Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier: DS/d2gapg5sqhkUph8p9WHDLAjzqAgHrd91zQsh/QOE=
Subject key identifier: CB:5E:05:90:55:B0:D5:D1:07:12:82:92:E7:25:B8:8A:74:0B:EF:9E
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial: 019676E79F1817D25235818C5A6EBDB6D0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number: 150B
Signing time: Sun 27 Apr 2025 11:00:13 +0000
Manifest this update: Sun 27 Apr 2025 11:00:13 +0000
Manifest next update: Mon 28 Apr 2025 11:00:13 +0000
Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: KTSTxHQzrQHy1sjFCngFLtYfqJ893irmOptbnBLXz0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:9f:18:17:d2:52:35:81:8c:5a:6e:bd:b6:d0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Validity
Not Before: Apr 27 11:00:13 2025 GMT
Not After : Apr 28 11:00:13 2025 GMT
Subject: CN=cb5e059055b0d5d107128292e725b88a740bef9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:32:6b:8b:d8:dd:0b:47:3e:80:f2:19:24:
2a:23:a7:9b:b6:75:5e:08:ee:16:3a:97:8e:24:5a:
fe:8f:2b:ba:74:a9:08:ed:96:1c:34:c3:96:60:87:
36:76:8f:c0:56:1e:d2:5f:18:48:02:79:1e:25:e0:
f2:2c:3b:6d:6c:13:05:b7:4d:31:b3:aa:56:e4:f0:
5c:68:9d:99:e8:42:ac:17:6b:9b:b1:bb:74:14:88:
c8:af:d5:af:3a:4d:45:ef:00:d8:39:72:da:9c:b1:
d7:7c:0b:f0:d4:73:21:20:f3:b0:9b:2a:5f:0c:bf:
36:88:95:8d:de:08:ab:be:99:53:7f:b1:b7:2a:5d:
90:af:3b:51:9b:49:50:26:71:92:21:fc:37:2a:9b:
7d:0d:f8:07:2b:94:a4:dc:27:0c:b3:42:c8:81:c3:
9d:d3:ff:a6:f9:d9:47:4a:34:a5:8b:80:1c:95:67:
58:84:00:22:d7:d1:3d:bf:c4:9d:ee:f6:6c:e8:d8:
51:12:ae:7b:ca:a2:c2:08:2a:7a:1e:ac:1b:2c:8b:
f0:c8:60:dc:13:04:b3:8a:ae:ac:7d:f9:5b:b1:ce:
d0:fe:f4:69:fd:59:ac:a6:9a:d0:25:85:ce:76:28:
a5:95:e3:e6:c3:01:9f:8f:13:63:cd:b5:3e:1a:0b:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5E:05:90:55:B0:D5:D1:07:12:82:92:E7:25:B8:8A:74:0B:EF:9E
X509v3 Authority Key Identifier:
keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ab:c9:c3:45:cd:d1:d9:92:4e:92:4a:c6:81:1d:ca:aa:5c:
ba:48:12:42:b0:a7:f5:29:8e:37:af:11:b3:26:ea:72:00:d3:
74:d0:4b:df:b1:8d:60:70:98:05:24:4a:7a:f8:9a:41:23:6e:
d4:54:05:fa:34:a9:05:cc:21:c4:7d:3b:48:0b:9d:80:03:48:
43:06:19:5b:e4:17:6a:af:36:0b:2b:6f:31:00:39:dd:e4:4e:
5e:d0:cf:64:11:f2:bf:97:7e:84:10:51:dc:1e:b7:8a:0a:2a:
e5:77:15:4a:39:4a:bd:25:5e:c3:df:a9:3b:4c:40:e8:d0:24:
f9:19:30:ed:44:55:3b:50:11:97:2b:9e:e8:b8:32:12:97:a9:
b1:62:d8:ff:68:95:1c:9f:c8:50:e0:00:19:87:b4:50:de:1e:
d8:8c:1d:a6:64:4f:06:f5:ed:46:48:28:a8:60:d7:17:07:61:
66:49:35:06:0f:e2:33:f4:32:99:3b:8e:1a:4e:6a:1e:3a:9b:
73:76:cd:65:4b:fb:a3:95:6f:c3:c8:14:b4:07:f2:4c:5a:59:
45:cb:6b:90:7b:46:5e:f1:0d:bd:62:6e:43:b5:0f:40:92:91:
34:c1:4f:92:10:75:1a:78:8a:7b:65:73:23:ac:7e:b9:05:ea:
14:ab:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:01:26 2025 by rpki-client