Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
File: cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft (raw, json)
Hash identifier: qYW4QsM3CqjPr1GFFELKyV7cpEOnNq3WsOJ3qZ7f9jk=
Subject key identifier: 6D:E0:86:92:2F:80:68:D7:2C:6E:65:6A:BC:07:54:6C:CE:7D:24:F6
Authority key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
Certificate issuer: /CN=726f9448a910d2574157a30403f46c1172aeedb6
Certificate serial: 01967567415B5F366E210E5A5F39C2592469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 04:00:23 +0000
Manifest this update: Sun 27 Apr 2025 04:00:23 +0000
Manifest next update: Mon 28 Apr 2025 04:00:23 +0000
Files and hashes: 1: cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl (hash: HKSErav7/Ju36dqgXbYR/5jFKDqzYoKZadNdgYUSf1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:41:5b:5f:36:6e:21:0e:5a:5f:39:c2:59:24:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726f9448a910d2574157a30403f46c1172aeedb6
Validity
Not Before: Apr 27 04:00:23 2025 GMT
Not After : Apr 28 04:00:23 2025 GMT
Subject: CN=6de086922f8068d72c6e656abc07546cce7d24f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:e9:95:e6:56:2b:c6:4a:6e:e3:68:d7:f0:
c3:43:3b:58:30:44:ff:69:98:98:7e:ea:21:64:5e:
17:af:65:9c:f8:20:7d:fb:13:3e:25:f0:f4:c0:95:
7e:61:ab:bb:c0:e8:64:a9:51:de:64:3a:b3:ff:e4:
2a:27:bd:8e:66:3d:89:ef:ab:7d:86:16:2f:28:88:
cb:9e:79:22:e6:f6:2a:e9:22:40:a5:d8:54:12:0d:
eb:85:e3:3f:49:89:9e:ba:c2:48:1f:02:01:32:6a:
31:a0:4b:a2:a6:89:83:88:47:8d:78:a0:e5:da:c3:
1b:74:92:07:fe:0a:9c:7d:1e:be:65:ca:7f:56:16:
6f:b1:7b:84:01:d0:84:12:31:b3:23:c1:bd:28:75:
cf:94:47:1d:4d:50:84:86:b7:27:f5:00:1b:f4:5d:
95:ca:d9:3b:45:f1:99:d0:ff:8c:63:9f:5a:c7:8b:
ca:8e:af:75:65:5a:9f:48:99:ae:af:3c:14:39:61:
ab:e5:a6:82:fd:65:48:cd:ea:10:42:c0:6a:36:6a:
06:2b:46:5b:7b:33:e5:6c:f7:be:14:6d:08:56:f5:
fb:67:91:fc:b8:7e:5a:7d:60:0e:ac:fe:08:b7:f1:
f0:45:5d:a6:e9:04:ec:3b:9f:c9:9e:78:2f:72:f1:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E0:86:92:2F:80:68:D7:2C:6E:65:6A:BC:07:54:6C:CE:7D:24:F6
X509v3 Authority Key Identifier:
keyid:72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bd:e5:b6:69:db:c5:96:20:f0:4c:65:1e:95:71:e5:db:2f:
7a:a8:4e:cb:59:88:aa:b7:e3:ed:24:53:12:84:37:11:95:7b:
1e:a0:d4:7a:54:19:56:79:82:cf:a9:9f:c6:45:65:7e:7f:b6:
ac:92:95:b4:d1:cd:3c:16:5e:2c:65:f5:c6:86:a6:13:f3:83:
5e:a2:fc:f4:ba:65:65:a6:cf:f9:e7:a9:4c:52:3f:90:56:e4:
ac:4d:49:d8:0a:61:c1:35:a7:d3:6c:ab:36:af:0e:79:b0:55:
43:b1:b2:3a:ea:30:98:24:1f:f6:18:67:8e:e5:71:9d:f8:05:
52:8e:b8:c9:cb:c4:8b:be:37:bf:ab:ad:95:83:74:a1:f1:4b:
50:d7:b5:ce:8f:ea:4f:3e:77:6d:11:08:76:74:f4:46:e0:54:
d4:2a:86:1b:b1:58:3e:3c:40:63:96:2d:42:da:12:31:8a:ef:
ad:7c:6a:d3:e8:6d:0c:c1:64:71:93:4a:17:a4:41:14:33:29:
a0:2b:ba:04:71:09:69:96:41:13:13:2d:7e:87:55:43:69:7a:
4a:dc:c0:bf:55:0f:ff:5e:4d:6c:8c:41:20:4a:d4:57:a3:a1:
85:b3:b5:ad:ee:ae:8c:62:ca:58:a9:86:a1:f0:7f:8b:ca:77:
c4:13:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:05:08 2025 by rpki-client