Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
File: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft (raw, json)
Hash identifier: tevQtm7kfkJ2IAvwvdx419JntvE9zGGrYgHGPGL+56o=
Subject key identifier: CB:B2:F9:52:9A:B2:1F:D1:70:A4:50:91:18:49:C7:ED:E5:FE:E3:29
Authority key identifier: F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
Certificate issuer: /CN=f25551c7047b3bf9031808c21b8379b9b860c426
Certificate serial: 0196A42E70E9B4D919F4C7BD34EB0D513E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
Manifest number: 38
Signing time: Tue 06 May 2025 06:00:29 +0000
Manifest this update: Tue 06 May 2025 06:00:29 +0000
Manifest next update: Wed 07 May 2025 06:00:29 +0000
Files and hashes: 1: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl (hash: ZZMMOES4raBmOTVUNLCQnnS+dMBfq6xcnMWIjpEDNg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:2e:70:e9:b4:d9:19:f4:c7:bd:34:eb:0d:51:3e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25551c7047b3bf9031808c21b8379b9b860c426
Validity
Not Before: May 6 06:00:29 2025 GMT
Not After : May 7 06:00:29 2025 GMT
Subject: CN=cbb2f9529ab21fd170a450911849c7ede5fee329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:d6:9a:b9:0d:6a:a6:25:d4:ae:f0:0f:22:
be:84:21:50:ef:95:76:de:86:a6:1e:e0:d9:af:ac:
64:b4:fb:14:db:13:19:74:63:27:07:f3:eb:f1:f0:
26:1d:b1:aa:3d:e3:aa:e2:23:a5:18:1d:73:6c:08:
a7:e0:42:08:cc:66:f2:1d:9b:1c:60:66:9f:d9:8a:
3a:9f:73:dd:9f:9f:59:70:c7:9e:6f:7e:5e:6c:39:
1b:e2:f1:f4:83:51:7f:d2:89:6b:6b:5e:fb:ad:a6:
56:67:a1:83:00:fc:20:5b:f5:a4:88:de:4c:cd:ce:
b2:09:9f:fd:5a:af:93:3a:81:db:1f:2b:cd:eb:b2:
97:e8:c2:87:ed:5b:57:0a:83:b8:98:46:fe:9f:5e:
1f:27:6c:34:90:25:69:5d:1e:bf:4c:3c:18:bd:38:
51:43:67:57:65:3f:bf:7d:a4:a0:96:ae:96:9c:26:
11:66:34:81:e5:58:d0:c6:49:f2:17:a3:7d:d7:74:
d3:47:e0:66:98:77:9b:7f:6b:f5:ba:3a:09:2e:54:
16:11:a6:2e:52:65:d2:f2:be:72:0d:42:0d:08:98:
0f:c7:fd:33:f4:bf:b9:93:66:40:03:03:9c:34:f6:
ac:76:ce:9e:62:cf:b8:9d:93:03:45:b8:0f:7c:b9:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B2:F9:52:9A:B2:1F:D1:70:A4:50:91:18:49:C7:ED:E5:FE:E3:29
X509v3 Authority Key Identifier:
keyid:F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f6:2f:ad:52:27:7e:56:33:42:69:14:2a:4f:79:bb:2b:ae:
49:d5:5d:db:63:cc:1d:61:a3:a1:19:22:3a:ca:2e:1c:e5:71:
bc:cd:8d:b3:6a:68:e8:5b:dd:18:1a:a3:b8:98:49:c1:cf:c2:
55:81:89:d1:de:6d:e8:ec:86:06:88:33:f6:16:79:1e:51:18:
01:37:a3:12:88:34:f8:c6:d5:ff:38:5b:6c:0d:2b:1a:d4:c6:
cd:9a:f8:28:a3:33:ad:3c:b0:c1:69:f3:61:96:1f:14:24:98:
21:48:84:ef:95:36:2b:80:0f:5e:dd:ec:93:1e:fe:ce:81:ac:
be:88:f7:3f:58:92:b0:92:69:e3:9b:70:db:9e:b6:dd:93:4b:
8a:43:6c:6a:0b:ea:57:9f:a9:bb:eb:dc:a7:fc:68:de:ce:c5:
b4:8a:46:6a:47:b9:dc:f4:b0:03:22:67:25:5b:57:bc:79:58:
e6:96:9e:7c:d3:2d:c0:76:b3:f4:e8:62:e4:a5:ba:01:06:f0:
5f:ce:ed:10:20:34:ac:8d:bb:a5:d5:d7:77:16:8e:31:83:ca:
15:47:38:18:e3:ac:4f:64:2f:5e:df:cf:57:b5:a1:28:df:b0:
0f:e9:d5:7b:13:55:b8:10:76:25:21:ae:2b:fe:fb:8b:1a:3c:
bd:79:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:36:30 2025 by rpki-client