Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
File: mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft (raw, json)
Hash identifier: uUuxpL3j33REeDMnB5tByG9mtj4b1eT+HWPHZ9UUkU4=
Subject key identifier: 00:32:56:35:95:25:6E:E6:98:25:AC:5A:6E:C2:1B:7A:9B:F5:E9:02
Authority key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
Certificate issuer: /CN=9928b812e2e9f472eec7d233f604af263e850f31
Certificate serial: 019892C9CB4888394CE1B3D961061AA287F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
Manifest number: 0B5F
Signing time: Sun 10 Aug 2025 07:02:34 +0000
Manifest this update: Sun 10 Aug 2025 07:02:34 +0000
Manifest next update: Mon 11 Aug 2025 07:02:34 +0000
Files and hashes: 1: mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl (hash: hy7yLKyUrOwKQFhEnLftPteYWDmyY1g3RPSt+PotDgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:cb:48:88:39:4c:e1:b3:d9:61:06:1a:a2:87:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9928b812e2e9f472eec7d233f604af263e850f31
Validity
Not Before: Aug 10 07:02:34 2025 GMT
Not After : Aug 11 07:02:34 2025 GMT
Subject: CN=0032563595256ee69825ac5a6ec21b7a9bf5e902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:72:70:e2:24:93:61:38:c2:cd:1d:d2:7a:
21:a9:09:50:70:39:5d:f2:bd:40:36:4b:b1:09:16:
38:83:c5:bd:18:55:17:1e:24:08:90:be:48:b8:e0:
e6:c5:7c:6b:9b:1b:b6:e6:a2:80:8d:7e:28:6a:12:
6b:a4:25:8d:a6:7a:d1:8f:a4:b0:4b:d6:3d:8b:6f:
5e:7c:43:04:8c:be:27:a1:f8:04:e9:19:a7:7b:9e:
bb:6d:ee:fd:01:f4:60:75:b8:17:9b:47:aa:ac:56:
71:06:ee:78:f3:ec:86:d9:68:74:d4:d7:18:49:5d:
dc:59:7e:7c:00:0d:81:31:91:a2:4b:b0:ff:40:88:
18:ef:0f:f6:34:92:79:c0:11:a0:3c:ed:e2:f0:42:
d0:1f:93:bb:53:1e:cb:85:6c:6e:3b:62:7e:ea:53:
fa:2b:79:fd:67:84:ab:91:31:8f:a5:16:dd:ef:28:
50:5c:b0:38:75:46:d6:89:1c:f1:a4:82:ad:6f:5b:
fb:8f:59:12:7d:38:e3:b7:27:76:47:9e:78:79:1c:
4f:0f:14:32:82:e6:27:fd:dc:61:60:63:0a:0c:9a:
08:d5:87:a8:dc:56:6e:b8:d2:e6:aa:37:24:0f:6f:
8c:59:81:3d:f5:cb:59:c1:9d:05:9c:2c:51:a0:84:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:32:56:35:95:25:6E:E6:98:25:AC:5A:6E:C2:1B:7A:9B:F5:E9:02
X509v3 Authority Key Identifier:
keyid:99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6a:8f:70:e4:5c:ee:c9:c5:a3:f5:d3:8f:95:86:9c:9e:65:
e6:11:92:45:37:0c:fe:8f:a7:aa:f8:93:c7:eb:44:6a:9c:eb:
30:34:36:3c:18:4d:72:97:98:6c:15:95:ba:c4:00:8a:8b:77:
b6:f2:03:96:c3:86:2c:2d:5e:1a:85:e0:8f:1c:8f:cc:38:30:
7e:22:02:6a:c9:89:33:b2:c8:55:3f:cb:48:cd:38:6d:5c:fa:
ba:64:f4:8c:64:02:e5:ff:12:5c:66:00:18:0f:b2:38:b9:50:
32:8b:24:a1:3f:b3:5c:8b:a1:58:0e:fe:b0:e9:7d:01:f0:35:
4d:80:3d:e6:fc:d3:f3:6c:b8:47:30:2e:3d:8f:43:3d:07:8f:
c2:45:93:4c:33:45:e4:ba:b5:20:d5:12:c4:93:03:bc:d0:c9:
91:59:81:cd:43:65:2e:ac:73:d0:06:96:8b:9e:01:54:c1:94:
be:7c:e4:0a:95:82:4c:2a:d0:b9:6b:40:e5:be:48:82:0c:97:
4c:5c:a6:23:c0:c4:b8:20:bd:93:cf:94:5b:f1:88:cb:8e:39:
1d:08:9d:62:a6:37:27:2e:31:43:0f:11:13:d5:3c:c6:fb:c9:
19:5a:eb:18:30:a9:78:a2:41:48:06:1a:6b:5b:6e:ea:28:ba:
35:bc:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:26 2025 by rpki-client