Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File: mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier: 5cTX+pIDKmHY0FSyuDhtvDER319a8FLSHGU24KRrEDo=
Subject key identifier: 4B:89:12:07:32:61:10:A7:AD:9A:BB:21:47:5D:5C:6A:78:F4:76:B8
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer: /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial: 019873E1F019DBCAAE34D430C4CA5CEB0A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number: 0356
Signing time: Mon 04 Aug 2025 07:00:43 +0000
Manifest this update: Mon 04 Aug 2025 07:00:43 +0000
Manifest next update: Tue 05 Aug 2025 07:00:43 +0000
Files and hashes: 1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: AaHg0c5sMvIG7oLORsQjXAMotS5K7l7nl5d1xS9L2Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f0:19:db:ca:ae:34:d4:30:c4:ca:5c:eb:0a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Validity
Not Before: Aug 4 07:00:43 2025 GMT
Not After : Aug 5 07:00:43 2025 GMT
Subject: CN=4b891207326110a7ad9abb21475d5c6a78f476b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:bd:16:a2:55:4b:0d:83:b3:4e:ab:92:88:
e1:f0:2b:51:da:2b:20:45:1f:38:7a:42:77:b7:2f:
3f:37:61:21:01:a8:91:30:ea:9a:e4:1b:23:93:e4:
3e:ae:43:3a:5b:e6:84:54:b8:b9:45:8f:5d:f1:49:
3c:63:f7:e3:37:d0:e0:16:2b:92:cd:9b:04:cf:20:
5b:27:ca:84:11:d1:78:07:44:ea:a3:fc:71:d6:e1:
c1:d6:16:70:34:8d:ce:57:f2:04:41:16:f8:b6:5f:
5f:d2:c7:a3:ae:56:5a:fe:6a:89:5d:ac:77:f6:3a:
b1:af:39:ae:38:71:05:00:81:3a:97:3a:2f:49:d8:
91:f7:98:50:08:c2:32:2a:6e:41:c7:e1:c9:0a:64:
bb:37:5e:e0:2b:33:3c:b0:68:bd:5d:34:04:a9:96:
a0:43:5b:dd:d8:ca:8a:3c:6f:19:d2:00:19:9d:61:
d4:7f:db:34:a4:52:33:03:79:23:3f:cb:1b:5e:3f:
63:67:b3:1f:5e:0b:d0:89:31:52:73:1c:d3:f1:a5:
91:f7:1b:6b:b7:c0:d7:79:04:4b:0b:d2:1e:0d:ec:
9e:0e:bd:e1:00:63:71:73:52:3e:5a:94:f4:1d:e7:
9f:f9:b7:46:20:36:0d:d8:f8:a3:f1:27:63:0f:d3:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:12:07:32:61:10:A7:AD:9A:BB:21:47:5D:5C:6A:78:F4:76:B8
X509v3 Authority Key Identifier:
keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ae:e8:1d:a7:0f:31:64:98:51:ba:d2:91:0a:9e:88:d7:20:
73:8b:90:c8:ab:77:92:79:7b:cf:3c:b0:64:b4:94:87:82:3c:
7b:64:b3:d7:56:ac:89:af:e2:a3:2d:63:b1:0b:64:29:15:22:
5d:4b:9e:f8:ff:eb:2f:13:0e:91:e1:8f:5a:01:e9:53:1a:2c:
1e:bb:df:d6:a0:b8:fb:93:6d:48:22:5b:35:0f:e8:f0:31:a7:
3c:b0:46:3b:48:51:f5:f6:c5:66:ca:48:fb:9f:a5:e6:54:fe:
fb:b1:f9:95:d2:b8:09:dd:23:da:7c:5b:ef:22:88:da:c4:69:
de:77:29:fd:cd:dc:85:f5:08:0a:e4:bf:80:3a:4e:07:f8:e5:
82:bb:ac:65:60:f3:2c:f7:ff:e0:27:dd:a8:44:cf:65:ce:78:
6c:42:64:97:e6:24:3b:77:4f:cd:60:97:85:94:75:89:94:18:
56:da:0f:eb:ee:e7:52:5e:ae:4b:bd:2a:47:a3:79:03:03:c3:
9c:fb:b7:16:69:44:98:c2:42:c6:a5:05:18:42:5f:ac:04:75:
8f:74:bc:c3:66:8c:1d:2c:26:77:4b:e2:f3:e4:14:5f:d3:96:
ce:84:6d:0d:fe:ba:f4:8a:0b:d5:44:a3:2c:72:f4:f3:d3:12:
0f:e1:d8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:13 2025 by rpki-client