Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
File: B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft (raw, json)
Hash identifier: oXc8WACpCSubnjlbHnbqGQu6J1H7sPeKhqk85zDDtuM=
Subject key identifier: 1A:36:C5:3F:E8:2E:25:4E:1E:73:1F:9F:53:DA:D0:21:00:1C:30:2A
Authority key identifier: 07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
Certificate issuer: /CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
Certificate serial: 0196D7E4EB47CCA55D18B553DDBA7420EBDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
Manifest number: 0F17
Signing time: Fri 16 May 2025 07:00:25 +0000
Manifest this update: Fri 16 May 2025 07:00:25 +0000
Manifest next update: Sat 17 May 2025 07:00:25 +0000
Files and hashes: 1: B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl (hash: IouuuEfonjN6EQqKxTTbTQZvFGtKZP9azbG1JYSx4Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:e4:eb:47:cc:a5:5d:18:b5:53:dd:ba:74:20:eb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
Validity
Not Before: May 16 07:00:25 2025 GMT
Not After : May 17 07:00:25 2025 GMT
Subject: CN=1a36c53fe82e254e1e731f9f53dad021001c302a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:21:10:a4:35:9c:5f:5f:7f:e0:72:ed:1b:
ca:87:df:65:2a:06:bd:d4:03:b6:fb:7d:5c:d4:24:
d7:86:5b:fb:f0:8a:91:29:bf:a1:ce:b2:82:8b:d2:
24:48:b2:ea:2a:b5:31:6c:28:a3:d4:3b:aa:d7:da:
f8:7c:26:df:cc:98:bf:60:a4:18:9d:6f:06:d5:3b:
e1:5f:8e:be:45:f0:d4:b6:34:97:9e:b2:a9:06:21:
8e:71:7b:ad:53:02:7d:42:f7:28:c0:61:23:94:d3:
32:1c:66:bb:01:a8:f0:b4:aa:67:28:47:e1:7e:ac:
5b:21:08:88:2d:1f:2d:d4:7d:c5:05:80:e4:70:40:
6e:e6:26:95:07:5b:02:97:18:c5:5c:12:4f:51:14:
2d:eb:0c:75:02:2d:a0:fc:b1:ba:aa:41:ab:2f:60:
5d:07:4d:2a:fd:24:f2:5a:b0:da:83:5a:99:ac:b4:
a6:f1:34:b0:24:3d:e4:c8:65:a8:19:35:84:4b:9f:
d7:bb:fa:89:cb:03:95:9e:49:da:01:3c:6f:fb:9f:
38:79:da:b5:2b:0c:31:a0:4a:e7:fa:91:3f:76:96:
4b:d1:55:6f:84:2f:0c:08:46:c0:b7:26:3b:e7:43:
85:57:c1:7d:02:53:e2:fc:06:52:2a:fd:59:43:9f:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:36:C5:3F:E8:2E:25:4E:1E:73:1F:9F:53:DA:D0:21:00:1C:30:2A
X509v3 Authority Key Identifier:
keyid:07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:98:eb:d6:f1:fb:a4:e6:18:3f:e9:89:e1:2d:30:53:ae:ec:
a7:eb:25:e0:41:c7:53:81:80:62:77:83:98:df:35:24:0d:af:
4a:60:67:01:95:a1:b6:25:89:4b:95:13:e2:30:01:98:fe:c6:
63:97:1c:c4:a8:be:a0:81:a7:fd:66:02:92:30:e5:10:df:f7:
7c:5f:a4:43:17:14:12:a3:6b:04:d5:c9:0e:8c:c8:c3:35:d8:
6b:d0:13:96:05:55:4d:ba:29:53:92:95:62:7c:c6:76:e8:da:
d3:56:88:60:4d:b7:4d:c7:5c:83:fc:6b:2f:7d:1c:c8:8b:10:
62:dc:1c:82:45:06:ef:08:af:22:f0:a9:98:0d:f0:c0:6c:68:
e5:03:50:01:7b:3d:fb:15:40:6a:37:c2:47:db:c9:a2:98:24:
d9:2d:7c:58:38:d8:b3:87:dc:57:f6:c8:f1:49:6a:e8:ce:09:
3d:8a:d0:c1:4c:98:90:43:4e:5d:f8:db:68:74:f3:93:78:5e:
55:0e:94:65:4d:2f:5e:6c:60:7e:0e:1d:84:ec:05:b5:50:dc:
04:d2:5d:83:6e:56:d8:77:8d:09:1c:76:9c:09:c0:0d:d0:06:
37:85:9c:15:8e:f9:15:e9:b1:61:fa:06:27:8f:4a:b5:73:88:
5a:81:c4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:15:46 2025 by rpki-client