Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
File: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft (raw, json)
Hash identifier: Nj8S/AezdUdYEWzYhBsw+G6J4EtOusSGpbj7P3BjrCE=
Subject key identifier: 94:D8:E7:FF:12:73:44:02:20:8D:BC:63:BD:6B:D6:97:D9:C0:88:59
Authority key identifier: 8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
Certificate issuer: /CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Certificate serial: 0196C15D1592A6EAC0494CB93F0E316EBA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
Manifest number: 0BAF
Signing time: Sun 11 May 2025 22:00:25 +0000
Manifest this update: Sun 11 May 2025 22:00:25 +0000
Manifest next update: Mon 12 May 2025 22:00:25 +0000
Files and hashes: 1: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl (hash: MBBotuOoX1rsLnWH1r9kOJwb+VycwZaE81M3+0ok0u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:15:92:a6:ea:c0:49:4c:b9:3f:0e:31:6e:ba:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Validity
Not Before: May 11 22:00:25 2025 GMT
Not After : May 12 22:00:25 2025 GMT
Subject: CN=94d8e7ff12734402208dbc63bd6bd697d9c08859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:5c:32:0f:ca:d0:7f:29:72:f3:55:b7:b7:
30:8a:4f:8b:fe:ff:fe:32:2e:c1:d6:08:78:76:75:
ec:18:b2:57:c1:d0:14:b9:fa:f3:7e:26:cf:17:2a:
cc:db:3c:e9:5f:17:ed:70:5d:92:eb:41:8d:cc:cb:
47:b9:19:11:bd:e9:93:c4:85:17:d1:52:33:22:1f:
37:51:fa:df:f8:2d:61:20:c5:d0:89:40:c2:17:68:
22:b5:7c:6e:7e:7d:00:e9:c7:e7:ce:81:6e:b4:e6:
34:57:31:1d:32:6a:cb:66:eb:a5:13:75:fe:78:93:
b2:75:b1:2f:fa:17:23:af:22:fc:f4:d2:18:04:18:
9b:6d:2b:cc:19:f0:5e:9c:eb:72:94:a2:4b:37:1a:
18:ac:ae:56:cb:65:7c:0d:d0:df:d6:7e:1e:c2:21:
ce:75:24:bf:fb:55:56:6c:04:e1:c8:bd:f5:cb:1f:
08:6d:67:79:01:b8:7f:c2:1d:86:52:59:1e:b8:14:
da:06:6d:15:96:f7:c3:23:72:f5:af:b8:38:27:6f:
e0:1d:f3:af:9a:51:f4:39:72:a9:18:5e:32:8e:d9:
51:03:3a:a8:2c:86:47:2f:68:a0:03:2d:f3:88:eb:
ef:1b:42:2a:7a:6f:cc:5b:88:a1:0c:42:65:bc:59:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:E7:FF:12:73:44:02:20:8D:BC:63:BD:6B:D6:97:D9:C0:88:59
X509v3 Authority Key Identifier:
keyid:8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e8:0f:52:a0:b1:97:6e:f8:7e:ec:1a:a1:15:c7:e3:77:a2:
95:d6:97:ae:4d:4e:74:2a:1d:46:b5:03:15:ee:5a:a3:30:92:
7b:00:f2:02:b3:3c:9b:61:e6:89:77:23:27:0d:fc:21:26:09:
86:90:85:01:48:4e:02:da:43:f0:7c:7a:24:22:7f:27:ef:f3:
ed:17:86:bf:75:30:a0:e9:cf:77:d8:7a:ac:9d:8f:12:00:44:
07:7d:e0:c2:f7:9d:7f:15:a4:48:88:65:50:cb:d7:cf:9d:b7:
4c:36:7a:e1:01:9d:5f:5f:a5:a5:b1:88:d0:1e:c1:df:d7:2b:
a1:8f:88:9d:f0:9e:68:54:04:e8:f0:12:44:5f:d8:39:61:2e:
77:8e:3a:1a:da:a1:af:07:6b:0f:bb:a3:32:2a:c0:60:f6:b2:
bf:fa:cc:9d:fd:44:4e:4a:ad:30:10:5c:1b:5c:d9:4a:48:06:
e8:43:98:f7:03:ff:fe:f9:d0:0d:6f:61:c1:82:7f:5c:5b:ba:
35:ed:e5:ec:84:55:19:81:e5:99:b4:78:95:65:24:d4:82:0c:
25:1b:03:0c:81:e7:90:f1:28:da:f4:1c:e6:22:c3:6b:a9:26:
de:ed:82:72:06:aa:4e:c2:be:27:14:b6:3c:67:aa:d9:7b:a2:
8c:65:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:22:12 2025 by rpki-client