Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier: Bcda4YU/b5PJTRRVhca4Uo3KcRL0xCtOToYqFy+aw7w=
Subject key identifier: 82:95:D2:05:4D:B0:3C:5A:C4:75:2D:50:A8:EE:4A:E8:DD:6D:87:B8
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 0196BF6F70037D97989BAB140CF4989FF3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number: 05C9
Signing time: Sun 11 May 2025 13:01:13 +0000
Manifest this update: Sun 11 May 2025 13:01:13 +0000
Manifest next update: Mon 12 May 2025 13:01:13 +0000
Files and hashes: 1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: sG1aGpEzzqy8yuLtCXz/rKiCQsf7l/OS1rW2oKLPS0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:70:03:7d:97:98:9b:ab:14:0c:f4:98:9f:f3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: May 11 13:01:13 2025 GMT
Not After : May 12 13:01:13 2025 GMT
Subject: CN=8295d2054db03c5ac4752d50a8ee4ae8dd6d87b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:8b:d5:d6:8b:4f:3e:bf:5b:25:39:a8:1c:
0f:1d:0f:e5:e8:ee:79:2e:05:d4:32:b7:bb:34:4d:
d3:fb:4b:2c:5c:c0:10:6a:ef:c8:9a:f6:40:46:8c:
87:fc:bf:97:b1:80:f2:38:3a:35:92:35:1b:93:66:
97:fa:25:e5:3b:57:74:62:35:e5:01:55:4d:69:61:
a0:0b:86:56:1c:9d:7d:82:a5:29:e0:e1:5e:fe:88:
3d:ee:b6:95:ff:1b:59:cb:86:ff:26:cc:ef:f3:51:
ce:49:76:20:e8:80:9a:99:08:50:34:5a:27:3d:7d:
6f:8f:62:05:8f:b3:f2:22:b3:fb:e3:0e:d0:dd:bb:
75:7f:13:5b:d8:bf:cd:3f:59:06:77:61:9d:86:86:
24:1e:a7:bf:77:ba:91:f0:ba:70:2e:ce:7f:58:30:
15:71:73:bc:aa:6e:a0:59:35:50:bb:9a:a8:a0:51:
b1:3a:32:64:d9:e5:ce:e3:aa:f2:04:28:91:9a:65:
45:44:f5:97:8d:c6:ba:fd:55:6a:d2:00:c5:6f:96:
43:03:8e:1a:9e:c6:60:9c:8e:62:86:2e:e9:26:29:
b6:3d:d7:6f:6a:09:a7:13:30:78:36:15:bd:d7:bc:
7d:dd:5c:d7:64:5d:bb:1f:14:43:08:c7:13:ba:e4:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:95:D2:05:4D:B0:3C:5A:C4:75:2D:50:A8:EE:4A:E8:DD:6D:87:B8
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1b:56:53:c3:d6:9f:b1:b1:72:4e:b1:95:fa:2a:2b:c5:77:
f3:8d:36:85:cf:a0:5c:25:9c:d2:26:76:c1:6d:b3:5d:e5:e4:
92:c9:bb:c3:fa:ec:c2:d1:1e:54:58:7f:b8:68:c8:84:d9:f3:
00:f4:e5:92:4d:88:6f:e1:88:79:7f:3a:88:7b:6c:ab:c8:84:
29:43:fb:c2:2f:1c:10:71:65:b0:2d:39:b7:8b:17:40:7e:21:
f5:08:ec:a1:f0:96:29:9a:2b:a0:de:c4:10:0e:a1:28:95:a2:
58:e8:ce:f4:e2:f2:71:a5:81:4f:81:eb:66:79:3c:f8:de:3b:
64:e9:84:96:ea:b4:c3:93:bf:dc:ee:06:56:4d:e1:d8:a4:46:
e5:35:29:af:98:1d:0c:36:73:2d:8d:84:d6:4b:9a:e4:ab:01:
ca:9f:50:96:b6:f4:5d:61:d3:83:0e:05:2b:87:be:0a:5d:7c:
35:a3:63:99:a1:2f:6f:cc:85:98:87:0e:f8:4c:6f:a3:7c:e7:
cd:5e:5c:eb:9d:b8:cc:5b:4c:d7:82:f7:e4:af:7e:d7:d8:d9:
f3:a4:b6:0f:29:93:76:93:09:29:c2:89:f6:b2:b7:27:24:94:
49:1f:81:79:82:cb:5b:8b:a1:3c:6d:e3:6c:8c:f6:ab:ce:7d:
f2:a5:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:54:05 2025 by rpki-client