Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
File: mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft (raw, json)
Hash identifier: +vSjb30xNsEoyjBwKsXaJiUwjlfo/zLBfRNoTuzRUyM=
Subject key identifier: 7C:AB:97:03:BE:02:7A:5E:B7:51:44:CD:BE:AE:0E:F5:20:3B:10:6C
Authority key identifier: 98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF
Certificate issuer: /CN=98d2d8720a7835bdab53b45313381abb176d5dff
Certificate serial: 019684DA5A4238A732AD669B1F9691A4A3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
Manifest number: 043B
Signing time: Wed 30 Apr 2025 04:00:24 +0000
Manifest this update: Wed 30 Apr 2025 04:00:24 +0000
Manifest next update: Thu 01 May 2025 04:00:24 +0000
Files and hashes: 1: mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl (hash: cZVm39e3dAIBhLkvAOyexSjGXNp+K6Rzw2efgPoLCvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:5a:42:38:a7:32:ad:66:9b:1f:96:91:a4:a3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98d2d8720a7835bdab53b45313381abb176d5dff
Validity
Not Before: Apr 30 04:00:24 2025 GMT
Not After : May 1 04:00:24 2025 GMT
Subject: CN=7cab9703be027a5eb75144cdbeae0ef5203b106c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:6d:e6:5d:9d:e3:e9:7d:5e:aa:11:90:1b:
a1:be:8a:1f:d9:1c:9f:2b:e2:dc:9b:c6:a4:db:3e:
33:f0:3b:20:60:54:8a:df:43:43:08:d7:86:f3:8d:
3b:8f:f4:23:4a:6e:d4:0b:10:59:49:cb:9d:d3:5c:
8b:a6:c8:4d:75:1c:b0:9d:99:58:29:ac:c8:02:1b:
f9:ec:ed:b4:49:84:b0:29:cd:e1:f6:58:d3:9f:a1:
bb:82:f2:da:f2:f1:e4:cb:56:5b:5d:40:76:70:6d:
1c:c2:64:27:dc:b6:ea:ed:b9:4a:b3:65:90:45:b5:
a6:21:fa:87:c4:cc:40:57:35:19:89:1a:6c:ae:03:
05:8e:79:41:3f:a7:9b:7e:09:8f:1d:72:ab:3a:0b:
1d:b1:70:0f:98:16:51:ff:44:34:ba:7c:20:90:f7:
5b:d1:93:7e:48:71:37:c0:67:e6:fc:7c:17:66:57:
43:ef:23:75:20:32:64:be:05:8e:86:b9:12:cf:7b:
29:da:2b:d1:32:ac:65:ee:97:b5:48:9f:7e:ac:cf:
a2:74:d6:5b:c9:a3:8d:a3:df:29:9f:5b:cd:1d:ce:
6c:01:37:51:73:59:4e:fe:8a:05:aa:fa:29:57:1e:
8c:a4:bf:60:04:c9:b8:fe:5d:9c:f8:8f:ae:25:cc:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AB:97:03:BE:02:7A:5E:B7:51:44:CD:BE:AE:0E:F5:20:3B:10:6C
X509v3 Authority Key Identifier:
keyid:98:D2:D8:72:0A:78:35:BD:AB:53:B4:53:13:38:1A:BB:17:6D:5D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNLYcgp4Nb2rU7RTEzgauxdtXf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e44f80-c691-4129-a961-f320ba5a44da/1/mNLYcgp4Nb2rU7RTEzgauxdtXf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8e:bb:f8:52:cb:d8:8a:cb:a1:a7:33:40:54:18:47:b5:c5:
a6:11:3f:74:1c:8e:d4:d0:c2:2b:cc:d7:1e:db:39:1c:21:04:
f0:59:2f:29:5e:70:de:e2:e5:24:60:6d:49:d1:c0:cb:62:f4:
4e:6e:2d:87:7d:2f:07:c2:e7:7f:5c:4c:ac:93:a0:17:c6:29:
da:53:6c:7a:75:89:a5:48:c3:86:79:a7:3a:40:c9:c6:6c:12:
dc:f1:85:5a:f7:de:35:c1:56:16:b9:40:d8:d3:f2:2f:d9:14:
62:2f:0c:ed:29:f3:26:4d:96:49:71:a1:9a:b9:89:98:13:a9:
50:d1:39:d9:cc:cc:6a:83:de:f2:e1:d8:43:bb:f9:c2:94:a4:
15:d8:bd:76:c1:d3:e3:1a:e7:cc:0e:bb:fb:d7:fe:a8:38:e3:
ba:82:09:1e:88:e4:ca:4e:e3:1c:6d:63:43:20:a2:bd:37:1a:
0c:b6:d4:c1:43:b3:d4:9f:79:8f:7b:16:d2:0d:25:35:56:86:
65:ce:c5:b4:3a:09:55:1c:44:b3:cf:23:53:70:95:70:64:88:
5e:36:59:c3:d0:d5:52:e8:1b:8c:3b:7b:67:d3:05:93:85:0a:
aa:f8:81:90:f0:5d:ed:bb:4a:e9:4e:d0:eb:cd:80:67:16:50:
1b:01:cd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:47:13 2025 by rpki-client