Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json)
Hash identifier: 7XHmpsmuliybx0iFExhhLfHvkf7PSys2IWiL+p4CqsI=
Subject key identifier: BE:80:AB:95:F1:FD:20:09:01:E4:F1:D9:55:85:C9:49:9C:A3:66:A3
Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Certificate issuer: /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Certificate serial: 01967A8E229F3DED57A8738873A8FBDDE5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
Manifest number: 1186
Signing time: Mon 28 Apr 2025 04:00:57 +0000
Manifest this update: Mon 28 Apr 2025 04:00:57 +0000
Manifest next update: Tue 29 Apr 2025 04:00:57 +0000
Files and hashes: 1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: JZnUMVti9JVi4+lyOwR2XYAdxo/x/Z3g7sBVEp0MyhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8e:22:9f:3d:ed:57:a8:73:88:73:a8:fb:dd:e5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Validity
Not Before: Apr 28 04:00:57 2025 GMT
Not After : Apr 29 04:00:57 2025 GMT
Subject: CN=be80ab95f1fd200901e4f1d95585c9499ca366a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:5c:57:95:9c:8d:8f:98:20:2c:10:11:8f:
f5:5f:4d:ca:04:f1:b9:2d:22:ae:33:40:99:70:57:
8c:1c:a3:25:0d:6d:21:ae:13:e9:19:b8:4a:79:1c:
7b:ca:7c:4b:83:0a:d6:43:05:3b:c9:58:3f:b5:ba:
7e:77:d7:21:88:02:32:cc:f0:93:c6:61:44:5a:d3:
69:59:50:b7:4b:c0:4d:f7:8f:22:a2:48:30:c7:c7:
8c:83:a3:07:f3:58:b0:cc:66:3d:70:67:55:99:a3:
30:46:be:7d:66:39:28:c6:a7:fe:a0:7e:f0:ef:84:
c1:4f:04:b3:a5:f8:8c:8e:6d:db:53:7c:7a:27:cf:
88:89:69:94:2d:c6:7b:fc:3f:07:32:e3:e7:31:63:
b3:13:22:aa:e5:bf:50:54:eb:e3:b6:53:87:ab:1d:
81:a0:aa:f0:26:3d:97:96:53:fc:57:75:1a:2d:24:
ba:af:f4:c3:f3:05:bd:0d:1d:b9:26:34:09:cc:d4:
df:ec:b3:ff:15:c7:6f:d3:bc:2d:b8:e8:fa:b6:b7:
68:7e:82:18:ca:a7:11:21:8c:4f:07:da:b7:60:c6:
12:07:6d:61:18:e2:76:28:88:19:6a:fd:46:e0:3f:
20:72:45:84:42:83:2c:cb:ce:44:a4:b5:bf:1b:4c:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:80:AB:95:F1:FD:20:09:01:E4:F1:D9:55:85:C9:49:9C:A3:66:A3
X509v3 Authority Key Identifier:
keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f8:a4:27:08:67:7d:2c:1f:fe:e4:e3:7e:04:3b:9a:ba:3b:
3e:e9:f8:b1:d5:ff:9e:32:3b:66:4b:d0:21:9e:68:8c:e7:06:
da:8d:77:f3:1e:c4:07:80:7e:86:8a:d0:d9:31:c7:0f:57:5c:
f8:db:51:1d:dd:b5:05:86:c3:be:ea:23:9e:34:ba:c6:94:86:
5e:6f:e9:41:5a:cf:ae:db:f6:fd:3b:fc:fc:4b:b5:52:93:43:
15:3d:ba:50:a5:7a:01:73:8f:bf:c0:70:1f:8d:90:81:77:14:
80:4f:ec:f8:86:79:29:de:68:4d:31:0e:07:76:60:7b:46:b2:
28:d8:03:1a:c9:31:e3:f9:58:7d:a8:85:d3:26:4e:86:ad:da:
7c:d0:09:1f:9a:06:da:90:92:6c:d6:17:14:21:69:22:ff:95:
23:35:42:b0:dc:19:be:e2:2a:1f:0d:8c:c1:1d:41:ce:f2:9a:
80:6d:27:16:ec:46:74:c2:f7:68:72:46:5b:7c:b9:01:87:cd:
fa:dd:47:9b:fb:9c:77:a8:bf:13:a0:17:4d:4b:fb:f7:fe:00:
0c:fd:e2:84:7f:92:e0:c5:66:16:40:63:3b:75:8d:1d:6f:74:
d3:13:44:4d:e6:59:65:cb:dc:3e:94:21:12:3a:b6:c3:41:b6:
39:45:1a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:34 2025 by rpki-client