Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
File: 8DqRN3TbyeYF3BerI6BaFoA5jeU.mft (raw, json)
Hash identifier: 5V4tyYXLHwKdGopaIAwjjwRYN95CJUPmbsT8fSbMMo8=
Subject key identifier: F2:EB:FC:7B:59:65:9C:02:21:98:79:40:16:2A:86:86:1A:08:96:0F
Authority key identifier: F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
Certificate issuer: /CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Certificate serial: 0196D889E0B5C30567DD8B79B65854012C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
Manifest number: 0905
Signing time: Fri 16 May 2025 10:00:36 +0000
Manifest this update: Fri 16 May 2025 10:00:36 +0000
Manifest next update: Sat 17 May 2025 10:00:36 +0000
Files and hashes: 1: 8DqRN3TbyeYF3BerI6BaFoA5jeU.crl (hash: 52ApXppxGgk6uv6D2eHaB6tViJRHrWpNbpT2CshOGDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:89:e0:b5:c3:05:67:dd:8b:79:b6:58:54:01:2c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a913774dbc9e605dc17ab23a05a1680398de5
Validity
Not Before: May 16 10:00:36 2025 GMT
Not After : May 17 10:00:36 2025 GMT
Subject: CN=f2ebfc7b59659c0221987940162a86861a08960f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:da:07:1b:45:54:b6:76:90:cb:98:0b:ed:
37:f3:6e:eb:0a:0e:77:1d:4a:d5:02:96:f0:a7:06:
29:6a:8c:cd:84:8f:41:26:77:f5:3f:be:07:4c:94:
0e:30:bf:8f:bd:53:92:c2:17:8b:a2:80:1f:f7:a5:
ea:d1:36:e9:b6:a9:46:09:b4:d6:fa:b8:bc:b2:e4:
66:0d:8c:ff:03:7a:6b:c1:ea:16:a2:db:5d:4d:fd:
f8:7f:be:1e:f0:de:d1:e0:15:f5:b1:b7:92:73:7c:
63:d3:6e:77:35:df:10:f8:ce:c2:b5:00:30:43:de:
f0:43:fd:45:8b:ed:28:1d:16:fe:59:d0:fd:df:9f:
7f:7a:0a:dd:85:74:3f:91:25:ea:54:ba:7e:92:fe:
67:f7:c8:1b:44:25:5f:8a:f0:25:4e:5a:60:2c:e2:
bf:cc:60:52:7a:8c:02:67:ee:5c:25:47:57:48:90:
20:b5:8e:dc:d8:a0:96:78:65:b8:53:cc:15:23:36:
09:6c:fb:ad:79:8c:93:b0:e6:78:42:fd:cf:39:8f:
74:1b:4a:f9:23:7a:7b:26:90:86:84:e8:ca:32:6d:
57:a3:a4:a1:6f:f8:da:a1:8f:e0:98:33:76:80:58:
0b:60:11:4d:b1:1c:4e:39:57:b0:2b:07:b2:db:1f:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EB:FC:7B:59:65:9C:02:21:98:79:40:16:2A:86:86:1A:08:96:0F
X509v3 Authority Key Identifier:
keyid:F0:3A:91:37:74:DB:C9:E6:05:DC:17:AB:23:A0:5A:16:80:39:8D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DqRN3TbyeYF3BerI6BaFoA5jeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f82426-7eb0-4765-8de9-e0063269e469/1/8DqRN3TbyeYF3BerI6BaFoA5jeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:31:4a:2d:30:86:98:e2:ca:98:e7:e8:02:7c:d6:95:29:7b:
62:58:01:0c:3b:79:20:40:02:07:12:94:b3:1f:fc:3b:ee:aa:
d4:98:d1:28:2b:e0:b4:76:be:47:1b:ab:02:4d:cb:7c:68:a1:
ed:eb:7b:65:12:42:9a:05:e9:34:67:89:d2:aa:94:5b:c6:ea:
29:de:b5:3e:1c:a6:6a:be:66:1c:69:1a:12:73:9f:bc:32:1c:
86:b7:3b:9a:7b:d5:29:e9:02:35:ec:da:54:d7:ae:ba:f3:47:
55:5e:8d:37:f0:d9:c7:b1:fc:b1:2d:45:76:b4:db:62:92:d7:
21:09:77:3a:e7:7b:15:cd:6e:55:e9:84:a9:68:cd:fc:49:8e:
99:4e:b1:31:83:1c:c6:30:f2:33:07:9c:20:59:0e:13:09:0f:
4d:d4:09:4a:3b:79:a4:24:62:b8:9b:b6:0d:ba:01:29:71:5b:
0d:92:a4:d3:3f:12:8c:34:f7:77:6e:bd:f1:00:ec:a2:83:f8:
85:6c:51:6c:f6:f5:10:56:71:83:48:98:75:6b:6a:cc:0d:37:
5b:a4:c0:36:1d:6c:43:f4:a3:49:bd:33:01:fa:e0:f9:f2:29:
ad:7a:3c:fc:44:e8:b6:5f:05:f5:3b:0c:93:f2:55:c2:a1:ef:
08:c7:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:29:22 2025 by rpki-client