Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
File: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft (raw, json)
Hash identifier: RbD8h/Y5bqvVMP3vh7XW/deZpxyaGKukH7ThIIeqUCA=
Subject key identifier: DE:6A:8F:A0:B4:96:B8:32:DE:D0:B6:83:5B:11:88:0D:A7:4F:3F:A6
Authority key identifier: 9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
Certificate issuer: /CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Certificate serial: 019677563D843735C202E62347985FB55698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
Manifest number: 054F
Signing time: Sun 27 Apr 2025 13:01:02 +0000
Manifest this update: Sun 27 Apr 2025 13:01:02 +0000
Manifest next update: Mon 28 Apr 2025 13:01:02 +0000
Files and hashes: 1: mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl (hash: qKxhGilN/tBB+2JvdDmmcQ4GYTg82aHLy1/dxLx57Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:3d:84:37:35:c2:02:e6:23:47:98:5f:b5:56:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab0240150ac0d9df3bb9c572e31c87585882069
Validity
Not Before: Apr 27 13:01:02 2025 GMT
Not After : Apr 28 13:01:02 2025 GMT
Subject: CN=de6a8fa0b496b832ded0b6835b11880da74f3fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:bb:a9:47:8f:63:5d:e5:6b:ff:55:ec:62:
eb:bf:e2:c1:30:9b:c7:e3:41:f1:e1:a6:c6:1c:25:
ea:37:49:c1:84:ca:57:11:06:c4:53:02:b7:f3:cf:
2d:86:49:e1:19:46:4a:93:0a:4a:db:44:57:96:94:
19:a6:6d:4d:af:ed:ae:84:31:ab:e9:24:87:d7:d0:
df:11:cb:b7:91:e3:9f:db:0f:24:07:3c:83:fd:31:
39:88:0c:a6:88:d2:ae:ac:cb:44:45:74:62:f1:54:
52:54:a2:43:f2:ac:87:9a:fb:56:7f:f0:b0:92:5a:
03:5b:47:0e:b6:41:ed:0b:47:22:18:be:09:5c:cf:
b6:fa:c0:2b:bd:3f:88:24:38:47:ea:a3:dc:6c:b1:
98:fb:e9:28:f2:cd:4a:e8:6f:6a:7d:7a:97:48:7f:
5f:80:6c:03:4b:fc:8f:c6:47:4a:51:b7:9c:af:3b:
bb:f8:76:2f:e3:ba:89:d9:30:2a:fa:18:f4:cb:8d:
33:42:28:d0:91:f8:1e:97:82:d1:ea:3a:ad:6e:3b:
8b:48:52:87:28:31:fd:5e:f8:3c:65:ed:02:ae:5e:
34:00:bb:36:7f:94:64:41:6c:66:70:44:75:9c:52:
f9:31:fb:ac:28:17:01:9e:bc:54:03:b3:ba:61:83:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6A:8F:A0:B4:96:B8:32:DE:D0:B6:83:5B:11:88:0D:A7:4F:3F:A6
X509v3 Authority Key Identifier:
keyid:9A:B0:24:01:50:AC:0D:9D:F3:BB:9C:57:2E:31:C8:75:85:88:20:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b9e1d-3e88-448a-8371-a2240f38761c/1/mrAkAVCsDZ3zu5xXLjHIdYWIIGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fb:8f:99:c0:f9:61:a9:19:fc:b1:47:39:60:12:b2:7f:42:
54:e7:88:69:e0:d1:15:59:8a:79:73:b0:7e:33:4e:01:52:b9:
27:ab:b7:7d:67:96:97:4e:56:ba:a3:49:ca:2d:05:a9:fc:ad:
bc:1c:be:c7:3e:6f:e9:5e:fa:8c:2b:d5:e9:9b:38:03:97:0c:
2c:1e:51:77:e1:52:c1:c7:98:cf:77:c9:84:da:9d:66:7b:e5:
ef:32:f8:9f:99:98:4c:8d:c3:13:84:1d:09:45:4e:68:37:45:
a1:07:ee:b4:53:94:e5:c8:ad:d4:ac:01:32:0a:de:78:cc:c5:
5e:fe:e1:71:02:f2:82:cb:4d:d6:d7:8b:cc:af:79:ea:78:df:
70:49:dd:91:4c:d1:33:02:a4:0b:13:32:b1:53:10:cd:11:6c:
b7:10:fe:2b:37:23:aa:83:7c:45:e0:9f:36:93:7d:06:31:45:
86:21:d6:dd:b2:de:37:be:e8:5b:33:3c:c1:24:81:de:cb:59:
df:82:7d:f6:69:b3:c7:d4:46:18:de:72:b9:26:71:c2:2f:aa:
11:7b:65:6a:b0:3c:24:1f:69:49:4d:0c:57:ef:07:f5:56:1e:
cd:0c:c8:18:71:34:9e:d1:e5:03:15:c3:14:19:0d:b9:db:3e:
74:68:a8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:29:56 2025 by rpki-client