Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
File: 8PsSySmy8FuZ1Jf68VUdvF2AflE.mft (raw, json)
Hash identifier: e2YZiwfysXBR+jzd1BBSE74OkpiUu1p4U/KvDUmNQyU=
Subject key identifier: B2:DD:65:FC:AA:9D:60:4C:EA:9D:9B:98:F6:FC:5A:79:FB:14:39:D9
Authority key identifier: F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
Certificate issuer: /CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Certificate serial: 0196BB921AF4FDFD8ACE79B8156DA4ACD529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
Manifest number: 0AC7
Signing time: Sat 10 May 2025 19:00:36 +0000
Manifest this update: Sat 10 May 2025 19:00:36 +0000
Manifest next update: Sun 11 May 2025 19:00:36 +0000
Files and hashes: 1: 8PsSySmy8FuZ1Jf68VUdvF2AflE.crl (hash: WBjPDLbBWOJxFJH81EztRRcnU33tZozBffdu1aM3d7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:1a:f4:fd:fd:8a:ce:79:b8:15:6d:a4:ac:d5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0fb12c929b2f05b99d497faf1551dbc5d807e51
Validity
Not Before: May 10 19:00:36 2025 GMT
Not After : May 11 19:00:36 2025 GMT
Subject: CN=b2dd65fcaa9d604cea9d9b98f6fc5a79fb1439d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:76:10:d0:f9:2d:8c:9a:d3:34:4d:ef:86:88:
45:ca:ab:14:c8:57:56:79:09:c4:23:09:10:67:40:
50:18:94:2c:6a:93:e4:a5:87:6e:81:a6:1e:bb:da:
4a:cb:cd:80:72:df:79:cb:b4:5e:75:b0:6a:c6:7c:
29:28:28:ab:2b:a5:03:eb:82:f7:3e:b0:0c:e6:30:
11:2f:17:43:19:20:2b:89:f2:d4:dc:9d:e2:5d:c2:
fd:a9:ca:e5:be:f5:b6:9e:46:39:d1:dd:0f:00:ee:
59:39:09:3d:11:44:17:8c:52:8d:36:01:fb:af:df:
86:e8:dd:b4:79:99:c8:f7:03:4c:ab:8a:b9:0f:06:
79:d3:f9:b9:9c:2a:01:10:58:57:07:b7:c0:18:b0:
dd:e5:39:b5:86:a1:1a:4c:30:8c:b5:b2:ef:03:23:
97:b3:3f:b3:de:ea:fd:00:9e:89:a9:1e:f7:10:cd:
36:df:6d:0e:ce:35:d2:88:70:8b:8a:99:dd:b2:72:
97:d8:3b:1e:de:f4:7b:71:09:d7:ff:d3:3b:59:13:
7a:e7:79:45:f4:a4:1a:df:07:3d:c3:90:c7:b5:58:
d8:1c:56:25:a7:e3:40:82:b3:c6:df:e4:89:17:fc:
19:5d:36:64:82:18:1d:04:ed:0c:b4:14:35:cd:28:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DD:65:FC:AA:9D:60:4C:EA:9D:9B:98:F6:FC:5A:79:FB:14:39:D9
X509v3 Authority Key Identifier:
keyid:F0:FB:12:C9:29:B2:F0:5B:99:D4:97:FA:F1:55:1D:BC:5D:80:7E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PsSySmy8FuZ1Jf68VUdvF2AflE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a3d5f0-ea6b-4a90-a647-2eff9b9839db/1/8PsSySmy8FuZ1Jf68VUdvF2AflE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:23:cd:1e:bb:05:3e:68:d6:9a:9a:f7:76:c8:c3:c2:0f:ee:
b9:34:5d:74:91:db:a2:c4:56:dd:55:73:43:8c:20:5b:ba:4a:
56:92:36:a6:e3:ff:53:17:47:79:c8:b5:d3:7c:02:a4:a0:ec:
7b:16:85:c1:1f:86:1e:1e:ab:b8:00:1a:99:ca:5a:55:08:a2:
8a:e6:14:0f:ba:5a:a5:3b:72:e4:7f:7c:66:6c:c6:5b:a3:d2:
e5:96:82:0f:fd:a4:7f:4e:e5:b4:c9:03:fa:31:a2:37:40:ca:
5d:51:f1:72:e4:0c:9c:1f:97:a3:d9:48:b5:e6:8e:9c:b9:26:
48:5b:02:be:5d:7b:35:53:a1:0a:f3:c5:9c:d2:31:35:a3:25:
85:61:d9:d8:64:aa:f5:0f:99:2a:70:90:41:2b:b7:e9:5a:dd:
f3:f6:46:bc:5c:0e:12:99:c3:8c:d1:92:8f:0a:57:4c:b6:9a:
85:32:fa:45:62:5c:c8:4e:b9:bc:f6:06:7f:b9:f5:02:51:43:
46:dd:ea:b0:25:ab:5b:27:35:f6:6f:f7:03:60:7f:06:19:87:
8d:cc:d1:bc:c7:18:ef:30:45:a2:2d:33:c6:6f:3d:fe:7f:70:
f3:78:bc:a1:05:0c:be:09:c5:cc:f6:27:fa:f7:54:d9:0e:75:
28:7f:48:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:33:37 2025 by rpki-client