Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: NM1z1Foenaf5y3Q++m6Dcwizy9UN8zK8gf7gRVH4K3s=
Subject key identifier: 9A:05:50:CD:65:84:33:A6:DB:34:0B:3A:3C:BE:CE:71:DF:AA:74:88
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 0196C916B9C04B348CFC67A3E79D1BDF793B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 10:00:31 +0000
Manifest this update: Tue 13 May 2025 10:00:31 +0000
Manifest next update: Wed 14 May 2025 10:00:31 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: cBUrwJ58w39L96JLvUQ+r4iQwYOaWHU2nWXA2/Alwzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:b9:c0:4b:34:8c:fc:67:a3:e7:9d:1b:df:79:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: May 13 10:00:31 2025 GMT
Not After : May 14 10:00:31 2025 GMT
Subject: CN=9a0550cd658433a6db340b3a3cbece71dfaa7488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:c8:42:67:aa:01:3d:81:02:dd:5c:a0:b7:
cf:fd:eb:d3:f3:e0:a9:21:7f:95:dd:52:2c:bc:e7:
fc:cc:73:4e:b3:55:10:e7:76:2f:df:e4:37:3c:d8:
43:27:b7:9b:61:9d:ad:68:ee:ad:cf:54:b9:78:7b:
8d:ab:8e:7d:bd:46:ba:81:75:6d:d2:4a:97:4d:81:
af:a7:95:c4:9e:2e:57:c1:20:30:3e:40:bd:3c:fe:
97:bd:04:89:c5:f6:b5:68:d9:fc:e0:cb:03:2d:d5:
3a:f0:2b:5e:9c:11:ae:ed:74:a3:fa:40:05:23:01:
bf:0f:fd:81:e2:9d:8c:df:83:92:fa:50:c4:7f:25:
36:14:87:ca:b5:85:30:39:8d:ae:21:18:e6:ad:f8:
58:7e:ef:d9:00:df:83:e0:57:43:e2:b3:e5:4f:f0:
ad:4e:3b:06:f4:ca:7d:ae:e3:87:e7:ac:29:39:6f:
c2:7a:f8:d3:66:7a:4a:23:e2:b3:54:dd:3c:19:b5:
db:3d:40:1f:aa:ee:59:92:d5:82:81:4c:43:56:0c:
1a:6c:c3:a7:2e:b1:dc:6c:13:de:42:d2:b5:d5:fb:
ad:09:eb:32:b5:f8:6b:a1:86:49:c1:90:1e:41:1d:
fa:9d:9a:f7:b5:37:3f:a3:8a:ff:0b:57:ef:0b:40:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:05:50:CD:65:84:33:A6:DB:34:0B:3A:3C:BE:CE:71:DF:AA:74:88
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f5:ce:45:89:70:3e:1e:8b:ef:92:6d:7e:ef:c2:ab:4e:02:
ec:e2:f2:3d:af:70:46:8d:13:af:c6:f9:62:cc:0b:c6:a2:5a:
1c:0f:33:40:ff:b9:f6:48:73:9b:7a:2c:20:9d:d9:74:9e:d3:
0a:1e:00:cb:8b:cc:06:58:93:16:ab:ac:6c:a4:00:9d:16:de:
c1:b4:dd:d0:ff:a4:ed:93:49:d4:f8:c7:39:c3:7d:1a:ab:51:
96:d5:ba:d8:d8:5b:5d:48:4f:58:74:3f:95:9d:88:7e:73:fd:
10:53:28:99:44:7c:e5:fd:77:13:0e:c2:a4:b4:86:9c:fa:e6:
ba:0b:6d:4e:92:8f:07:41:c7:31:ac:33:4b:40:69:9b:56:56:
c5:d5:5b:e9:8e:07:a5:9a:19:b1:5f:76:cf:7f:8c:0d:a3:41:
c2:76:9c:c5:91:6e:fa:4d:58:08:7f:72:d3:01:6e:15:ef:92:
b4:bf:a8:3d:52:df:b9:51:82:fe:b7:25:cc:90:11:f1:d5:26:
47:d6:ea:e8:23:b8:be:f4:f9:13:96:9d:4c:a4:79:19:30:54:
22:98:70:48:07:50:a2:7c:90:1a:34:8a:c8:b8:d9:6b:77:e2:
bf:17:06:f1:0f:a7:62:15:88:bf:20:15:19:29:17:a2:11:c8:
2f:37:7f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:02:41 2025 by rpki-client