Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
File: mLU7husfGdCufACxMul8A6lL_2E.mft (raw, json)
Hash identifier: /j8X4byVjPsEwLQpSLHMgPIZO8fJRXSpUgWWRZek8t4=
Subject key identifier: 37:BD:C0:8E:A0:36:45:57:B8:6B:C0:B5:88:B6:00:AD:43:ED:5B:AA
Authority key identifier: 98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
Certificate issuer: /CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Certificate serial: 019676E81D1F9624CD5C31E28692F55A41AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
Manifest number: 1295
Signing time: Sun 27 Apr 2025 11:00:45 +0000
Manifest this update: Sun 27 Apr 2025 11:00:45 +0000
Manifest next update: Mon 28 Apr 2025 11:00:45 +0000
Files and hashes: 1: mLU7husfGdCufACxMul8A6lL_2E.crl (hash: p5bZYIGKclIzczMQij2/2qzCbJNGv/u+Eh/Pdhn7TXs=)
2: y0QaOJzLaOBuL0b8gdep3z45T1Q.roa (hash: XfEwQqQh0zUkbjw/Ka1eAvvyK361BK9TcqMDxt70nw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:1d:1f:96:24:cd:5c:31:e2:86:92:f5:5a:41:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b53b86eb1f19d0ae7c00b132e97c03a94bff61
Validity
Not Before: Apr 27 11:00:45 2025 GMT
Not After : Apr 28 11:00:45 2025 GMT
Subject: CN=37bdc08ea0364557b86bc0b588b600ad43ed5baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:c2:0b:bd:9f:68:51:90:97:36:60:8e:e0:
ba:2c:91:7a:7b:18:35:ed:9d:d5:ef:39:30:be:06:
68:c6:90:67:b8:b5:3d:8e:54:00:0a:25:6b:22:dd:
18:6c:c3:11:2e:78:36:d3:b0:05:c9:42:ee:c5:0b:
20:3a:90:70:ef:db:15:37:33:40:b6:c4:28:81:19:
39:aa:17:3a:48:5b:17:c6:94:b3:ef:86:59:0f:94:
82:8f:31:a9:92:87:00:a2:6d:02:65:3a:3f:71:c4:
93:78:d7:dd:d2:50:7b:2c:3c:53:46:0e:a6:5f:8b:
ea:26:90:3a:86:e9:a6:35:0a:d6:c3:1d:41:c5:c9:
7f:4e:4e:f1:64:c4:6a:ca:d9:41:67:70:d0:f3:d4:
81:ef:e2:66:d9:cd:d5:df:36:6f:51:f2:c2:07:2a:
71:04:04:3c:18:32:6d:f6:c1:1e:d8:96:d9:49:25:
62:11:97:1d:96:72:f4:af:38:c7:b0:5f:e2:ce:8f:
94:7f:3f:3f:47:6b:c7:cc:54:84:53:57:99:14:ec:
3a:65:47:18:12:63:97:fa:f6:24:76:69:d0:34:68:
39:67:4a:72:a7:77:fa:46:77:c6:a4:55:54:0a:8b:
23:40:5e:a7:5c:53:3e:26:cc:35:27:12:7e:a2:7a:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BD:C0:8E:A0:36:45:57:B8:6B:C0:B5:88:B6:00:AD:43:ED:5B:AA
X509v3 Authority Key Identifier:
keyid:98:B5:3B:86:EB:1F:19:D0:AE:7C:00:B1:32:E9:7C:03:A9:4B:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLU7husfGdCufACxMul8A6lL_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8fb468-fbc5-4a57-a7fe-275c5f731b44/1/mLU7husfGdCufACxMul8A6lL_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5f:27:b7:4e:f8:d7:c4:34:e5:2c:69:a1:c8:7a:2e:1a:bc:
31:2f:9b:0b:53:2d:a5:b2:6c:28:9a:f7:62:89:42:8d:d8:c9:
de:dd:27:5e:3a:15:06:38:be:c4:7b:88:a2:50:69:74:11:64:
bf:86:6f:74:ad:f7:2d:b4:5c:d3:c7:16:bc:9e:ec:47:b9:a4:
60:cd:15:a0:f5:1d:2b:d2:45:d6:11:52:1c:ad:9b:2f:d2:de:
72:01:dd:8a:2b:9f:8a:dd:e4:3f:48:a4:5d:58:bb:41:1f:e9:
49:39:ea:84:5b:0f:35:f6:1c:2e:a8:3b:91:e3:d6:11:0d:d9:
67:5c:5c:ad:17:83:aa:14:5a:bf:30:b5:15:cd:22:b5:a5:96:
58:b6:44:2c:2b:d1:f3:dc:5c:92:e0:3b:9c:fc:63:7e:9c:9d:
8b:2a:44:08:63:9b:92:e8:b5:24:e6:34:08:90:78:fb:e2:bf:
f1:31:55:f3:2f:09:d2:f0:30:8d:e4:1f:34:a5:9b:fb:04:d2:
b3:58:45:e3:93:09:b3:75:c9:6d:97:05:ce:ed:ba:a2:18:63:
7f:75:94:12:e6:c7:05:65:63:5f:f2:40:01:e5:db:d9:64:16:
4e:5f:ea:07:97:42:60:5a:30:bb:69:09:b8:ab:ca:a6:1b:df:
b2:b9:32:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:37:01 2025 by rpki-client