Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier: R595wLUw4MAj4LhO3M3+/MnC4HdB/APWEoyrHE8La9s=
Subject key identifier: 7F:B1:A8:68:17:CD:E7:FC:24:13:CC:16:8A:52:BA:C4:35:B7:05:AF
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial: 01967BD7E385A91CFA812413D91C6C682D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number: 0BF8
Signing time: Mon 28 Apr 2025 10:01:08 +0000
Manifest this update: Mon 28 Apr 2025 10:01:08 +0000
Manifest next update: Tue 29 Apr 2025 10:01:08 +0000
Files and hashes: 1: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: S1d6RI9Sy33UQBoZC8pA4drOgFVI1tLyW+jMKiNWw4o=)
2: hApSbA3jzy_s3iVNvrGjhLhy3rU.roa (hash: 1X2vbtL7wfNX8hGTI4KlZns0bkwGbPIYpWY571Ew9V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:e3:85:a9:1c:fa:81:24:13:d9:1c:6c:68:2d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
Validity
Not Before: Apr 28 10:01:08 2025 GMT
Not After : Apr 29 10:01:08 2025 GMT
Subject: CN=7fb1a86817cde7fc2413cc168a52bac435b705af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:76:c0:92:47:35:05:07:3a:65:f9:db:4e:
7e:ae:30:14:ec:90:2d:41:0f:e3:6a:5d:f3:07:e8:
b5:62:ca:34:cb:8b:9c:32:29:03:99:3c:9d:25:04:
40:49:cb:1c:84:8e:46:7b:ed:f0:27:ff:bb:9e:10:
5f:bc:dd:7f:f9:28:67:36:f7:9c:c4:63:3b:6c:54:
fe:e5:11:44:6c:82:c7:39:cb:20:35:23:55:e3:8d:
cc:1f:fb:34:10:86:e0:bf:fc:61:33:3b:09:c3:3f:
6a:dc:5b:28:37:17:02:d8:42:fd:f1:ce:36:0a:f5:
85:3f:42:f1:2f:53:1e:26:85:93:16:c6:3f:3e:11:
81:9e:c7:77:5a:fa:81:a2:0c:1c:41:8e:f2:02:21:
5b:8c:22:d4:85:5d:a6:7e:b8:63:39:59:32:33:be:
85:a3:7c:b2:1f:43:05:ce:fc:ae:91:74:76:92:50:
9b:65:50:c0:cb:36:2f:d2:8f:f9:13:e8:07:a9:56:
84:de:6e:69:80:60:77:1d:a4:47:2b:3b:ca:5b:b8:
c8:31:a6:f6:c2:14:4b:ab:58:3f:3e:65:66:b9:f5:
e9:6d:3a:b8:47:66:20:2f:8f:58:72:15:cd:4d:17:
27:83:3b:f1:ee:e2:39:f9:85:a3:44:24:b5:01:0e:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B1:A8:68:17:CD:E7:FC:24:13:CC:16:8A:52:BA:C4:35:B7:05:AF
X509v3 Authority Key Identifier:
keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:a6:23:65:f7:a6:d7:04:35:11:23:fc:c8:56:bb:39:e7:3f:
c9:84:f3:b4:fb:f8:1d:3a:a9:dc:63:d3:cf:e3:27:30:25:35:
14:15:92:76:99:ce:95:5c:de:2e:97:6e:fe:06:75:f2:6e:e0:
34:e9:c7:6b:02:3a:70:d0:8b:d0:9e:21:ef:4e:26:f1:3a:eb:
c6:21:7b:8d:1d:59:31:77:71:c5:80:70:89:3e:7e:43:3c:49:
e7:f8:a3:71:66:00:91:0b:f0:03:0d:7f:88:75:c0:bb:35:f8:
77:71:8d:42:8b:31:56:01:ff:9a:ea:f7:dc:31:e3:cf:4d:66:
33:20:04:60:f7:22:9c:98:8c:c0:56:99:e2:a1:81:26:0b:06:
e8:a1:2f:ae:ca:a4:1c:5f:ef:43:19:6a:09:a4:69:89:69:68:
71:47:f4:d1:de:5a:dd:92:b6:19:90:b8:d5:72:1a:8a:1f:c2:
07:2b:75:53:79:53:ec:27:7b:d7:f6:e5:a2:27:34:f2:5a:9a:
1b:af:d0:14:e8:48:02:30:d5:ea:9e:2c:7f:0f:c4:36:a9:4f:
9b:1d:c3:7b:2a:ad:51:5a:c6:73:83:c5:1a:74:e3:c5:90:e4:
76:b6:c8:79:79:07:8b:68:b1:41:80:4c:96:4a:f3:3f:6c:57:
ab:2e:0d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:35:49 2025 by rpki-client