Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: o5ni2s1XWZNzkKgAhGXRaqWxMSgd+rnoeTF+HXpLFQc=
Subject key identifier: 03:F3:F9:B1:80:5A:76:54:A2:83:9C:A4:13:EC:85:7D:3E:D4:D5:F0
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 0196BE256630B7CA1F8FEB754DD151767276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 041E
Signing time: Sun 11 May 2025 07:00:43 +0000
Manifest this update: Sun 11 May 2025 07:00:43 +0000
Manifest next update: Mon 12 May 2025 07:00:43 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: hLRUdSz7Ae3V79OZ+uFi0vgq5TpvvPYDIcSdcl1BhOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:66:30:b7:ca:1f:8f:eb:75:4d:d1:51:76:72:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: May 11 07:00:43 2025 GMT
Not After : May 12 07:00:43 2025 GMT
Subject: CN=03f3f9b1805a7654a2839ca413ec857d3ed4d5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:ee:93:da:33:67:1f:75:9c:9d:24:ba:f4:
2f:46:f7:c7:7c:1a:9b:04:4a:f8:f6:48:33:fc:54:
ae:91:89:bd:0c:49:b6:2b:fe:b0:1b:f4:e6:5e:0d:
37:c0:30:65:cc:05:57:bc:84:d9:12:36:f3:a7:8b:
67:03:5f:2c:b5:ae:1f:cc:26:c8:de:4d:b6:55:b0:
91:54:1d:fd:4a:74:28:cd:82:29:d1:3e:40:b4:c6:
c6:78:b3:93:c5:d6:b0:fc:b6:1f:ac:5a:55:ea:21:
ca:08:19:9d:fe:c2:e8:1f:88:55:2c:16:c4:ee:84:
1b:c1:67:c9:8f:07:2a:ab:e5:d1:a3:3f:ca:54:9d:
c8:9f:a1:25:8f:23:9b:81:cd:43:bc:45:a7:6b:ca:
27:e1:dd:00:f2:05:d3:2a:4d:5b:2d:9f:69:fa:4d:
bb:1c:2d:e1:76:2d:22:3e:64:aa:60:0f:35:0b:6c:
b7:da:16:90:dd:c9:53:1e:9b:c1:69:bb:23:ec:be:
a0:83:d9:02:c0:d6:31:ff:5b:a2:91:ce:93:67:63:
2b:15:b2:52:f7:e4:7e:1a:5f:5f:64:6c:7f:0d:7f:
e5:5d:f1:28:42:c4:93:d8:b7:95:80:6e:9b:cb:a8:
0a:4e:3d:8b:a8:7c:ed:17:f9:0f:ee:86:b7:86:3d:
fd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:F9:B1:80:5A:76:54:A2:83:9C:A4:13:EC:85:7D:3E:D4:D5:F0
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a7:9a:87:88:4b:82:22:04:95:24:19:7a:b0:29:f5:01:e6:
08:98:b1:90:66:0e:05:a1:5f:62:3b:5b:15:75:47:90:00:49:
41:ef:f1:a8:4f:61:15:d6:82:d6:51:15:21:77:3f:71:f2:07:
77:86:b6:cb:9c:eb:63:e1:f5:f8:13:60:fd:ac:13:c0:e8:2a:
4a:e2:15:2b:be:6b:8c:ec:63:1a:b3:fc:74:ad:4d:7b:20:63:
e9:df:a7:cb:88:d4:93:00:20:65:0b:db:6e:5b:89:ff:c7:c8:
51:f6:4b:a9:09:a1:69:a5:10:ae:24:18:9a:e2:d6:1d:9f:8f:
b3:5a:e4:86:e7:a6:ae:c6:bd:97:7a:7a:7c:07:43:13:f5:9e:
fe:3b:30:9b:3e:21:dc:04:5b:17:c6:14:1a:2d:99:b1:55:14:
00:b6:5e:dc:26:53:fd:1b:99:f1:27:fe:c4:ef:19:13:74:3c:
c6:98:49:4d:63:2c:ea:f6:5f:04:e1:51:5d:ba:f2:49:db:6b:
f2:43:90:26:d6:d6:38:01:79:5b:cd:c1:b1:51:99:7a:9c:dc:
88:49:06:18:41:f3:75:96:26:9b:39:ee:de:d1:7a:35:99:94:
83:ef:04:e3:8d:dd:e0:8a:4b:9f:3f:3d:8c:6a:12:f2:37:ba:
01:65:90:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:30:13 2025 by rpki-client