Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
File: C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json)
Hash identifier: iZFuOPMez/mW1DJHdSRzSTv6MVk5WxEhUZXTjR9hPU8=
Subject key identifier: 15:36:56:0F:A5:F2:B2:6D:46:44:B8:38:EE:E6:19:15:18:12:A1:F1
Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
Certificate issuer: /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Certificate serial: 01969CABACD7D2E2BE993AD2A61FE8A5A685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
Manifest number: 08FC
Signing time: Sun 04 May 2025 19:00:18 +0000
Manifest this update: Sun 04 May 2025 19:00:18 +0000
Manifest next update: Mon 05 May 2025 19:00:18 +0000
Files and hashes: 1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: q3SX1QmJ2k1oc50Xv6BfbMwyyCalvY+RlJvSv8CSBcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ab:ac:d7:d2:e2:be:99:3a:d2:a6:1f:e8:a5:a6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Validity
Not Before: May 4 19:00:18 2025 GMT
Not After : May 5 19:00:18 2025 GMT
Subject: CN=1536560fa5f2b26d4644b838eee619151812a1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:18:18:bf:45:3e:3e:2f:af:a8:9d:5b:eb:65:
41:15:35:68:3a:f7:6f:00:66:dd:8a:a6:6f:68:01:
41:78:ad:4f:c0:67:6f:6b:9f:77:91:3c:a1:2d:37:
68:0f:e7:d4:e6:2d:c2:e1:d0:a8:87:f7:13:88:b1:
20:ca:a1:a2:75:af:99:06:d8:e5:5d:d3:44:9a:0d:
a3:49:63:b7:d2:ca:ae:cb:7e:6f:27:3b:1f:08:13:
a7:8f:1b:52:20:45:74:84:30:17:00:6b:82:7c:63:
47:c4:95:f9:41:59:21:b9:7b:a2:e2:5c:d4:a2:62:
71:48:74:37:c2:eb:09:ed:be:76:13:5e:5f:e8:83:
52:e0:25:c2:40:1f:08:a5:00:57:9b:32:fe:86:a5:
48:f5:3f:cd:5d:5e:c9:1e:b9:12:e8:f2:c6:ff:4a:
b8:d5:11:a6:b3:a3:f6:26:da:4d:5e:70:fa:c2:01:
c4:33:19:18:ae:2d:3d:1f:43:a4:44:3e:1b:0e:d4:
65:b2:91:c3:67:5e:2d:14:b7:82:00:7f:22:86:f7:
91:79:35:73:11:74:39:29:ae:b7:d4:4c:8e:30:2c:
34:35:f4:b9:31:fc:fb:8f:49:41:bd:84:78:91:10:
65:8c:8e:38:80:fd:09:87:34:e2:20:10:cb:a3:9a:
bd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:36:56:0F:A5:F2:B2:6D:46:44:B8:38:EE:E6:19:15:18:12:A1:F1
X509v3 Authority Key Identifier:
keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:33:08:9d:fb:aa:a3:81:c5:f0:b2:20:d1:ef:04:8e:73:dc:
c1:07:b6:56:1e:0f:bf:ff:51:eb:43:4f:f5:46:d0:3b:d3:18:
a5:eb:62:96:02:b4:87:fb:08:3e:8f:db:bf:e1:df:69:77:90:
f0:ab:28:c8:60:93:57:d5:ad:65:12:93:0e:f2:73:ab:f8:b0:
f1:e3:a4:d8:f2:41:ac:31:6f:4e:35:2d:f7:ef:43:9c:35:8e:
a4:08:cc:2d:e6:c4:3f:02:df:5d:32:8f:e4:b0:67:bf:f4:b6:
90:c4:67:4d:f8:30:71:99:76:0e:c9:cd:b0:76:04:14:e0:31:
b2:19:1e:9d:63:7a:4f:b4:ee:54:f5:8a:93:22:3c:94:f7:e4:
eb:59:ae:9a:0f:36:4d:f7:99:05:82:59:f3:9e:0f:31:92:eb:
d7:ef:36:9f:7f:44:41:18:45:82:46:a6:90:c2:ba:48:45:38:
7b:54:ba:f9:0b:45:df:b5:69:04:b1:41:05:36:9f:ac:3e:97:
57:12:12:16:85:42:d6:d2:62:f7:9b:2b:28:4c:21:d5:b8:77:
55:e1:fa:a6:47:8a:da:8a:ff:98:81:78:1d:40:f4:31:ac:12:
a8:dd:c7:b8:98:58:53:a6:16:2c:7a:96:b8:2d:d0:e1:f9:32:
d9:b8:02:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:40:59 2025 by rpki-client