Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
File: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft (raw, json)
Hash identifier: pDKL2NuC04B7fr3OXLgvzK/EL6KdhVzB0MHUOSnMBp8=
Subject key identifier: 64:15:C0:FF:6A:8E:C0:05:69:66:04:8A:56:5F:51:A3:F6:1F:F2:40
Authority key identifier: 98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
Certificate issuer: /CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Certificate serial: 019680FD8561B627B4C2C0DB2A7D70587FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
Manifest number: 0C49
Signing time: Tue 29 Apr 2025 10:00:20 +0000
Manifest this update: Tue 29 Apr 2025 10:00:20 +0000
Manifest next update: Wed 30 Apr 2025 10:00:20 +0000
Files and hashes: 1: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl (hash: QxXHOdndiWXDX6J9nYrBTXvYS3k7O25UP3Grsmz8P20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:85:61:b6:27:b4:c2:c0:db:2a:7d:70:58:7f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Validity
Not Before: Apr 29 10:00:20 2025 GMT
Not After : Apr 30 10:00:20 2025 GMT
Subject: CN=6415c0ff6a8ec0056966048a565f51a3f61ff240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:2e:03:e4:3f:75:7b:ed:ef:c6:62:aa:c4:
c9:ff:e0:ad:eb:d9:e3:53:bc:be:07:26:f0:30:d9:
78:9b:31:3e:5c:f0:48:7d:80:42:3f:6d:b1:1e:42:
1b:37:6e:fc:bb:9c:07:28:94:8d:b3:2c:a5:d3:fc:
58:77:56:ef:d2:05:23:d2:ac:26:05:00:86:4f:57:
fb:16:fa:e9:ad:c0:53:ff:4a:f1:b6:08:39:07:e8:
80:bf:a8:b0:2c:49:f9:9f:c3:f1:0d:6a:2e:8b:53:
e7:01:b1:c5:8f:24:a7:a3:83:ec:04:53:81:71:63:
92:f4:5a:a5:f2:e5:46:73:70:ec:ec:de:7e:46:6e:
ab:b9:32:ee:b1:24:a0:0e:84:13:15:43:91:23:16:
c2:4a:e7:ba:6d:e0:6f:6e:55:a3:32:ce:4e:4b:40:
75:cd:ee:aa:e9:2f:df:d4:5d:b7:09:c9:e1:8a:8d:
21:40:7a:a4:d2:10:d0:f5:24:4a:48:e2:6c:01:f6:
96:69:66:0c:22:42:8d:68:0f:e9:51:8c:f1:44:31:
9c:90:84:75:7d:57:1c:20:67:6c:19:7d:d1:aa:76:
06:29:47:62:70:c3:d0:11:12:9c:3f:fc:88:b2:f9:
08:17:bd:90:ba:4e:b7:12:57:dc:95:99:01:c4:3e:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:15:C0:FF:6A:8E:C0:05:69:66:04:8A:56:5F:51:A3:F6:1F:F2:40
X509v3 Authority Key Identifier:
keyid:98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5d:e4:69:d6:3a:6f:f2:49:cc:4f:2c:f2:8a:96:7e:31:4b:
71:57:6b:36:eb:1d:93:08:eb:51:fd:1f:52:1c:28:c2:8c:5e:
63:61:63:df:f8:cc:85:75:bf:51:94:15:f3:bc:d2:b9:0c:4a:
b2:d1:59:de:ce:4f:82:62:23:6c:b2:28:8c:a1:89:96:ec:ea:
8f:dd:46:c0:a1:5e:2a:04:c5:58:65:e4:10:e7:bc:64:ba:ec:
d8:b0:96:3a:f4:74:d5:94:b0:7b:71:d5:71:32:ad:4a:62:fd:
5b:0b:e4:f2:10:ac:83:ce:b6:85:b5:74:bb:de:5a:b0:5a:c3:
3f:c6:4e:f9:db:27:9d:17:af:7c:91:5d:81:f4:cb:e0:a1:f3:
d1:d0:37:78:8e:18:4c:4a:fe:04:03:ec:40:fd:7c:9a:60:9c:
00:f5:70:91:a2:1b:d4:6d:37:ca:b2:cd:42:12:f6:2b:4c:2a:
41:5f:76:e3:a0:c5:ec:2a:78:e6:bf:56:48:4a:32:a3:bb:d0:
6f:95:cc:8b:85:67:0a:01:45:1e:25:f7:9c:a9:04:a7:8a:c8:
04:e6:ae:83:80:1e:ce:32:bc:69:bb:46:3c:d1:7b:5c:60:f2:
ab:7a:7a:25:bb:2d:84:2f:2d:dd:40:ba:e6:49:85:b3:a9:8e:
d3:a5:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:58:17 2025 by rpki-client