Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft (raw, json)
Hash identifier: uoGOH+g9lisrxcke8Z6pUCSPkSiN0Ko7S/D4tKYZnWo=
Subject key identifier: DD:20:56:DD:EB:07:72:B5:C7:39:3B:57:B1:16:B4:E5:5F:55:74:85
Authority key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Certificate issuer: /CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Certificate serial: 0196BF37F1E62B19DB6884AE1A865842A51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 12:00:36 +0000
Manifest this update: Sun 11 May 2025 12:00:36 +0000
Manifest next update: Mon 12 May 2025 12:00:36 +0000
Files and hashes: 1: R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl (hash: R+AWDzXvAcexW67dYZALeOdb4AFzsl6ZOZIN8TwCtl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:f1:e6:2b:19:db:68:84:ae:1a:86:58:42:a5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Validity
Not Before: May 11 12:00:36 2025 GMT
Not After : May 12 12:00:36 2025 GMT
Subject: CN=dd2056ddeb0772b5c7393b57b116b4e55f557485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:bd:6b:8b:5b:de:ca:3f:f2:87:6b:21:42:
93:71:4e:2e:dc:d2:82:c4:2d:c5:39:e4:fd:38:8a:
1d:f9:2e:3b:a4:67:db:43:2c:4a:f4:dc:79:ac:88:
9b:8e:7f:21:20:10:08:cb:88:07:d0:db:04:76:d1:
a7:0a:29:73:78:bd:e4:78:04:42:4f:5e:cf:46:61:
80:96:d0:c1:7c:bd:54:ae:08:87:f9:5e:ae:f4:81:
b3:de:2b:a4:bf:90:bb:00:e4:7a:ae:b2:88:11:d3:
7f:90:c4:58:c9:71:32:6b:e9:13:d1:da:a6:fa:47:
d2:b0:c9:55:da:63:3f:ca:5d:28:af:e2:4d:ba:ac:
ae:f9:22:fe:29:57:af:28:59:70:b5:2b:7b:73:2d:
f4:1a:5b:a9:a6:b3:97:9f:0b:68:d0:69:63:32:b7:
9c:9d:ba:b9:1f:ed:7d:6a:69:61:94:c8:55:b3:2f:
95:c6:db:cb:e6:b6:81:e7:b7:86:3b:a4:59:51:7a:
ba:78:e2:02:04:cb:e6:b0:13:a1:6f:89:9f:52:79:
70:72:1f:d6:fb:32:1f:56:f6:e8:ac:32:b5:02:f8:
9c:0e:aa:d7:c5:84:9f:76:c5:07:df:62:ef:73:eb:
0f:37:53:d5:4f:14:c0:87:60:c6:f4:e7:06:41:9d:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:20:56:DD:EB:07:72:B5:C7:39:3B:57:B1:16:B4:E5:5F:55:74:85
X509v3 Authority Key Identifier:
keyid:47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:09:ac:3c:06:79:84:c9:8e:3b:40:2b:c8:5f:36:c7:ac:ae:
db:91:b3:5d:a9:c8:8f:fe:57:69:57:97:4e:6b:33:7f:42:a0:
2b:44:c8:31:67:d6:10:ee:09:bd:75:a3:f4:54:00:60:c3:61:
8a:8c:f4:0e:6a:88:56:dd:9a:c9:c5:a2:47:49:f5:ec:3e:d4:
64:c5:d6:f4:74:de:d9:df:6d:ad:7a:ea:c5:27:d2:bd:cb:e6:
c1:fa:6f:33:24:b1:3a:79:d8:ea:df:da:17:a8:c5:f3:c8:de:
31:f5:e3:8b:6c:c9:47:06:02:cd:da:e7:0f:32:ff:ee:f2:46:
c1:6d:e7:49:18:2b:53:9d:22:a8:d5:2e:f2:2b:24:16:28:5b:
bb:7b:bf:49:4b:4b:fa:2a:82:41:5e:2e:82:10:cd:8e:cf:25:
27:11:67:d8:30:82:da:4d:3d:ac:52:b8:f2:e2:a4:ae:d8:d4:
ce:e3:4e:fd:62:89:97:08:39:8c:41:3b:ff:b9:ce:bc:80:f4:
70:82:7a:b4:fb:f4:09:b6:50:4c:17:3d:5d:d9:a4:84:bd:c1:
46:0e:65:34:3a:6f:ec:6c:0a:27:47:e5:ea:27:14:80:bd:c2:
55:99:45:23:71:42:1d:24:31:91:36:74:f2:b4:95:19:57:f3:
32:21:81:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:26:19 2025 by rpki-client