Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
File: mXZKyKibCft4hQ10xo4dqo8-KvE.mft (raw, json)
Hash identifier: mpvXzm6bOBLiuii3Q20IiSYMatNFu43iZ1Lfm3pB6XM=
Subject key identifier: 01:81:85:F3:7F:10:0F:8E:DA:53:23:D0:F0:5F:B1:C6:F5:A4:E4:49
Authority key identifier: 99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
Certificate issuer: /CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Certificate serial: 019683FF93861302445A31C561C99A91CDBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
Manifest number: 0729
Signing time: Wed 30 Apr 2025 00:01:26 +0000
Manifest this update: Wed 30 Apr 2025 00:01:26 +0000
Manifest next update: Thu 01 May 2025 00:01:26 +0000
Files and hashes: 1: mXZKyKibCft4hQ10xo4dqo8-KvE.crl (hash: ZuLRRXcLYysmR7YkU3rD+gOcXjP4B54Slv1PINutu8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:93:86:13:02:44:5a:31:c5:61:c9:9a:91:cd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Validity
Not Before: Apr 30 00:01:26 2025 GMT
Not After : May 1 00:01:26 2025 GMT
Subject: CN=018185f37f100f8eda5323d0f05fb1c6f5a4e449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ab:99:7f:e4:f4:6a:86:5a:92:bc:4f:40:8f:
8c:26:d6:eb:2f:5e:a6:03:02:d7:68:e5:d1:e4:20:
2e:3d:6b:d9:f3:39:24:cd:d0:e3:a4:5c:df:2b:e9:
31:ec:28:57:1a:9c:d4:6b:0a:37:11:b6:f1:f2:c3:
fb:ce:cf:f3:04:07:a8:c1:16:08:75:d4:ef:2f:c8:
90:1d:8a:bc:bc:1c:6b:f1:37:c7:bc:86:1f:16:71:
42:ea:6a:7c:96:9c:81:85:2a:23:54:3d:fa:f0:e3:
65:08:75:ef:5b:5c:18:2e:e8:67:b5:6c:bc:43:dd:
80:28:80:c5:7a:f1:a2:67:0c:79:08:87:d1:86:24:
04:cb:19:ee:d6:bf:d5:34:82:49:ca:c2:6c:39:5f:
53:a3:cd:dc:de:4e:4a:da:72:c2:04:ae:25:cb:9a:
54:db:a0:d3:3a:15:e4:05:44:77:8c:c9:85:4d:95:
3d:a6:21:e3:06:3f:94:09:9d:ad:80:d8:03:37:63:
d3:2e:d4:d0:d7:38:6a:2b:f4:ea:ff:3d:6e:12:e7:
e9:8b:9c:d5:00:06:e0:b1:07:4a:92:39:cb:5a:ed:
65:cf:fa:6e:2a:c7:71:4c:b3:8e:79:82:ea:a4:5f:
45:24:df:06:5b:7c:5f:ac:f5:ed:56:1f:1d:91:ef:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:81:85:F3:7F:10:0F:8E:DA:53:23:D0:F0:5F:B1:C6:F5:A4:E4:49
X509v3 Authority Key Identifier:
keyid:99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:11:fb:26:f6:9c:b4:21:69:a1:aa:18:42:a8:4a:47:97:a7:
e0:ff:de:70:40:13:70:b0:28:f6:20:dc:2a:5b:ac:6e:e7:dc:
42:2a:98:86:56:4c:8d:1e:0d:6a:26:5c:b5:c4:ae:26:2a:63:
28:c3:c9:15:d5:0c:ed:c4:93:17:32:e5:c1:a2:09:52:7d:96:
d6:1b:2f:43:7f:eb:fa:60:c3:7f:6b:45:7c:53:9d:0d:3b:d7:
31:71:79:06:d9:46:3a:0b:e7:13:f2:f7:f2:fa:93:e3:43:85:
03:ae:c8:76:03:0b:14:c6:f7:56:ff:dd:4c:e0:36:97:a1:7b:
a8:00:0d:37:aa:84:a9:63:ed:16:87:03:41:39:de:86:16:ee:
41:d6:4c:51:9e:74:9f:f3:3b:96:43:6f:03:4e:a5:9e:ff:40:
82:b1:fa:85:cd:ab:fc:7f:be:0b:4d:9f:82:20:a7:7c:87:96:
a0:b1:df:c1:ef:a5:31:53:12:dd:b6:2a:d8:28:30:2f:d8:82:
6b:ce:97:95:df:03:03:27:bf:7a:70:c8:cf:19:4c:50:a4:23:
ec:ce:2f:b6:53:11:fc:22:60:2d:49:a1:a6:11:47:e1:35:fd:
72:04:98:e0:2e:05:f2:4f:b5:c9:03:d0:78:86:e6:36:47:35:
ce:6a:47:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:37:35 2025 by rpki-client