Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
File: dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json)
Hash identifier: 5v4hj1MqFyhKlJz+6whdFwa7pX41tv8+JhdbiK7038I=
Subject key identifier: 22:92:A6:7E:E5:43:9B:3F:F0:BE:1C:23:9E:84:1E:1E:4A:6D:B3:BE
Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
Certificate issuer: /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Certificate serial: 0196760CE9F6AA89A25FC1EAA2CA7BC9BF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 07:01:19 +0000
Manifest this update: Sun 27 Apr 2025 07:01:19 +0000
Manifest next update: Mon 28 Apr 2025 07:01:19 +0000
Files and hashes: 1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: TpeDkgAR+2BqDRwxkuJkmSmXfbEnN1s8BXfPPhBvLO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:e9:f6:aa:89:a2:5f:c1:ea:a2:ca:7b:c9:bf:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Validity
Not Before: Apr 27 07:01:19 2025 GMT
Not After : Apr 28 07:01:19 2025 GMT
Subject: CN=2292a67ee5439b3ff0be1c239e841e1e4a6db3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:83:ae:92:9d:86:00:a7:02:81:b1:29:d4:c9:
78:08:c3:4b:98:4a:58:c5:88:46:57:51:d6:bf:66:
c2:7c:9a:86:12:ab:8f:75:e2:f3:4b:98:b5:de:7c:
7e:e4:cf:22:af:c4:3a:5c:15:fd:55:a8:d5:d7:e6:
a7:c9:e8:73:01:13:09:83:51:cb:22:61:30:75:91:
da:e3:91:30:a4:75:20:1b:73:a8:59:0b:99:01:44:
0a:64:c6:77:90:45:14:cd:16:cf:48:44:19:1e:e4:
3c:dc:e5:b4:f7:70:90:72:b5:30:90:ff:a7:16:89:
a6:e8:bd:f8:be:79:23:d2:91:ca:4f:8e:0b:68:d8:
ee:f5:84:25:d1:a2:e6:81:15:5a:ac:12:b6:be:5c:
40:9f:e3:70:28:91:9a:c7:16:ea:a4:25:a3:e9:f5:
fc:e6:ad:ff:dc:20:fe:54:fd:90:fb:9c:a5:2f:73:
c9:1b:dc:d6:83:0b:25:78:95:bf:c2:af:b7:88:69:
cd:8d:86:36:5c:10:9f:de:14:05:f3:bc:e0:66:2f:
28:38:91:df:7a:79:09:e7:aa:e6:52:8c:1e:1e:32:
b1:40:c6:ae:8e:90:c8:66:30:26:44:c4:3e:77:71:
3c:75:2b:d9:ad:81:43:25:fe:45:72:e4:10:d8:ec:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:92:A6:7E:E5:43:9B:3F:F0:BE:1C:23:9E:84:1E:1E:4A:6D:B3:BE
X509v3 Authority Key Identifier:
keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ca:82:83:d1:68:ed:57:ee:cc:f9:2d:41:2a:40:c5:29:4f:
d1:f7:d2:52:1c:c2:ba:9e:49:ed:10:29:e6:9b:4b:3d:27:ce:
2a:4c:e8:2a:a8:77:90:e3:58:ec:12:f4:51:53:54:c5:3c:3a:
4c:3c:e5:6c:1c:2d:32:22:5c:69:cb:b0:f6:83:db:85:aa:9e:
cb:03:a1:73:4e:07:a6:4d:d4:14:9f:a5:20:20:ad:36:b2:5b:
5e:ca:db:aa:8a:bd:c8:d9:9f:a2:cc:df:e1:3b:c7:36:e7:20:
4b:51:df:02:1a:26:52:f3:51:e4:e2:e2:81:9a:30:7d:3d:25:
37:ff:24:dd:55:6b:cd:b5:64:64:6b:34:67:ae:70:85:11:81:
df:76:28:ea:4f:e8:5f:ad:81:8d:d2:be:d3:94:5a:1b:cd:5b:
05:6f:d5:ba:ba:2e:a4:8d:9b:4a:3f:dd:25:7a:ed:d0:29:96:
c3:0b:97:a6:03:93:a6:5d:52:71:31:e6:82:dc:f3:d2:26:d8:
f8:d5:35:be:a4:12:bb:02:29:3f:00:a1:f9:a8:9c:ed:80:7f:
e4:4f:0b:c8:df:b6:b4:fc:9a:fd:8e:4c:24:fa:93:6b:10:c9:
9b:56:97:d6:25:82:ee:3b:e2:00:6e:62:6b:97:4c:fd:a5:9f:
af:2a:44:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:04 2025 by rpki-client