Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
File: G8qoP8mkEL2z4P0thIcgE0dxvs8.mft (raw, json)
Hash identifier: SAaWfN8RWrZkgalbXZ9XBczA4vpMq0VXQd1qFYgWjNI=
Subject key identifier: 09:DA:41:F8:7D:4B:A1:5E:A0:AB:AF:26:5D:C9:56:37:CE:D2:95:C3
Authority key identifier: 1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
Certificate issuer: /CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Certificate serial: 0196D1AC9B6D7B03B0A0D11960537659CA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
Manifest number: 14CC
Signing time: Thu 15 May 2025 02:01:12 +0000
Manifest this update: Thu 15 May 2025 02:01:12 +0000
Manifest next update: Fri 16 May 2025 02:01:12 +0000
Files and hashes: 1: G8qoP8mkEL2z4P0thIcgE0dxvs8.crl (hash: D8azbPN9Pkf2AuegCJKvYqq3U95Skl1yNQ/aPYIwOJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:ac:9b:6d:7b:03:b0:a0:d1:19:60:53:76:59:ca:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Validity
Not Before: May 15 02:01:12 2025 GMT
Not After : May 16 02:01:12 2025 GMT
Subject: CN=09da41f87d4ba15ea0abaf265dc95637ced295c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:6f:d6:39:61:6c:f7:64:80:74:2b:91:d4:
a4:70:f1:4b:ce:10:5d:51:ed:c2:48:28:85:88:e6:
45:2b:06:a9:13:23:09:ef:1b:0c:76:93:ca:7a:bf:
66:d7:ec:0b:f2:23:a8:1e:de:d4:7d:b3:a6:a1:9c:
53:5a:82:33:6e:83:df:dc:ce:c3:31:f5:b4:3b:98:
43:09:74:e6:9a:d0:e2:9c:d7:db:37:74:53:a8:90:
a1:dd:8c:f2:c9:98:8e:a8:9f:66:fe:ee:67:5b:f4:
4e:d4:ea:fd:37:eb:c1:1f:96:f7:e6:5d:3d:bf:23:
3f:a5:59:98:77:72:ed:68:0d:67:a2:f9:3c:d9:fa:
e0:48:51:22:72:8f:2b:58:cd:0e:0b:4d:0c:ec:26:
ee:bd:3d:07:ff:f6:35:95:e3:f6:de:a0:ca:9a:50:
a5:17:c4:b8:69:77:09:7b:65:71:ad:dd:4b:c7:e9:
79:ed:30:0f:2b:52:8f:69:af:83:27:da:b9:74:11:
a8:a3:3c:8e:69:0f:b4:8a:93:fd:bf:70:e6:96:89:
f3:eb:28:b3:6b:a3:5f:24:22:60:78:ea:0d:a0:2b:
80:27:84:8a:ab:8b:07:2b:44:9b:51:de:d7:b1:a8:
96:4f:06:6e:3d:2a:95:4e:4f:30:88:33:c7:8c:00:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DA:41:F8:7D:4B:A1:5E:A0:AB:AF:26:5D:C9:56:37:CE:D2:95:C3
X509v3 Authority Key Identifier:
keyid:1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7c:e1:8a:18:c2:07:59:a7:d9:27:e7:5c:8b:c1:9d:0f:f4:
bf:ee:7d:38:de:07:4a:a0:3d:8b:78:db:3f:d2:30:62:66:a5:
b3:20:30:3a:33:be:f5:db:26:82:e5:ab:59:ab:45:9b:a7:e3:
91:40:41:b6:b3:d6:53:6f:49:c3:1b:3f:f5:ab:1f:66:18:47:
4c:d4:7a:31:02:24:1c:f5:53:93:c1:b3:b3:4e:54:a5:cd:a1:
9f:4f:2d:ab:67:76:d7:df:b3:1e:03:7c:a5:9e:23:8e:6c:5d:
44:25:cd:92:40:54:a4:e4:a0:38:76:6a:6b:52:fd:6a:be:ad:
1f:e0:98:07:96:62:5c:f9:94:3e:77:8f:4a:58:71:1f:6a:92:
74:a6:38:cd:5a:54:b3:29:02:cf:4f:02:ac:82:d5:48:a1:1b:
0d:38:b3:d5:0e:3f:87:84:92:a6:fd:95:8b:82:bb:06:26:77:
cf:4f:cb:c4:a6:fa:f2:0c:17:5c:cb:6d:a5:b1:be:50:ac:e9:
d6:b7:7f:4b:f2:c7:98:fa:07:90:88:79:08:f7:41:a3:7a:fb:
de:14:5a:03:79:37:80:d5:fc:25:23:6f:26:e8:ef:72:ba:f2:
ca:f5:02:bb:7b:65:16:88:43:d2:ce:91:02:6b:56:28:ff:a1:
16:67:c4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:08:59 2025 by rpki-client