Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File: mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier: sW19pNqIgOYwLuz6HrzjZJKCVLcxrheBLCJs8cdPLs4=
Subject key identifier: 00:1C:5B:4E:BF:66:AA:69:02:A6:74:B4:2F:1D:15:8C:63:8B:97:8A
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer: /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial: 019679E92C6B47942BAB02879292CB613C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number: 0403
Signing time: Mon 28 Apr 2025 01:00:46 +0000
Manifest this update: Mon 28 Apr 2025 01:00:46 +0000
Manifest next update: Tue 29 Apr 2025 01:00:46 +0000
Files and hashes: 1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: bCKT/i/tjUn2qRLLL3ROnrHBQMEm5G4t8gjBYDO2q6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:2c:6b:47:94:2b:ab:02:87:92:92:cb:61:3c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Validity
Not Before: Apr 28 01:00:46 2025 GMT
Not After : Apr 29 01:00:46 2025 GMT
Subject: CN=001c5b4ebf66aa6902a674b42f1d158c638b978a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:f7:ea:71:59:57:e3:c2:7a:a9:12:e4:b9:
c7:e7:17:70:e7:85:43:d8:e2:47:06:1e:88:8b:d2:
f3:1c:b1:1c:c0:20:c5:06:86:2a:11:e7:32:ec:20:
48:0b:80:db:75:dd:c3:46:18:e8:5b:f2:7a:b1:99:
b1:ab:a2:9b:31:50:6b:4f:1f:4e:c9:8d:7d:79:97:
16:b4:55:9e:aa:ee:c8:46:47:ea:48:6a:77:d7:c4:
0a:a2:2a:3c:91:dd:45:4f:9a:9f:60:06:7f:e5:12:
dc:a8:46:bb:4a:44:7b:b6:a6:fd:1f:4e:71:1b:72:
26:86:86:ba:4a:51:b0:a0:e3:ca:63:f7:32:68:ed:
08:3d:3b:60:2a:97:f8:6d:aa:e6:71:44:8c:84:f9:
b6:22:57:4e:fc:1f:f5:26:e9:c8:3b:f9:5b:76:d4:
09:2d:bd:41:a7:56:fd:b0:e9:86:5f:04:30:20:b5:
e1:df:db:d3:64:ab:3a:a8:51:dd:0d:64:a1:42:f8:
97:38:89:84:d3:3b:30:93:d0:47:4a:6b:b3:e0:59:
0d:5f:25:30:41:c7:81:0a:bd:8f:47:70:1a:2f:41:
31:fb:b7:5e:06:8e:1a:5f:15:63:bf:99:d7:7f:b3:
5f:3a:6e:99:82:4e:e9:64:e5:ff:44:3a:a9:aa:5a:
63:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1C:5B:4E:BF:66:AA:69:02:A6:74:B4:2F:1D:15:8C:63:8B:97:8A
X509v3 Authority Key Identifier:
keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:84:54:6f:72:ad:62:0a:42:95:1b:1c:ec:17:44:0b:cf:34:
d4:28:4f:cb:66:b4:04:7c:6d:89:61:7b:6f:df:79:f0:35:8a:
cb:4a:ee:1d:e0:f5:c9:03:d2:de:ea:da:a8:2b:2e:67:3e:b5:
11:cd:8b:9e:33:09:93:6c:46:ec:f7:b5:bc:e1:8b:e8:cb:fa:
43:87:bf:93:21:71:d6:f4:9f:5a:12:04:b5:88:24:dd:a3:46:
ca:ba:89:01:30:f1:66:05:52:0c:1e:93:15:a4:79:06:bb:f5:
0f:7d:fe:a0:05:ea:5b:2c:6a:e9:35:9c:af:56:79:ee:b4:28:
0e:aa:7f:b9:1c:ad:76:be:75:e6:dd:27:30:50:b7:8f:ee:3c:
d5:55:10:28:3d:a4:f6:9a:4d:ef:d0:bd:50:aa:fe:32:92:d7:
44:48:87:f6:a4:ea:69:8b:ab:c4:c1:ab:d8:fc:e0:e0:63:35:
da:83:ec:4b:ed:54:a3:9b:de:e4:eb:ad:11:99:d8:8a:db:65:
ef:42:61:9d:4a:ec:b7:40:bd:22:cb:ab:2a:60:f6:b0:d2:08:
9a:1e:fd:25:96:f2:bc:96:21:36:ad:be:0b:7b:83:fe:df:28:
b0:dd:00:01:56:af:28:07:31:33:15:65:bb:8f:ae:40:a5:cf:
0a:5b:4a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:18:09 2025 by rpki-client