Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
File: i7AWzMBcV2V0az92QtBD6BEgNwU.mft (raw, json)
Hash identifier: nCPpWauhr9giped8VT1MZsri2hm1pgvuV4GCejAjBrY=
Subject key identifier: 4A:DA:B8:4A:86:9C:B3:B2:24:5C:7C:60:6C:A9:F6:1F:91:2E:24:EA
Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Certificate issuer: /CN=8bb016ccc05c5765746b3f7642d043e811203705
Certificate serial: 0196B221122379F650FE533E1E7BD689850D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
Manifest number: 18
Signing time: Thu 08 May 2025 23:00:33 +0000
Manifest this update: Thu 08 May 2025 23:00:33 +0000
Manifest next update: Fri 09 May 2025 23:00:33 +0000
Files and hashes: 1: i7AWzMBcV2V0az92QtBD6BEgNwU.crl (hash: /o6F6vw0j9vFm3/CsD7yhj2VycQHqO3j5/+bFeYdy4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:21:12:23:79:f6:50:fe:53:3e:1e:7b:d6:89:85:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705
Validity
Not Before: May 8 23:00:33 2025 GMT
Not After : May 9 23:00:33 2025 GMT
Subject: CN=4adab84a869cb3b2245c7c606ca9f61f912e24ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:08:05:3d:ea:08:fe:47:53:c3:d5:ec:ab:
2a:20:91:fe:c1:28:d2:33:eb:aa:71:ca:95:17:ea:
de:64:5a:d2:ac:7f:57:12:c8:08:90:4f:21:1a:ec:
2f:03:ac:e6:52:85:1e:ad:a4:d5:a9:98:81:d4:9a:
40:0d:27:0d:ee:0a:56:5b:1e:a5:53:a2:34:9d:19:
a3:84:45:85:06:1c:5d:90:c2:d7:e9:e0:d2:a7:af:
83:26:13:f5:a1:84:b6:1e:11:6b:80:1e:da:f2:4f:
6e:3e:1a:93:1b:84:7c:ca:b3:06:02:21:c7:9b:97:
d0:51:c2:12:89:9a:da:24:c6:9d:10:8e:ba:b1:d5:
8e:0e:6a:23:21:96:7f:97:1c:dc:e1:e3:36:e7:d8:
d0:d1:84:ea:93:94:65:14:b9:eb:8f:a1:7f:ee:b0:
fe:07:0d:23:f7:91:6e:0c:4d:51:21:d9:64:47:64:
4b:8e:14:65:36:3a:f5:0f:1b:7e:99:b5:e2:60:b0:
38:4f:99:fe:33:f0:08:e3:ce:6b:a8:bc:2e:20:12:
82:f4:92:d8:d2:30:9a:d4:c7:99:0e:8f:9a:2a:22:
13:c8:14:98:e7:50:7e:44:52:62:92:80:b0:13:12:
61:0f:87:25:4e:f9:d7:fd:48:bf:a2:b7:f8:6e:32:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DA:B8:4A:86:9C:B3:B2:24:5C:7C:60:6C:A9:F6:1F:91:2E:24:EA
X509v3 Authority Key Identifier:
keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:75:88:9d:cb:51:35:d9:96:9f:15:74:c1:34:64:6d:01:29:
92:f4:8f:6f:8c:66:68:76:af:1f:7b:0a:6e:cc:9c:9b:c4:5b:
85:41:51:02:43:af:20:be:ec:f0:90:9f:57:d4:a2:c8:a9:58:
cb:82:7e:71:57:da:3a:65:90:22:3e:19:66:3f:65:1f:4d:d2:
08:39:00:40:89:1f:8b:f5:e3:bb:50:88:0c:5d:ee:5e:36:29:
07:45:40:2f:11:bb:7d:6a:20:87:c4:a7:16:79:f7:1a:51:32:
74:28:f5:bb:0e:2f:ef:90:e3:4f:e8:d5:35:f8:3d:5b:29:51:
25:d0:da:15:4c:79:00:7d:9d:16:bc:4f:79:44:cb:5d:57:dd:
12:1e:d9:01:02:3f:77:ec:1e:77:42:08:00:f3:77:0a:fa:a2:
8f:49:35:8b:b6:22:19:6a:8b:23:45:09:72:56:ee:28:d5:26:
84:be:9e:66:2b:77:f6:f5:2e:a6:09:89:ea:62:2c:da:15:36:
85:76:cf:3f:f8:15:48:31:d3:46:cb:51:b2:47:fa:5e:49:c6:
e3:dc:83:2a:09:88:3d:79:90:56:c3:29:52:b7:68:a4:b7:e0:
6e:ee:d7:08:b6:a9:fa:95:4e:f3:84:d9:61:94:2c:4e:1d:59:
57:3e:af:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:31:42 2025 by rpki-client