76:b5:94:
bf:f2:1e:6f:71:2a:35:69:ea:8c:42:e7:9c:2d:69:e5:bc:ad:
15:af:a6:fd:a8:18:e3:52:0f:6c:cd:77:33:e9:0e:3b:ef:a0:
cb:e8:ce:f4:79:0b:d9:36:3a:14:0b:05:fb:49:02:70:88:23:
58:4a:31:14:5a:be:a6:47:4f:da:1f:a2:a2:61:52:2c:98:7f:
05:3f:25:1d:80:5e:f1:f6:f0:aa:a8:c4:2b:3f:4b:ee:e6:0f:
b3:21:d7:e1:f1:97:be:f8:ae:0f:b4:26:12:7c:d5:f1:35:0a:
32:e0:31:47:04:90:bf:3f:28:f3:42:2b:35:bc:c8:cb:4b:f3:
b8:77:1b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:14:16 2025 by rpki-client