Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
File: mfseX91w4MDmCIWjBYH-DAJBDX0.mft (raw, json)
Hash identifier: AY54x0eUR4AvPqck5/1aL7PKsfFdnfDT26bf8/pE2/0=
Subject key identifier: F7:43:AE:77:B8:69:C8:17:CD:AB:71:E6:AD:A9:61:DA:52:5E:61:0E
Authority key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
Certificate issuer: /CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Certificate serial: 0196760CD934230BFA2FD046E1C3D45494E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 07:01:15 +0000
Manifest this update: Sun 27 Apr 2025 07:01:15 +0000
Manifest next update: Mon 28 Apr 2025 07:01:15 +0000
Files and hashes: 1: mfseX91w4MDmCIWjBYH-DAJBDX0.crl (hash: 7BRZCaQvElN/twR068JIcCRXyF/YvYUDiRlc/+ABpXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:d9:34:23:0b:fa:2f:d0:46:e1:c3:d4:54:94:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Validity
Not Before: Apr 27 07:01:15 2025 GMT
Not After : Apr 28 07:01:15 2025 GMT
Subject: CN=f743ae77b869c817cdab71e6ada961da525e610e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:99:de:f1:17:bc:91:39:34:e2:6d:72:4d:
c3:a9:46:92:45:01:7f:dd:5d:01:c6:59:c8:3a:6f:
f3:87:39:e8:4a:4e:6c:07:f3:ef:dd:c1:89:6d:f1:
7f:0d:95:9e:34:69:60:0f:54:71:67:88:82:8c:3a:
50:a4:c2:a4:5b:c3:ea:ef:47:8b:e7:87:d6:eb:93:
7e:4c:0b:db:97:9a:40:9c:24:17:ae:a3:44:2a:bc:
eb:9e:23:15:60:44:9e:51:d2:9f:1c:ff:4e:52:d3:
c7:88:32:d6:ff:47:7b:0f:8b:34:57:c3:7a:c6:21:
ac:74:0b:41:45:0b:06:17:74:20:d4:7f:c5:97:bc:
e9:39:07:30:91:ed:24:33:0f:17:1b:24:fd:89:97:
29:40:6b:79:3d:cd:19:bb:00:dd:09:0c:81:49:52:
8c:6a:39:1e:ed:e0:38:04:89:9e:61:7e:64:11:e9:
dd:de:f9:8e:10:0b:4b:8d:0b:0c:81:be:ba:cf:e4:
d2:04:1d:53:d4:3d:70:f6:fe:da:89:2c:1a:e5:19:
92:5e:e5:4d:b9:ed:00:25:5a:54:c2:c6:87:3e:4c:
1a:a8:37:cd:82:53:88:cb:74:89:26:7b:95:97:f2:
ca:e2:ed:b2:61:c0:77:38:94:b4:8f:f5:7c:e1:de:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:AE:77:B8:69:C8:17:CD:AB:71:E6:AD:A9:61:DA:52:5E:61:0E
X509v3 Authority Key Identifier:
keyid:99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:14:a4:ff:06:c1:07:45:4f:72:63:00:63:b5:2d:03:fa:99:
f1:93:79:9c:4b:6e:da:6c:4d:2c:6f:c4:2b:c5:61:fe:38:e9:
ce:00:f5:0a:07:61:39:29:8c:75:1d:06:0a:d5:3f:bb:36:1e:
e4:b7:6c:4d:4e:eb:51:7a:2c:8c:18:8c:9a:54:fc:3a:ca:1a:
66:ea:14:f0:85:99:bd:2d:ca:2f:16:a2:10:f1:55:37:95:4b:
03:b8:83:fd:ad:3a:26:54:d2:fc:98:8f:d3:79:3e:c1:7f:65:
6f:d8:46:cb:71:3d:5e:ab:21:77:6c:a9:c8:71:d4:c6:3f:c4:
c1:cc:3b:9d:82:f1:1a:f9:24:ea:bf:67:74:15:4b:dc:5c:6c:
46:33:67:3c:9a:1a:49:c9:ad:88:66:fd:be:93:99:6f:16:28:
7f:13:7e:f2:5d:97:f4:3d:e1:f4:e3:54:5d:0f:b8:9a:51:6c:
58:74:5e:62:05:b1:89:9d:cc:bc:55:92:27:68:cf:b6:6c:08:
60:38:2c:03:b7:3c:0c:6e:f0:52:76:9c:05:f6:3d:73:80:4b:
08:9c:0c:22:60:76:53:81:a2:d3:53:b7:a8:fe:20:6d:29:e7:
ba:8c:b5:a3:77:c3:1b:83:c9:14:dd:74:4b:4e:0b:c2:bf:b0:
44:a2:97:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:08:55 2025 by rpki-client