Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
File: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft (raw, json)
Hash identifier: NKskwKNtOwYhPCuWc6FjKOWqDfhsaqPLsWxnZcEuA5o=
Subject key identifier: 2E:09:4C:67:6E:B0:52:8D:FE:2E:1E:19:DA:01:46:4E:4B:38:76:A0
Authority key identifier: F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
Certificate issuer: /CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Certificate serial: 0196AC1EA80CB46D4A4AB1924267ECDE63B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
Manifest number: 11
Signing time: Wed 07 May 2025 19:00:12 +0000
Manifest this update: Wed 07 May 2025 19:00:12 +0000
Manifest next update: Thu 08 May 2025 19:00:12 +0000
Files and hashes: 1: 8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl (hash: jyUWcAWDU1DqnX0Q0j7fY0J23F05zIZ7wobgcFuy3dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1e:a8:0c:b4:6d:4a:4a:b1:92:42:67:ec:de:63:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef52ed816cf4bf7d029ffb0abc101afd2c64b5
Validity
Not Before: May 7 19:00:12 2025 GMT
Not After : May 8 19:00:12 2025 GMT
Subject: CN=2e094c676eb0528dfe2e1e19da01464e4b3876a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:4d:71:2a:42:d2:de:c4:cb:7e:54:f1:f5:
c2:be:d9:b7:70:a1:0e:a9:b7:63:90:43:7e:0f:3e:
b1:f3:f3:2a:88:16:bf:cf:4f:bc:0e:29:b3:9f:3e:
55:ec:3c:e8:86:39:6e:02:71:13:79:48:41:b6:d5:
11:58:7e:ed:a2:9b:98:09:1d:3e:f8:66:7b:f5:b2:
08:6e:72:95:de:f9:ef:48:93:7d:de:8b:76:5a:7e:
97:dc:78:78:0b:6e:3a:31:77:4e:68:b5:1b:dc:7d:
66:d4:32:d6:0e:cd:bc:42:b7:8b:5b:bf:62:22:81:
dd:8a:67:d6:52:83:79:ed:79:d1:78:fe:aa:6a:33:
6c:2b:54:57:01:11:2f:d8:50:08:0f:8f:a2:68:0c:
d2:06:47:5d:4b:c2:ea:76:62:a9:b5:3f:af:0b:c3:
59:c8:2f:03:75:34:af:90:82:fd:eb:fe:16:56:50:
67:81:b3:56:5c:95:bb:1e:1e:a0:25:4b:22:f5:ba:
17:81:65:4e:af:14:df:0e:5d:3d:13:31:8e:42:2b:
f3:09:0b:c3:3f:c2:fe:5e:b8:0e:e3:c8:97:c2:a4:
77:ea:15:a2:8f:ef:9c:bc:74:5c:7a:dd:09:48:6a:
29:97:9b:e8:52:86:57:ee:fc:c5:74:72:51:17:d2:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:09:4C:67:6E:B0:52:8D:FE:2E:1E:19:DA:01:46:4E:4B:38:76:A0
X509v3 Authority Key Identifier:
keyid:F3:EF:52:ED:81:6C:F4:BF:7D:02:9F:FB:0A:BC:10:1A:FD:2C:64:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9S7YFs9L99Ap_7CrwQGv0sZLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/76664c-1e05-4044-a0c5-eb2c2e86807f/1/8-9S7YFs9L99Ap_7CrwQGv0sZLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1d:cf:b5:e4:c3:eb:f7:d8:88:fb:41:47:40:14:64:6d:5f:
d7:7d:32:75:57:9b:48:77:83:f4:db:33:88:10:df:e6:8a:bb:
4d:14:ac:70:ff:c1:a4:71:86:07:2f:31:72:e0:a3:e5:af:c5:
d4:80:d2:96:6d:2a:d0:44:f7:f1:e2:6b:94:3d:a3:32:88:1e:
16:0f:f3:e8:31:f0:06:fb:e3:24:17:b8:f2:0e:ea:ba:e4:dc:
a5:01:f4:c5:5c:aa:11:d1:c8:cb:ac:5a:05:c4:b4:39:59:41:
14:ef:10:39:46:9d:dd:d9:0d:c9:05:7b:db:92:30:82:a1:4a:
18:b2:d1:21:26:c4:8c:04:58:1d:71:c3:70:2d:0c:42:bc:5a:
66:e6:0f:5f:5a:67:4e:93:21:99:5d:61:64:c0:a6:b8:9a:6b:
65:56:9c:af:38:7c:3d:91:22:d2:4a:9a:39:8e:94:12:76:f6:
3a:6e:ac:5d:ee:17:f6:ef:2e:10:07:01:cc:ec:ab:fd:36:a8:
a4:28:bb:58:10:2b:f6:41:d2:2a:5b:97:3a:ae:3f:21:d6:ad:
21:16:e7:a5:ef:70:67:67:b9:1c:b6:12:7b:c4:a2:e5:fd:e5:
52:e8:ec:d6:77:4f:14:2e:6a:ff:c6:d7:e9:a7:ca:d7:55:21:
6f:98:97:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:15:17 2025 by rpki-client