Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File: M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier: pAfAu7r5XThDOSf825bOWkq0bUq04fst+9TQ5/p22R8=
Subject key identifier: 00:1B:87:DB:B1:A3:43:CC:03:62:0F:57:EE:3F:3D:84:36:F6:4C:49
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer: /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial: 01967A8DF68D16C353C6A9CA3F35C088CD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number: 1256
Signing time: Mon 28 Apr 2025 04:00:45 +0000
Manifest this update: Mon 28 Apr 2025 04:00:45 +0000
Manifest next update: Tue 29 Apr 2025 04:00:45 +0000
Files and hashes: 1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: 2ArBcg2qHrdFBigya7jSWGOKLTY+RDwDeb9x6wSA7O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:f6:8d:16:c3:53:c6:a9:ca:3f:35:c0:88:cd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Validity
Not Before: Apr 28 04:00:45 2025 GMT
Not After : Apr 29 04:00:45 2025 GMT
Subject: CN=001b87dbb1a343cc03620f57ee3f3d8436f64c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c0:33:8f:b4:e2:37:3f:ee:b5:16:4e:03:38:
7b:34:1b:83:c4:10:43:1f:dd:3e:6a:66:e2:fd:ee:
34:f3:18:7d:ed:58:2f:d8:f7:25:5d:e5:d3:77:5f:
ad:a8:46:a1:ff:c5:fc:68:6d:4a:26:d2:91:75:61:
6b:6b:61:ae:ce:84:9b:9e:c6:55:56:f0:1e:78:99:
34:43:ac:36:ee:8a:19:88:73:28:79:26:34:cf:e0:
9b:57:01:2a:d9:9d:88:31:fa:df:6f:21:3b:e8:43:
0d:1e:68:f7:19:dc:2e:a6:88:f8:0e:30:97:de:45:
d0:cb:b8:d6:95:1b:67:3d:5d:3a:65:13:a3:86:f2:
e4:a1:77:9c:19:a8:6d:16:a2:05:23:a5:9d:b2:55:
3a:3f:e7:62:4d:59:a9:97:28:88:21:0e:00:dc:54:
dd:6f:39:5b:fe:e0:af:6f:92:5c:9b:5c:c5:50:3f:
96:23:da:e0:74:6f:2e:d9:5d:36:a1:7e:24:62:a5:
95:86:4a:ae:24:6c:9d:b2:a7:bb:1b:14:56:ca:9a:
d2:a5:55:e1:61:c5:bf:44:9d:d1:4c:f2:6c:32:fd:
6e:7b:f9:65:11:91:fb:bc:b0:e4:87:07:5f:b3:c8:
43:56:5c:e3:f2:d7:d4:3b:f1:59:69:d7:12:0a:1a:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:87:DB:B1:A3:43:CC:03:62:0F:57:EE:3F:3D:84:36:F6:4C:49
X509v3 Authority Key Identifier:
keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:39:69:08:59:63:45:15:80:fb:d1:b2:72:af:d8:f8:76:16:
df:0f:97:03:32:79:15:ed:46:b9:0c:47:5b:0a:29:35:ae:b0:
3f:15:15:1f:16:4c:07:f9:c4:80:c5:f5:27:f6:1e:d6:9d:34:
d7:5b:68:30:b4:a6:88:c7:4e:41:6f:41:35:69:22:22:3e:cc:
7a:72:34:ea:b5:0f:2a:6d:76:18:8c:20:76:33:4f:be:6f:19:
14:6c:da:1c:ad:20:e9:fe:4a:84:6e:ab:55:5b:8b:41:b7:0e:
6a:11:2b:2b:1f:c4:73:07:e2:81:ca:19:b4:1c:cd:81:c0:f7:
0c:2e:eb:22:0a:a1:2f:cc:36:a5:8a:4b:7b:fa:8b:5a:3e:db:
d0:bf:2c:4c:bd:05:4f:a6:98:ef:e1:b4:b5:98:e5:14:43:4d:
94:03:f0:e3:47:e6:1b:24:7a:13:7a:98:b3:35:c7:3a:2e:43:
71:0d:c9:27:fd:de:a2:f9:44:bb:45:49:47:36:f1:34:2a:48:
f1:d1:a4:17:2f:97:c5:3b:3b:e9:d8:f3:14:7d:93:1e:43:73:
d7:16:fc:4d:3b:dc:20:ab:a5:57:bf:0b:46:c5:8c:1a:03:60:
27:d5:38:53:c3:d5:e9:87:a7:00:4b:23:64:f0:5d:e5:41:7b:
b6:a5:ea:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:08:52 2025 by rpki-client