Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
File: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft (raw, json)
Hash identifier: AtLum1SmlffaR4cAcMYBD19Xum/w8RrseIuaGXMpZ4w=
Subject key identifier: 04:E2:65:A2:EA:E9:99:4A:48:CC:40:D8:8C:50:AD:87:D6:4A:22:E3
Authority key identifier: F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
Certificate issuer: /CN=f09760cf11ef2b862187b05e5d751c734c634b45
Certificate serial: 0196DD0B2E5D0057F9A23580CF04C356E2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
Manifest number: 0BB1
Signing time: Sat 17 May 2025 07:00:19 +0000
Manifest this update: Sat 17 May 2025 07:00:19 +0000
Manifest next update: Sun 18 May 2025 07:00:19 +0000
Files and hashes: 1: 8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl (hash: TK0l0IW+amD40z4SBPXOqmLp7z7b7AMKVa+1us7S/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:0b:2e:5d:00:57:f9:a2:35:80:cf:04:c3:56:e2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09760cf11ef2b862187b05e5d751c734c634b45
Validity
Not Before: May 17 07:00:19 2025 GMT
Not After : May 18 07:00:19 2025 GMT
Subject: CN=04e265a2eae9994a48cc40d88c50ad87d64a22e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:4a:69:07:8b:41:d9:1d:f2:d5:19:01:30:
e7:d8:29:e2:0a:6a:a9:74:39:12:c7:4c:d6:4d:82:
4e:49:83:34:83:5b:7f:22:dd:0e:b3:2b:2b:f2:24:
0a:45:f7:01:6e:7e:a1:fd:85:eb:6d:e3:3d:c0:d1:
8d:a3:56:46:09:2e:cf:0d:f5:dd:50:56:99:c3:13:
9a:ee:5a:79:39:b4:33:7c:69:3f:3b:1e:e0:e2:92:
4e:56:13:e9:c3:a0:37:a5:6d:90:27:14:d4:3a:97:
d5:31:f7:b1:b9:6d:d5:1e:73:f2:64:db:1f:bc:56:
10:85:df:d6:e6:50:fa:05:5a:a0:d2:4f:23:a5:43:
ff:fa:18:f0:f3:e3:0b:bc:c2:7c:23:3e:c1:23:bb:
36:07:37:4f:14:01:aa:18:d8:7d:e9:0c:55:51:07:
69:12:2d:4b:bc:7b:78:31:c8:8b:d8:29:0e:78:16:
9a:85:99:75:64:09:63:d7:31:2a:47:2c:f1:19:93:
a2:14:7b:28:d2:6a:93:86:50:16:9b:a8:d9:e3:65:
5a:3a:58:aa:99:a6:fe:8a:c9:73:48:27:93:c5:f4:
01:6d:bb:a7:63:34:64:2b:d2:25:32:55:25:7e:62:
24:d9:6f:3f:b4:ff:ac:03:96:0f:23:73:aa:45:16:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E2:65:A2:EA:E9:99:4A:48:CC:40:D8:8C:50:AD:87:D6:4A:22:E3
X509v3 Authority Key Identifier:
keyid:F0:97:60:CF:11:EF:2B:86:21:87:B0:5E:5D:75:1C:73:4C:63:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/10849b-f1aa-4917-b8cb-36022446f023/1/8JdgzxHvK4Yhh7BeXXUcc0xjS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:0d:1f:ad:11:45:f9:82:93:74:dd:4c:c0:41:c0:d2:c1:de:
b1:11:89:71:f6:02:82:1f:d5:60:3d:dc:ec:68:bb:81:4c:08:
c5:6e:86:c3:82:fb:e8:08:32:de:26:51:a2:f4:db:02:e8:af:
9f:cb:fc:46:1e:2c:36:4d:d4:3f:7a:06:75:b8:30:6a:74:c3:
c6:cf:81:23:cd:d7:02:12:60:30:63:d8:77:f2:52:32:8b:9f:
24:ff:f3:04:da:ec:c4:cf:8d:ac:df:e9:d7:f2:98:86:f5:7c:
d7:97:d8:fa:7a:46:f8:d3:2b:d9:71:ca:d9:d7:ab:c2:b6:3d:
b9:63:d2:36:72:da:c4:72:a7:ec:18:85:7c:70:af:48:6a:c8:
82:aa:d9:13:b3:47:a8:bb:70:5c:f6:e7:87:f7:4c:94:91:bc:
69:0b:ec:d6:50:c8:f6:e0:d7:21:82:49:40:f7:e6:d1:ea:43:
54:c2:57:b3:87:57:6d:ec:4d:54:de:e1:27:00:75:53:af:4b:
39:3a:c3:5d:fa:94:f3:7c:f5:8f:54:e3:79:3c:d2:af:58:07:
25:0f:31:e0:19:56:3d:7d:ca:73:81:cd:db:76:30:c1:f7:37:
99:9a:3c:97:97:39:2c:a5:c6:dd:fb:35:2c:8d:18:cc:0e:3b:
ed:9e:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 10:34:30 2025 by rpki-client