Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier: yd58pU6njinsAnzYmheXE6vguru3yfYw5Qf+0ZOCvdY=
Subject key identifier: A2:AA:9C:23:39:AC:6A:AB:11:B6:76:CD:B4:05:A7:92:A4:D0:97:8D
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial: 019679B24100D1C7E65406AE109D188976D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number: 0240
Signing time: Mon 28 Apr 2025 00:00:47 +0000
Manifest this update: Mon 28 Apr 2025 00:00:47 +0000
Manifest next update: Tue 29 Apr 2025 00:00:47 +0000
Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: sEAY2NM5CszSlzpD14+6et5L/CHC+tFZY6Niwq3sAzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:41:00:d1:c7:e6:54:06:ae:10:9d:18:89:76:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Validity
Not Before: Apr 28 00:00:47 2025 GMT
Not After : Apr 29 00:00:47 2025 GMT
Subject: CN=a2aa9c2339ac6aab11b676cdb405a792a4d0978d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:25:b6:f3:62:4d:a7:b7:72:9f:1c:bd:b9:cd:
e4:7e:a8:0c:aa:e4:60:9f:c0:60:28:51:83:b2:3d:
af:ba:99:ee:74:e8:05:af:4c:6c:f4:d3:37:96:da:
9f:b8:79:de:3d:3d:10:e3:c2:a1:3d:57:07:f9:91:
23:88:2e:f3:40:a3:82:54:2b:8a:22:a1:cf:3d:00:
d6:d2:1f:37:ae:74:b1:52:09:52:67:59:b0:fa:63:
ad:3e:79:10:d6:09:d2:e6:3a:43:52:0b:12:34:34:
dd:8e:ca:c0:d0:87:6d:f4:cb:17:60:8a:02:ba:38:
18:17:f9:f4:a2:c0:eb:b9:02:7e:9b:68:db:07:af:
99:37:78:ab:5e:51:4f:6e:ed:4e:8b:05:dd:7d:59:
ff:61:f8:64:81:d7:f7:85:ef:b0:7e:9a:ef:82:e6:
18:b4:be:18:20:42:e4:1f:1e:93:d3:88:58:fe:b2:
32:55:f6:8a:03:1c:41:3b:94:63:e5:c7:ec:ae:91:
2c:bb:df:ec:83:40:83:f5:64:e5:d8:88:0f:26:34:
d2:84:53:ac:24:c7:e6:0b:46:39:57:e0:fe:5d:fb:
f3:7f:6c:22:54:2e:d2:7b:b3:40:65:76:4e:c3:f6:
22:91:5b:13:c5:66:a3:88:84:fb:9c:8c:e7:4e:e1:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AA:9C:23:39:AC:6A:AB:11:B6:76:CD:B4:05:A7:92:A4:D0:97:8D
X509v3 Authority Key Identifier:
keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c3:f3:a7:50:ef:ef:28:c1:ea:9a:54:0d:d2:9b:f3:fd:d1:
0f:46:8f:51:93:1b:2d:8b:06:6c:cf:09:b7:a6:0b:62:e7:f2:
5e:96:d2:39:1f:11:23:01:74:6a:7e:b8:4f:42:3f:b9:46:f1:
6f:cc:9d:12:6c:0f:8a:04:8d:77:63:49:ac:03:81:ea:3b:bb:
41:e1:d3:91:45:ff:3b:61:1e:e4:6a:28:bd:1b:21:e7:95:4e:
5d:c8:7e:b4:ac:f6:60:45:2b:41:9d:d5:42:99:f2:eb:37:14:
c9:b0:34:15:e1:9a:55:3a:81:b4:92:c2:10:bd:94:34:30:cb:
fa:01:43:84:1b:98:4e:d2:3e:cf:73:6c:ba:81:92:4a:33:0a:
ca:b6:fd:fa:bd:6a:de:58:f0:05:9f:33:63:63:98:f4:34:4a:
5a:e0:b9:81:c9:25:d6:a3:73:65:6a:e5:e0:4f:6e:80:62:49:
3e:1e:c5:19:6e:3d:ad:ab:ab:58:f2:de:a4:0f:f7:b3:44:55:
9f:ea:e9:7a:28:81:d0:65:8b:a0:33:85:3c:14:6a:f4:8a:d2:
f5:3b:54:65:f4:3b:bf:7b:79:ee:57:a1:a2:a4:7d:84:0f:47:
ad:ba:f8:db:fd:76:5a:21:2c:d0:dd:0b:06:d8:d6:fe:35:df:
58:4a:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:27:02 2025 by rpki-client