
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
File: MOEXssTnX9dTA9FNsD6eL0tyK4g.mft (raw, json)
Hash identifier: lKZRd5kTt6ivWTfnX3dCb0QBj9SB5ufHIhFJDPyE0Rw=
Subject key identifier: 82:7C:72:DC:A8:4E:01:4C:41:B7:9D:F4:E8:47:A7:3B:DB:83:2D:C6
Authority key identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
Certificate issuer: /CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Certificate serial: 01967C44F20D4497400D64AFBA6A90761988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
Manifest number: 86
Signing time: Mon 28 Apr 2025 12:00:15 +0000
Manifest this update: Mon 28 Apr 2025 12:00:15 +0000
Manifest next update: Tue 29 Apr 2025 12:00:15 +0000
Files and hashes: 1: MOEXssTnX9dTA9FNsD6eL0tyK4g.crl (hash: G/hZ8Ru+yHqrV6BeaRIJvGYScKyHTEnfjELAlFN9EPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:44:f2:0d:44:97:40:0d:64:af:ba:6a:90:76:19:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Validity
Not Before: Apr 28 12:00:15 2025 GMT
Not After : Apr 29 12:00:15 2025 GMT
Subject: CN=827c72dca84e014c41b79df4e847a73bdb832dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:70:f8:5b:38:c7:2b:13:a7:69:06:ce:8c:
5f:78:d2:70:ca:f7:77:4e:28:e4:af:39:46:0a:8c:
f7:96:a8:0a:a8:2c:e8:29:1a:fd:38:9f:a3:ea:fe:
0b:1b:f2:77:e8:ea:97:96:6e:b7:95:b4:08:6d:d0:
d7:c3:31:73:9a:e3:f4:4b:b3:ad:86:6a:bc:04:23:
2c:f5:75:fa:2f:41:ba:37:e7:4e:43:a1:60:9a:a8:
54:ed:74:39:da:71:6c:7d:7d:6b:f2:2c:01:f2:6e:
81:5d:cd:f0:d4:84:2b:12:00:79:59:a1:7f:37:6e:
82:14:a8:02:4f:0c:b1:82:9c:cd:d3:19:38:be:2d:
76:72:c8:b9:19:81:ea:78:15:08:4e:d7:e3:e5:6b:
48:bf:a7:e8:83:dc:c9:9a:c8:3f:8b:37:e8:29:45:
42:5e:e0:fc:e2:cb:cd:12:de:99:e8:84:75:45:85:
ec:fa:de:32:b1:02:f8:43:12:71:13:02:87:12:7b:
96:9d:0e:10:5a:da:c2:19:aa:75:3e:e9:8e:37:6d:
db:67:e7:37:d1:23:f4:0b:6b:51:e7:a2:30:6a:d3:
6d:31:ad:a9:7c:2a:da:5a:c2:f0:2b:69:1c:c8:9e:
73:bc:93:3b:d2:f0:cf:a4:cd:73:e7:86:a4:3c:4f:
43:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7C:72:DC:A8:4E:01:4C:41:B7:9D:F4:E8:47:A7:3B:DB:83:2D:C6
X509v3 Authority Key Identifier:
keyid:30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:05:4c:8f:5d:13:03:38:fb:36:fa:cd:c5:b2:2a:4a:a8:23:
57:19:2e:c4:a5:a6:7d:3e:b7:49:ac:5c:30:7b:63:07:ec:9e:
bc:a9:9d:ff:f1:f5:ae:af:7c:13:fe:11:0b:97:18:72:a3:3e:
4e:ba:47:10:91:dc:47:5f:33:4a:f1:cc:a1:b0:23:0f:e5:c2:
f2:d3:e3:d9:4b:14:4c:bf:0c:4e:ca:e6:55:4a:3e:88:5a:b1:
29:e6:bd:fa:8b:af:08:4e:23:ed:73:1d:da:7d:a9:dc:eb:43:
14:50:32:1a:ba:22:13:8c:28:57:3d:d1:f3:69:fa:f9:50:ca:
4f:97:36:d5:c5:db:03:94:f6:7a:21:c5:ad:44:3f:00:c7:ba:
07:18:0f:67:fa:0f:7a:08:21:aa:35:20:7c:5a:ac:78:2c:e0:
d8:85:a9:65:8b:17:45:a4:d5:2f:98:45:58:b5:90:e4:6e:53:
45:85:f2:c6:0c:ab:a0:51:fa:bc:f1:e2:87:70:ff:0d:8b:22:
42:9d:2f:d5:98:41:0e:34:cb:8c:ce:c8:9d:8a:7f:0e:17:12:
61:4b:5d:a5:50:11:ca:07:99:70:47:a0:4a:bc:70:50:5e:e4:
17:e2:28:ab:24:54:15:d5:84:fb:d0:c0:01:54:75:fb:67:ff:
51:fc:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:04:20 2025 by rpki-client