Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
File: mupW9uHBw1kAHsImfvD-4bRW3f0.mft (raw, json)
Hash identifier: qkaVx1Ns7UfoISM/pdU3ITGh4xQE8GlFpAYguXVYZvo=
Subject key identifier: 2B:1A:B0:01:D1:E9:F5:DA:B6:AD:7D:1E:62:7B:DC:D3:8E:20:F0:EA
Authority key identifier: 9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
Certificate issuer: /CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Certificate serial: 0196760CBF0850774ADF25D8E2DF6A6CC47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 07:01:08 +0000
Manifest this update: Sun 27 Apr 2025 07:01:08 +0000
Manifest next update: Mon 28 Apr 2025 07:01:08 +0000
Files and hashes: 1: mupW9uHBw1kAHsImfvD-4bRW3f0.crl (hash: yHF5XnMnkFOo4Mi1jCwW8ej5yCnhdczzltgeAUHmKBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:bf:08:50:77:4a:df:25:d8:e2:df:6a:6c:c4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aea56f6e1c1c359001ec2267ef0fee1b456ddfd
Validity
Not Before: Apr 27 07:01:08 2025 GMT
Not After : Apr 28 07:01:08 2025 GMT
Subject: CN=2b1ab001d1e9f5dab6ad7d1e627bdcd38e20f0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:bd:ba:56:ae:48:8e:17:48:53:75:7c:1f:
e9:ee:01:30:ad:6a:5f:a6:9c:bb:66:e8:fe:5a:2c:
b2:15:ce:a0:44:c9:03:74:8f:43:2d:ea:0e:1d:a9:
46:5f:cb:0d:5a:e7:4b:8d:7a:a2:69:3b:e3:56:34:
3b:96:1b:2b:89:92:dc:7e:6e:86:2a:4e:51:cb:1f:
ef:47:79:29:77:15:c7:ec:73:81:29:3e:fd:6f:16:
a7:f1:bc:aa:29:71:98:3c:d1:a7:14:4a:63:7b:88:
62:21:38:7b:74:fd:12:39:e8:ed:0c:c1:7f:88:23:
57:5a:03:bd:de:65:b6:3d:41:3f:aa:91:e7:8d:56:
41:56:ec:92:b5:d0:0f:d6:7c:3f:28:b0:6e:42:7a:
1d:82:cd:13:7b:e5:01:dd:1e:09:91:f9:fc:8d:92:
e0:a9:9f:46:45:f9:12:34:51:d4:57:b4:7a:e8:5f:
de:35:91:d7:30:87:65:41:43:fd:8a:71:a5:e1:aa:
52:8d:b1:a8:db:08:ab:85:d5:d9:15:3e:83:ab:26:
fe:e4:62:88:e7:cb:fd:c2:6d:a7:bf:aa:c8:d2:5f:
ea:f4:10:29:69:6f:5c:72:ee:59:6e:22:7f:30:8e:
24:53:48:36:eb:61:bd:ab:38:d7:6b:fa:bf:66:ec:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1A:B0:01:D1:E9:F5:DA:B6:AD:7D:1E:62:7B:DC:D3:8E:20:F0:EA
X509v3 Authority Key Identifier:
keyid:9A:EA:56:F6:E1:C1:C3:59:00:1E:C2:26:7E:F0:FE:E1:B4:56:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mupW9uHBw1kAHsImfvD-4bRW3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f4f4c-5cbc-403f-aea3-eb551a7fa061/1/mupW9uHBw1kAHsImfvD-4bRW3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f4:90:22:2d:cb:f4:e4:6a:dd:db:80:87:45:ce:80:72:e1:
fc:de:9d:99:18:bd:5a:5a:db:f5:b7:22:46:ee:47:8d:74:2c:
93:24:0f:47:0d:e7:c2:e0:82:14:6f:16:25:04:c6:d7:e8:1a:
17:68:ed:a2:69:74:6f:aa:1a:97:ed:01:77:c4:66:ab:af:39:
74:ae:93:3c:2e:d6:28:81:f4:26:eb:49:b8:ae:b8:1a:1c:62:
9b:30:2f:8d:08:0b:7c:ec:c6:35:aa:1a:4c:c2:e1:25:b0:b6:
6b:05:c6:02:08:47:58:fd:a9:2f:84:6d:34:92:3f:bd:0b:1d:
6f:93:ac:56:9d:a5:35:e7:92:5e:e3:24:9c:39:35:2f:05:53:
aa:cc:be:69:0c:4a:d0:67:6b:4a:12:c6:2b:88:22:27:6f:4f:
25:d0:4a:41:cd:54:fc:8e:65:f5:29:46:31:85:48:f0:90:5b:
26:99:f5:99:c9:8e:61:74:3f:7a:c9:5c:f4:fa:79:55:ae:16:
7b:f4:a7:7e:c7:20:c4:25:4a:36:a8:fb:7c:f0:b1:80:6d:7b:
01:bf:10:5a:3b:24:1f:1e:e3:88:77:f9:19:84:7c:61:6e:b8:
2b:08:85:98:2b:01:47:e3:6c:e1:95:46:83:97:64:e5:2e:61:
b5:4c:63:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:56:55 2025 by rpki-client