Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: Id6+MN1yxbheMy3AmVE/nSGkC3RTzAlCg8eD7R1N5NA=
Subject key identifier: 81:CA:38:0F:45:1C:26:AB:CF:CB:2F:9C:24:98:FA:26:42:07:16:EA
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 0196AE7B6694B4D7C0F5A714930F6F077772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 08BF
Signing time: Thu 08 May 2025 06:00:44 +0000
Manifest this update: Thu 08 May 2025 06:00:44 +0000
Manifest next update: Fri 09 May 2025 06:00:44 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: t++icxBeMmW7N9CNnrxX660cny22VNdspLNtoEkn5so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:66:94:b4:d7:c0:f5:a7:14:93:0f:6f:07:77:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: May 8 06:00:44 2025 GMT
Not After : May 9 06:00:44 2025 GMT
Subject: CN=81ca380f451c26abcfcb2f9c2498fa26420716ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:5f:0b:aa:37:64:a5:36:f2:72:ec:e9:cd:
33:8b:8f:93:f2:c0:dd:db:46:ee:d1:ed:54:bf:89:
02:c4:d3:33:89:e9:62:be:9c:03:2e:23:9e:00:51:
6a:dc:63:1d:13:35:69:4f:46:b8:cc:0f:11:90:cc:
c1:be:b3:a4:9a:e3:84:42:01:c1:8f:b1:4f:39:b0:
bf:2e:0f:7d:d5:29:9b:a6:cc:2b:a4:26:8c:5a:71:
92:f1:0c:62:58:a6:2a:15:0a:cb:3d:d4:db:73:69:
e2:dc:0d:c3:12:1a:2e:cf:2d:cb:22:3f:19:46:f9:
d0:af:88:05:5a:ed:d9:19:a7:47:6c:33:8e:ca:19:
da:cf:5a:38:0a:56:d4:cb:7c:fa:e0:7a:c4:a1:01:
a2:4f:51:41:46:87:4d:a1:64:7d:3d:dd:6f:a4:56:
9e:9f:e2:df:75:40:89:90:65:0d:68:db:7e:86:ed:
3f:a7:8d:3b:aa:ea:63:c4:7a:83:01:e8:d9:aa:27:
74:11:6b:4b:14:e1:95:b3:bd:e8:4f:76:11:a3:10:
e6:27:c5:ff:f5:34:af:ba:35:95:7b:c9:e0:08:36:
bd:f5:4e:04:de:68:77:21:70:28:d4:9f:9a:a1:2a:
8c:fc:77:72:4d:17:31:9f:0d:d1:32:c3:6a:d3:ed:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CA:38:0F:45:1C:26:AB:CF:CB:2F:9C:24:98:FA:26:42:07:16:EA
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:92:92:ee:3a:11:75:dd:e9:5a:26:c7:ae:22:00:ed:7a:c0:
b5:9f:7f:f3:f3:55:31:93:64:5a:bf:78:ee:c8:a3:29:6d:46:
64:51:76:12:39:28:8a:26:fb:5e:14:81:39:c5:f9:59:16:ab:
43:51:6f:26:11:ae:58:48:6c:2a:fc:07:55:bd:5e:61:c9:38:
5a:f7:e8:5d:74:5a:53:39:7d:da:35:9e:d6:9d:6b:fd:a9:8b:
09:ee:7e:1c:6e:03:28:1e:ce:ac:a9:2f:cc:34:40:34:4d:ce:
b2:7a:85:1d:3a:4b:f5:5e:d7:f3:b2:60:68:6a:f7:00:8a:ea:
45:74:93:ec:ce:1a:30:79:b9:82:2b:02:d4:83:40:76:36:09:
a5:1a:3d:b8:d3:06:c1:92:5a:62:7e:e4:09:53:18:9f:5f:bf:
e5:86:4f:1b:6c:ed:29:ea:4c:1c:d1:51:aa:eb:66:2e:d4:47:
61:57:a7:09:33:eb:f9:72:40:0c:1b:27:4b:53:27:f3:23:df:
73:e1:1b:be:2e:3c:20:5f:ae:a5:3b:ea:5a:38:29:13:a3:4e:
6d:4c:47:fc:af:70:3a:4e:e2:33:d1:bd:8b:eb:15:be:68:ad:
59:50:45:cc:c4:04:2a:7e:b0:7f:dc:5b:b7:c5:0e:91:9c:e6:
57:a3:8b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:37:06 2025 by rpki-client