Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File: mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier: f5Javcc47lbpvU2Pl0HcbnGKzNVMzYr8SloZEC/reVY=
Subject key identifier: AA:0C:CD:62:70:8A:0C:5C:A9:0A:8C:A9:73:58:79:78:37:81:FA:C8
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer: /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial: 019682EC43743EACE3C25B60952E3568B103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number: 0CB9
Signing time: Tue 29 Apr 2025 19:00:43 +0000
Manifest this update: Tue 29 Apr 2025 19:00:43 +0000
Manifest next update: Wed 30 Apr 2025 19:00:43 +0000
Files and hashes: 1: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: B2fPGtYhqr0NzCTue/Yi84fJs6UPcEzlDbAFAOAxpFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:43:74:3e:ac:e3:c2:5b:60:95:2e:35:68:b1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Validity
Not Before: Apr 29 19:00:43 2025 GMT
Not After : Apr 30 19:00:43 2025 GMT
Subject: CN=aa0ccd62708a0c5ca90a8ca9735879783781fac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:02:00:e1:3b:f3:ee:98:5c:f7:33:05:4e:58:
b5:c4:dd:f2:61:13:9c:a6:e2:76:e1:f5:93:26:07:
b6:bd:29:ac:b8:d6:28:8d:8c:f0:0e:2e:ae:12:6c:
fc:28:17:de:5d:38:aa:e4:5b:73:ef:67:cd:1d:c5:
9c:83:65:0e:3e:0d:05:48:a2:04:3d:29:e1:4c:74:
3f:c8:67:98:f1:1b:ef:93:a0:12:eb:a8:6e:67:25:
c5:a0:51:11:c5:3b:b4:82:ae:b0:ed:99:14:e1:b8:
a0:b3:db:04:04:c6:72:0d:0f:2d:22:19:5d:7c:ca:
90:66:3e:21:b0:2d:f8:36:a9:40:7b:c0:41:00:78:
6c:f3:7d:e9:a0:4e:6c:39:7f:59:05:4f:bc:6c:3a:
b2:0e:b6:b6:dd:95:f3:7e:72:7f:09:b5:04:92:d3:
62:0b:9c:f5:4d:4f:7a:8a:91:9c:5b:dc:f5:ab:5b:
c0:02:16:b7:32:8e:a7:0a:4b:dd:56:f2:a8:18:27:
27:5b:cc:54:a9:ef:8e:25:dd:03:9a:dc:b9:cf:55:
ba:7a:77:c3:1a:f2:da:b5:f2:7e:ab:c3:c2:09:ee:
37:2c:94:1d:65:21:a3:ea:6f:7c:00:3e:9f:ac:8b:
d3:26:3b:db:f9:bb:76:5c:e3:ed:eb:8d:1c:72:a9:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0C:CD:62:70:8A:0C:5C:A9:0A:8C:A9:73:58:79:78:37:81:FA:C8
X509v3 Authority Key Identifier:
keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:31:13:31:b4:22:eb:13:57:b6:6e:f1:a4:67:a9:b4:d6:d9:
ba:1a:68:8a:fa:8c:28:8f:4c:aa:5e:f3:55:7d:52:0c:09:50:
7e:4d:50:55:d1:48:a4:54:63:95:18:38:25:23:b6:84:41:a8:
cc:39:8e:a7:12:ce:2d:4b:d2:69:4a:12:21:4b:ae:48:fe:42:
4e:ec:ac:4d:84:46:36:c6:34:b6:40:14:c2:b3:f8:07:60:79:
6f:ae:1f:00:39:92:36:92:2f:69:b1:53:08:20:e0:f6:d7:10:
6c:cd:52:21:a2:ca:ed:ab:6b:78:f0:87:49:99:cc:8a:2d:69:
3d:18:4e:3a:ba:8f:57:c2:4e:18:2c:39:d7:57:11:36:7b:5c:
a9:b4:9a:8c:e1:f4:c1:7d:16:b9:fd:e7:76:5a:0a:bf:e4:59:
09:6a:63:96:7c:30:82:16:ce:dc:cf:19:2b:0d:9b:45:22:4d:
51:8f:91:cc:08:59:d5:0b:ba:92:40:c2:70:5a:9c:f4:82:38:
de:a0:8c:40:fd:95:71:fd:17:b7:38:90:1a:9b:f3:d3:d7:85:
7c:ee:f1:b1:fc:a7:9f:3b:a5:75:8f:95:ee:f0:ef:92:99:bb:
e9:46:0c:4f:1f:0d:ed:b0:f6:68:5c:f8:61:a0:c6:d7:7b:95:
91:f0:cc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:54:54 2025 by rpki-client