Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier: w3b+y6ZsnpRfRH45/dCZEf1w7Il2nFZIOXhGBkMMilU=
Subject key identifier: 3D:EB:2E:00:9C:13:91:FF:DD:15:50:68:7D:19:B5:C5:A5:FD:00:08
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer: /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial: 0196760C10919027139AD580393CA173971D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number: 099D
Signing time: Sun 27 Apr 2025 07:00:24 +0000
Manifest this update: Sun 27 Apr 2025 07:00:24 +0000
Manifest next update: Mon 28 Apr 2025 07:00:24 +0000
Files and hashes: 1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: emQ4QxAtaS4WHxP2TS1zmHwKfYR2+q7+1oeFAENea7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:10:91:90:27:13:9a:d5:80:39:3c:a1:73:97:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Validity
Not Before: Apr 27 07:00:24 2025 GMT
Not After : Apr 28 07:00:24 2025 GMT
Subject: CN=3deb2e009c1391ffdd1550687d19b5c5a5fd0008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:de:07:c3:29:c5:46:1d:0f:01:19:2a:7d:a7:
a1:fe:a3:94:64:f0:d9:28:63:fb:b6:f1:9a:cd:9d:
1f:65:b0:91:49:db:b7:96:1d:e2:68:27:f2:c3:5a:
1e:df:09:7a:c8:61:43:1e:07:f4:82:dd:a3:fa:4d:
e4:eb:64:ac:01:1c:4a:b3:e2:de:f5:f1:0a:0a:32:
9d:4f:28:ea:99:ea:e5:ab:00:11:aa:40:51:f4:4d:
61:2f:ce:17:e9:3e:4b:5b:95:e4:86:fd:a6:0c:1f:
96:40:dc:cc:1e:03:00:a8:a4:79:0a:7e:d8:94:97:
31:4a:78:69:29:73:62:47:11:84:b8:6b:be:88:cf:
9d:a9:d4:5a:b5:68:fc:07:2f:75:31:3a:c0:89:a4:
47:cf:38:5d:64:e3:dd:bf:7d:06:ac:44:30:4f:c4:
49:87:8e:81:b5:fd:c8:66:ca:a6:b6:b1:2a:b2:2a:
3f:22:50:05:09:80:68:30:f6:25:54:83:7f:1b:25:
70:9c:aa:df:ed:03:16:c5:c5:0d:7a:9c:6a:2e:ed:
93:8e:e9:d7:e8:2e:9a:03:2c:88:8e:a7:5f:f3:d4:
43:64:f7:f1:94:3c:2b:d4:cb:c6:de:9f:35:b3:14:
a4:e1:23:e9:42:19:72:4f:d1:df:cb:27:d5:a2:80:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EB:2E:00:9C:13:91:FF:DD:15:50:68:7D:19:B5:C5:A5:FD:00:08
X509v3 Authority Key Identifier:
keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ae:ff:d8:53:4f:1c:72:90:44:1d:9c:a6:86:74:b3:c0:9b:
18:ea:f4:29:50:7e:50:1f:a3:e2:f8:38:b4:36:dc:24:c3:9c:
4b:e0:04:78:1c:81:b0:3d:66:aa:1f:2f:86:50:3a:20:76:1a:
cb:71:66:c7:91:34:07:9f:b2:0f:47:e4:5e:85:ab:ba:c6:9e:
54:c1:94:4e:32:e9:b6:03:e5:12:b8:0f:e3:e7:5c:02:ea:e6:
a2:71:91:19:90:56:e0:da:66:90:98:12:ef:3c:5c:ee:88:2e:
8a:2a:88:30:24:14:bf:a7:13:62:a9:34:40:6a:ca:e9:e2:02:
76:a3:f2:65:7a:16:09:43:0a:98:52:7a:24:48:3a:a5:96:c0:
18:da:c4:81:61:e9:3d:55:f6:86:1c:e0:2c:2a:ff:8b:da:e4:
d4:7f:3d:fb:68:44:68:e7:c0:a5:c8:85:52:d8:62:9f:a8:46:
95:f2:73:0e:c1:ba:26:e2:46:ac:30:25:64:3c:df:da:6f:78:
42:c6:95:a6:dc:a1:fb:38:22:5a:7f:50:23:d1:64:39:c7:0a:
98:b7:9b:2b:c1:2b:c5:7f:26:15:68:ff:fd:7d:5b:1d:ae:e8:
79:3a:b0:66:6e:64:5e:41:5d:b4:d3:9d:09:53:0c:5f:4a:62:
de:07:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:53:01 2025 by rpki-client