Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
File: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft (raw, json)
Hash identifier: X4vcy+jfgHvJo6nsbQORcvWU2cQJgAkRb23sQ6tK2Yo=
Subject key identifier: 2B:46:9F:A6:5C:B2:CF:CA:04:D8:E6:D4:24:FC:81:78:6A:42:E8:48
Authority key identifier: F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
Certificate issuer: /CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Certificate serial: 0196C53A66B702DA18ED07AA4C7127BD2171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 16:01:01 +0000
Manifest this update: Mon 12 May 2025 16:01:01 +0000
Manifest next update: Tue 13 May 2025 16:01:01 +0000
Files and hashes: 1: 8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl (hash: j81Xsw8Cjk4I5mCTD+z6qUA8t7rlwz6YDZDM4jKN8+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:66:b7:02:da:18:ed:07:aa:4c:71:27:bd:21:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3fc4ef232ae2394e888544f52ab08b17afe3248
Validity
Not Before: May 12 16:01:01 2025 GMT
Not After : May 13 16:01:01 2025 GMT
Subject: CN=2b469fa65cb2cfca04d8e6d424fc81786a42e848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:45:e5:b8:7c:de:95:5e:b5:58:e6:19:0e:
74:73:0a:c4:13:9e:bb:a6:f3:48:ce:de:b6:fe:61:
32:81:9c:ff:61:e3:dd:8a:df:3b:f0:84:16:b8:aa:
3a:46:7c:e2:4c:f3:ce:1e:5d:dc:d4:59:3c:11:3e:
d5:c9:9d:a7:f6:5e:cf:0e:e7:ed:2b:ab:c2:7c:76:
da:c9:01:96:2e:df:15:09:d4:e4:b8:9a:2f:6a:21:
fb:3f:2d:87:66:e2:40:9e:68:36:3c:a2:9d:b4:9f:
e4:1b:6f:d8:53:9b:dd:91:d2:10:fe:96:bb:1e:7a:
50:7c:9f:32:cd:5f:41:31:08:a4:ef:c5:d6:a9:53:
0b:3e:f5:2d:3e:84:75:4c:c4:86:8f:ec:35:11:54:
31:59:82:19:14:16:91:09:a8:ad:5b:38:72:95:dd:
8b:08:70:c9:e4:e2:23:6a:69:73:55:74:3d:e7:96:
75:85:59:53:72:fb:8f:63:df:ae:4a:fb:ba:f9:b9:
03:ae:14:ea:07:a2:46:9c:2c:ac:97:20:f6:f2:83:
72:89:eb:10:c5:3a:81:9c:80:9a:41:e6:ff:49:0e:
22:44:38:94:3d:4c:8e:54:d9:fc:47:7d:d9:db:71:
90:b4:07:f8:85:2d:8b:44:a1:0d:94:5c:2e:0f:49:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:46:9F:A6:5C:B2:CF:CA:04:D8:E6:D4:24:FC:81:78:6A:42:E8:48
X509v3 Authority Key Identifier:
keyid:F3:FC:4E:F2:32:AE:23:94:E8:88:54:4F:52:AB:08:B1:7A:FE:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/937144-b86a-408b-bde1-935fb1bed2d8/1/8_xO8jKuI5ToiFRPUqsIsXr-Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c9:e8:3b:8e:9c:85:07:10:28:ef:a5:4e:0d:30:13:0b:dd:
b4:0a:99:ff:a9:39:fa:75:cd:ca:7c:73:4a:79:18:79:0b:79:
8f:84:95:ec:0b:ff:37:d8:ea:4d:86:cb:ea:0e:89:88:cb:2a:
ac:56:bb:65:86:8e:aa:72:6d:ec:ca:f5:10:35:7d:22:d4:ec:
61:10:f7:ec:29:ad:80:b6:37:79:ad:13:40:f3:4e:6c:4e:57:
d9:16:cd:af:92:35:60:9e:d8:0b:bf:a1:69:32:fb:33:b9:9d:
9e:e9:56:30:4a:9b:59:14:6a:03:c6:55:e4:86:c1:c9:dc:f4:
25:ad:03:0f:9b:8f:5d:a0:40:3a:49:fe:cc:ca:ca:23:6d:aa:
62:4d:52:11:e7:77:93:d2:f4:91:ad:44:f5:f3:1e:00:bc:a5:
e7:72:86:7b:33:22:61:82:48:60:87:95:73:c3:46:7f:65:d8:
44:a7:61:99:9e:16:4e:f4:48:f8:00:dc:40:24:95:b3:4f:75:
56:1a:2f:7a:2e:57:b1:bc:4a:92:12:df:30:40:1e:e3:d2:47:
db:7b:7e:7d:43:e7:dc:b6:b4:bb:ab:ca:9d:f6:83:1c:a6:6c:
7f:08:50:95:6d:a1:4d:65:95:16:ac:7d:63:0c:28:bb:5f:e2:
3f:ad:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:10:19 2025 by rpki-client