Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier: PkH2e6SsIWnoBM/sYr7vnRJzq7JweXca7/r2nQEeAKg=
Subject key identifier: 90:9C:99:EB:57:58:8F:DC:C6:69:1F:79:B9:67:6A:4A:FE:08:F0:4A
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial: 0197696143DD4825C6359AB7B7655F8E4423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 13:01:11 +0000
Manifest this update: Fri 13 Jun 2025 13:01:11 +0000
Manifest next update: Sat 14 Jun 2025 13:01:11 +0000
Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: AsE6dPFfqw9NLCAKJ7mmW78WYpHriOCZshkAxyhfdoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:43:dd:48:25:c6:35:9a:b7:b7:65:5f:8e:44:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Validity
Not Before: Jun 13 13:01:11 2025 GMT
Not After : Jun 14 13:01:11 2025 GMT
Subject: CN=909c99eb57588fdcc6691f79b9676a4afe08f04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:2f:97:8e:7e:28:e9:c9:3b:48:b8:b8:07:
6d:98:34:65:6e:63:1f:cd:40:bc:fe:b4:fe:2b:cd:
b4:33:0a:f3:ca:21:ba:7b:2a:70:df:2a:cc:6c:c7:
3f:b2:79:54:c7:56:b8:51:5e:32:c9:d5:1b:3d:d6:
ef:a5:a5:91:cf:7d:d0:d2:39:a1:5e:21:4d:10:87:
87:9c:b3:c7:88:b4:7a:59:7c:bb:93:85:db:bd:68:
62:c2:ca:0d:93:fa:33:66:e2:41:72:1b:80:bf:a2:
2c:ea:7f:df:88:70:39:16:4b:ad:af:23:d0:70:2a:
60:7f:ca:25:ec:d0:36:74:ad:17:26:1b:8c:08:e1:
fd:cd:0a:1e:dc:95:e7:27:1a:92:cf:68:be:a7:0a:
0d:7c:77:fa:12:dc:2c:2d:c1:82:40:f1:d5:4e:66:
6e:a4:24:f2:bf:fe:7e:7a:76:fc:3e:37:c7:0f:7a:
54:04:6c:d6:3b:99:e8:3d:f7:57:ad:2a:92:c7:a7:
a2:5e:fa:c2:86:05:df:4f:2d:24:78:38:99:24:99:
63:b5:7e:5e:71:a7:fd:05:82:f7:dc:44:c0:fa:4d:
b1:a5:37:4e:d3:10:54:08:92:e4:3a:d0:f1:7c:1b:
46:d2:1a:4b:d5:8d:38:f6:c1:94:90:6e:1d:82:d1:
40:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:99:EB:57:58:8F:DC:C6:69:1F:79:B9:67:6A:4A:FE:08:F0:4A
X509v3 Authority Key Identifier:
keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5c:3d:c9:c8:fe:a3:dc:46:f3:a3:7d:58:96:b1:8f:50:0b:
8d:61:99:ff:1f:e2:8b:89:e4:71:81:6e:9a:26:19:27:4a:42:
e1:71:50:ab:0b:d8:0b:15:4c:f4:0a:4f:66:53:0f:9d:ec:f4:
bf:39:5b:fd:3f:b8:3b:91:a8:36:fc:11:6f:bc:eb:aa:67:fa:
cf:4c:85:c3:01:a7:6d:be:13:1c:4a:76:03:40:c9:8b:13:6d:
fe:3a:71:5a:5d:d5:2a:d5:47:7f:f6:21:7c:c4:e5:fa:82:4f:
2e:b6:c6:17:ed:85:dc:86:55:1e:9f:23:77:bd:01:e5:ab:f6:
02:4a:0a:3d:67:06:1f:fb:3d:da:c1:1b:86:01:49:a4:45:72:
20:f0:c2:15:f9:1e:40:d0:9d:de:06:80:a3:7d:5e:28:5e:9e:
62:c1:ac:74:6e:79:6f:7b:84:b6:b5:15:e9:d6:1f:3c:d3:c6:
2d:20:11:9a:18:4e:32:18:71:f6:12:c8:e2:4d:c7:0d:0f:f8:
87:01:a1:6a:86:6a:9d:22:6b:86:d3:44:c7:aa:1f:d6:3e:26:
f7:8d:e4:e6:66:1c:95:36:58:31:b1:18:18:a9:68:6c:e8:e7:
67:85:0b:f4:25:12:da:f8:10:83:5d:16:86:6f:f2:e2:7d:14:
ff:f7:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:46 2025 by rpki-client