Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File: mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier: H2ORRk5qMEn/75JSK0IpiadjCs9Pk1Qg+Y2mH7qCtIs=
Subject key identifier: 5D:70:9D:BC:E4:94:C1:C1:50:B5:07:F7:11:80:94:AF:C5:F7:29:3B
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer: /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial: 01967D8EC7A19E214CB9E3C3B5F1E90990F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number: 0252
Signing time: Mon 28 Apr 2025 18:00:31 +0000
Manifest this update: Mon 28 Apr 2025 18:00:31 +0000
Manifest next update: Tue 29 Apr 2025 18:00:31 +0000
Files and hashes: 1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: TyVo7351sc4zdQ+Lj7lyPecw2W4Gk6+K0MrN3+RVzm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:c7:a1:9e:21:4c:b9:e3:c3:b5:f1:e9:09:90:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Validity
Not Before: Apr 28 18:00:31 2025 GMT
Not After : Apr 29 18:00:31 2025 GMT
Subject: CN=5d709dbce494c1c150b507f7118094afc5f7293b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cd:5d:80:39:b6:80:ee:cc:1b:0c:1c:3d:60:
b2:a4:c8:f7:4c:80:02:a4:8f:85:c5:df:19:1b:95:
73:47:64:3a:c3:1f:33:b8:40:35:00:a2:bf:d8:71:
d3:68:3c:d3:53:46:2d:1c:21:d8:9b:85:36:0b:00:
1f:62:79:89:07:fd:ff:fa:b9:46:2e:e3:60:c6:f9:
e5:ea:7c:21:5f:41:ac:39:ac:38:71:2f:50:7e:d7:
d2:dd:86:ab:cc:aa:28:b4:a1:e0:3e:aa:0e:b6:a9:
2b:93:8c:6b:37:31:33:66:9f:e0:de:fa:da:3c:c0:
45:90:0d:c3:04:b0:92:d8:c0:d8:2d:e6:3e:0f:26:
8c:d9:29:fe:cf:95:69:ca:2c:1a:75:f8:8e:86:2c:
f0:05:f1:38:98:ba:d5:7d:98:36:48:df:f7:76:24:
85:85:73:88:06:4b:03:e4:be:a9:b7:07:2f:26:14:
f9:28:85:5a:be:1a:31:5e:89:aa:86:c5:28:f8:f0:
23:6b:55:c8:8a:b4:45:ec:f8:04:ae:21:4c:6f:04:
46:cd:9c:da:ad:03:31:94:58:dc:6f:23:36:a9:e3:
04:b6:77:11:fc:fb:b4:ba:3b:6c:96:70:e4:82:bb:
08:d2:d3:b9:03:08:4e:e1:ce:f9:06:46:48:52:16:
95:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:70:9D:BC:E4:94:C1:C1:50:B5:07:F7:11:80:94:AF:C5:F7:29:3B
X509v3 Authority Key Identifier:
keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:64:f5:80:be:13:2f:a7:21:ca:c2:08:f2:a0:8f:d8:5b:85:
2a:1b:28:94:e9:a0:f3:be:3d:be:2a:34:76:72:61:cf:69:12:
ee:54:b9:1b:f5:27:1c:ab:52:61:86:c7:12:ce:04:3b:c8:17:
cc:46:3f:93:ce:f8:94:79:23:00:0f:da:30:bf:8a:a6:53:53:
1f:76:3d:ed:bd:b9:d8:2e:5a:12:21:23:bd:0f:24:d7:6c:13:
d2:56:af:af:b3:8e:e5:5b:6c:b5:46:02:36:25:25:5d:29:02:
0b:a3:67:c4:b0:b7:ab:6c:db:cc:05:a8:00:9b:70:90:02:03:
c8:e7:28:4b:e4:74:8f:0d:b7:c9:a7:87:17:a5:39:42:5c:2a:
f0:f5:e9:7c:61:fb:ce:97:a2:9d:75:7d:36:c8:7b:81:67:f1:
c8:c4:cf:80:85:5a:3b:b2:22:84:71:4c:dc:41:10:cc:98:3d:
99:92:7d:6e:a3:86:92:a1:88:45:5d:9d:58:2b:ca:f6:75:ee:
d6:a5:de:9e:99:2f:af:9d:ba:f6:62:b5:bd:c0:d2:03:eb:6b:
95:3d:32:7f:8a:53:9b:0b:c3:75:5a:01:03:19:1d:4c:8c:5c:
2d:ab:4e:c7:70:f9:48:c5:57:ce:ae:e6:d3:6a:51:2f:6d:54:
b3:67:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:26:45 2025 by rpki-client