Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
File: sl8gfyfZGpE36LZdKQEpmHGqOh0.mft (raw, json)
Hash identifier: LbwjO/I97oKaCn2CwK+3KBM29vQwmn1GWgAMKFyra1Y=
Subject key identifier: 84:C2:F0:19:A3:3F:D6:86:15:95:88:07:6A:AF:91:27:6B:66:41:51
Authority key identifier: B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
Certificate issuer: /CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Certificate serial: 0196A9F9C73969FFC2C9D680699F3B834461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
Manifest number: 61
Signing time: Wed 07 May 2025 09:00:40 +0000
Manifest this update: Wed 07 May 2025 09:00:40 +0000
Manifest next update: Thu 08 May 2025 09:00:40 +0000
Files and hashes: 1: sl8gfyfZGpE36LZdKQEpmHGqOh0.crl (hash: 0fg4ZLa+TswpM2cFdUHbGYE18Zg/Pl6m8H5y/aQCFsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:c7:39:69:ff:c2:c9:d6:80:69:9f:3b:83:44:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Validity
Not Before: May 7 09:00:40 2025 GMT
Not After : May 8 09:00:40 2025 GMT
Subject: CN=84c2f019a33fd686159588076aaf91276b664151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:4f:48:b1:18:9e:7e:e2:b4:a9:6e:93:29:
ee:0f:8e:86:ae:35:28:be:44:50:5d:68:c5:a3:59:
a6:32:a5:d3:c1:70:a4:d2:b6:80:07:b1:cd:de:29:
b9:02:93:53:c2:e6:ed:bc:0c:fc:aa:71:d8:12:a2:
5b:f1:f3:0b:97:8a:08:d8:e3:8f:1a:e9:dd:f2:cd:
ca:be:03:17:9f:dc:8d:ff:da:60:c2:2d:72:fa:e7:
68:82:56:9a:cd:0d:ed:70:79:d5:9f:ed:7c:1a:28:
cd:f6:b3:0f:1b:a0:b5:d7:6a:6a:39:3c:f9:a3:cb:
9c:9f:b4:be:c9:2b:ae:b0:43:ca:89:37:62:91:9d:
a2:ef:ee:18:f6:42:12:4e:e1:8b:46:4d:ca:08:2f:
39:37:1e:a7:9b:4b:1c:20:78:a0:5f:a7:dc:ee:00:
ed:d0:0e:1e:9e:b6:cc:35:ab:3d:d3:6f:a9:ab:d0:
47:d1:31:fd:93:78:42:cf:44:2f:a0:5e:71:42:07:
8b:ec:18:76:5e:cc:6b:95:2c:db:1f:e6:5b:46:9e:
45:ad:dc:ae:42:a6:ba:29:d7:4b:b7:7a:f0:77:52:
a1:4c:9d:06:bd:89:b9:91:64:72:15:60:91:43:1c:
8a:d2:98:e5:05:2d:af:ab:79:a7:8d:c5:14:af:c1:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C2:F0:19:A3:3F:D6:86:15:95:88:07:6A:AF:91:27:6B:66:41:51
X509v3 Authority Key Identifier:
keyid:B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:de:e9:c9:33:6b:5a:6a:f6:44:f6:aa:05:35:9d:3d:c0:49:
0d:e6:71:94:82:5f:63:e7:22:9f:95:a9:ba:44:4c:e6:3d:7a:
c2:b2:2d:d6:61:b5:51:17:d0:49:1e:6e:57:b6:ab:10:0a:c7:
ad:a0:f0:88:b4:3a:f8:a4:75:a4:f5:da:12:be:dc:09:42:85:
7e:c0:5b:5e:b3:98:a7:d6:3e:0f:5a:cc:99:29:fd:46:aa:69:
a8:a8:17:70:f3:94:bc:3c:c7:02:ab:9e:45:c4:8b:60:52:f7:
74:61:68:a7:b7:92:4c:2e:a1:8e:b7:b4:be:c6:de:6f:4f:5d:
f2:cd:de:b9:c2:fe:cd:67:d3:01:c8:ca:22:f4:64:ee:a8:10:
9d:b0:35:a7:fc:f3:4a:b3:ec:b6:04:73:39:fd:99:07:95:6f:
7a:02:e1:b2:08:83:7a:bc:ed:f6:a8:8d:45:d7:25:b6:80:5c:
3d:70:d5:8b:c7:82:14:18:37:0b:8a:35:f2:18:d5:e5:c2:a5:
6b:f7:03:51:2c:fc:94:05:90:11:b3:26:15:b5:09:4d:ea:90:
c9:f4:43:14:e7:ad:e0:82:77:2f:15:e1:a2:89:32:e8:59:54:
28:8e:f2:ac:29:2e:4e:d1:39:fd:10:1e:09:14:69:1f:5c:b4:
92:0c:2e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:32:16 2025 by rpki-client