Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File: mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier: fJ9JYUUdNLfHnCt1Rbxxh9AVLO5a60EK8iYVUdjRT80=
Subject key identifier: 1B:2E:CE:7F:91:C7:6D:C8:92:1E:E8:32:FB:0F:01:72:B3:78:57:B7
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer: /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial: 019770E36876987F25E736F2022B66DF8870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number: 02D0
Signing time: Sun 15 Jun 2025 00:00:40 +0000
Manifest this update: Sun 15 Jun 2025 00:00:40 +0000
Manifest next update: Mon 16 Jun 2025 00:00:40 +0000
Files and hashes: 1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: EnQMI+LdGBvPLt2I5IYV0CTKpdTbKOS39igMjBuO7ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:68:76:98:7f:25:e7:36:f2:02:2b:66:df:88:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Validity
Not Before: Jun 15 00:00:40 2025 GMT
Not After : Jun 16 00:00:40 2025 GMT
Subject: CN=1b2ece7f91c76dc8921ee832fb0f0172b37857b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:0e:b0:54:a4:69:70:ea:c6:d3:92:5e:ce:
1d:31:14:86:af:62:51:c1:0f:62:f4:a5:3d:75:18:
5c:61:f4:7a:2c:46:fd:7f:cf:5c:0d:3e:1c:c5:40:
1c:5d:c5:a2:ba:6b:9d:73:87:32:03:5f:0f:28:fc:
fa:21:a8:9b:c0:93:3d:ac:8c:6c:f0:86:8e:0d:85:
e1:92:34:0f:ff:63:b5:b3:b3:07:43:85:a7:d3:84:
23:2f:7e:d5:07:9d:06:8f:a6:43:24:44:96:90:94:
98:fc:1d:d0:53:6f:2e:79:10:8e:48:16:49:ae:ae:
45:06:53:f5:81:76:0a:1c:f2:82:55:84:ae:1b:ba:
ac:68:6b:87:fc:78:ce:70:43:a4:20:56:01:0f:3b:
7b:63:bb:8b:99:95:db:78:89:04:93:be:ef:44:f0:
2d:9a:13:6e:a9:91:39:af:b9:9a:19:a5:3a:fd:2f:
82:fe:53:c9:4c:32:87:f8:07:2e:bc:12:16:7b:12:
06:3a:90:9b:c1:ac:f4:21:e1:44:e6:6e:a3:24:ec:
e0:c8:64:47:c4:27:b6:4b:ee:57:5f:c8:76:95:c0:
c1:0b:29:4a:af:9c:f5:32:91:ef:8c:a2:1c:a0:42:
59:61:e3:84:9c:f6:0e:07:75:74:2b:6a:01:12:13:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:CE:7F:91:C7:6D:C8:92:1E:E8:32:FB:0F:01:72:B3:78:57:B7
X509v3 Authority Key Identifier:
keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0b:a2:de:93:2d:3b:60:65:03:53:06:8c:b9:09:28:f1:c0:
84:2b:30:d2:df:95:67:c5:82:e1:67:d0:1f:61:37:ca:37:82:
bc:bf:99:d7:6b:72:b9:8c:c8:55:df:2d:cb:5d:50:7e:9c:a3:
e5:10:1a:71:7f:55:ea:b4:f9:a5:89:07:20:a3:bf:9f:a4:b6:
a9:da:db:ab:f1:e2:68:93:21:24:ad:93:45:b9:38:d7:c8:e5:
c9:d6:30:31:f8:72:1a:00:9c:88:d7:e0:8a:0d:ca:0b:e8:09:
16:9c:a9:96:2d:18:59:62:82:d6:14:89:5d:5b:ff:96:51:67:
ee:c4:af:dc:90:41:db:a4:b5:0a:fd:97:1f:ef:d9:f2:cf:be:
74:f7:d8:0f:cb:79:c9:6d:9f:7d:47:53:03:7e:bc:a8:bf:b5:
b5:74:51:c7:15:9d:68:98:fb:69:cb:ec:5d:db:f2:20:97:54:
bc:05:e5:45:c2:3a:b7:0d:7b:0d:dd:e0:58:41:b7:46:c4:b7:
1f:f0:e3:c2:86:3b:cf:36:13:df:84:22:c7:9c:eb:eb:c2:a3:
19:b9:44:0e:04:ec:69:20:76:5f:b8:3b:9c:ce:99:3c:33:6c:
e5:44:f9:b6:1c:ac:20:c1:46:26:b3:f0:27:69:12:b7:52:0c:
70:4d:18:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:03 2025 by rpki-client