Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
File: i4-7JMKLohFyEvDTJzo8KkwnzBI.mft (raw, json)
Hash identifier: oY+na9Ycx0J8wHF2LErXRKDxY9PxWP+eV2EC3AiBwv4=
Subject key identifier: 13:EF:D8:76:70:52:8D:2B:DC:BB:F9:FC:25:E4:98:E3:F2:EC:E6:79
Authority key identifier: 8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
Certificate issuer: /CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Certificate serial: 0196CBE0DAD9C2529630AE521E398BA985E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
Manifest number: 0AB8
Signing time: Tue 13 May 2025 23:00:32 +0000
Manifest this update: Tue 13 May 2025 23:00:32 +0000
Manifest next update: Wed 14 May 2025 23:00:32 +0000
Files and hashes: 1: i4-7JMKLohFyEvDTJzo8KkwnzBI.crl (hash: 89yqMMonSm2mhM0fn99iI/xA0pSWnulu5LR+IHAeIuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e0:da:d9:c2:52:96:30:ae:52:1e:39:8b:a9:85:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8fbb24c28ba2117212f0d3273a3c2a4c27cc12
Validity
Not Before: May 13 23:00:32 2025 GMT
Not After : May 14 23:00:32 2025 GMT
Subject: CN=13efd87670528d2bdcbbf9fc25e498e3f2ece679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:d2:c0:b5:eb:1c:9c:96:33:42:32:d7:db:
5f:6f:af:9a:cb:34:ea:b8:f6:2c:ea:9c:62:ed:93:
55:42:a6:04:dd:47:ee:f3:0b:40:fe:7a:e8:a9:55:
79:ea:82:bf:9d:ea:9a:d0:c6:a9:d4:f4:93:04:7b:
9d:70:af:80:94:34:86:79:a1:93:60:31:9e:6e:55:
59:74:36:7f:e0:d0:d3:df:e3:21:89:0f:83:c2:8c:
5b:43:62:a9:e7:fc:2f:ed:7e:04:0f:1b:3c:15:39:
e9:bb:53:f9:4a:e6:f2:01:32:80:da:34:97:99:0a:
01:ef:58:bc:73:59:b2:23:78:80:b6:71:48:85:89:
ee:59:18:40:ca:73:8f:9c:95:8e:69:6b:41:9e:96:
fb:52:89:73:be:ef:1f:4c:88:d5:98:c2:80:e1:7e:
41:98:1e:76:d9:e1:ee:15:d4:da:db:be:3c:13:95:
0f:60:8e:9f:fe:31:ec:1a:fa:b9:ef:65:ce:d9:a8:
06:84:50:f6:d7:11:78:a6:d5:19:08:6e:17:64:b7:
84:82:7b:b8:d2:a7:66:a9:df:42:a4:8f:77:11:56:
c5:e8:ba:2c:88:9c:e9:34:e8:a1:92:3f:8b:7a:20:
6d:73:2a:21:f9:c2:08:ec:85:d3:9d:6e:4f:ed:3d:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EF:D8:76:70:52:8D:2B:DC:BB:F9:FC:25:E4:98:E3:F2:EC:E6:79
X509v3 Authority Key Identifier:
keyid:8B:8F:BB:24:C2:8B:A2:11:72:12:F0:D3:27:3A:3C:2A:4C:27:CC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4-7JMKLohFyEvDTJzo8KkwnzBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5f2167-6a5d-4d41-8297-c2e9d17d8d4a/1/i4-7JMKLohFyEvDTJzo8KkwnzBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:07:11:ab:d7:39:2b:0e:2b:7a:ae:66:32:9b:51:dd:d1:5d:
bc:f2:18:c4:57:52:66:10:87:2d:ab:12:33:71:b5:6e:a9:a1:
06:c3:7c:bc:bc:a3:39:ec:09:b4:f1:11:f8:e3:c9:f6:af:0d:
41:3a:0c:ca:9a:2d:18:23:7d:e0:a5:2d:0d:10:4e:d2:c6:95:
9c:21:c8:63:53:9c:eb:ba:84:81:90:aa:86:a4:ad:c7:7c:04:
8e:c2:17:a2:42:01:e9:f1:fa:f0:ac:1e:ee:8a:a9:9c:86:d6:
90:a9:df:39:13:d7:ec:58:9f:8c:4a:bd:c6:b7:3c:e8:e2:2f:
2a:39:a0:fa:ee:91:69:4f:40:16:06:3f:51:78:1b:da:e9:01:
84:dc:29:c0:f0:d2:2d:f8:58:6d:77:f6:f3:f9:e0:c5:d7:0b:
9b:b7:5d:bb:43:ba:85:81:0f:71:b1:a5:36:e4:c4:a5:ae:95:
bc:5d:1c:a7:93:07:01:28:21:20:36:cc:23:db:e9:c5:56:79:
d4:8d:a5:50:b4:71:3f:ad:90:a0:52:9c:8f:6a:2a:e6:fa:26:
1d:5f:98:88:e6:1a:e0:4f:9e:3f:98:b8:3f:c3:14:de:08:4b:
19:85:8d:28:5c:2b:19:2d:0d:9e:ec:d7:d7:54:6f:c2:5f:c8:
3d:6f:eb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:47:52 2025 by rpki-client