Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier: rY01nZq8Py7nTtAd+XF04Dr0NabCXuHYRWbFhdSJyHM=
Subject key identifier: 07:98:65:C7:16:9D:5D:58:54:C3:6E:38:A4:91:74:B4:F1:29:89:2B
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer: /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial: 0196572710AF6BD3F73F5A951C9DA7C21DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number: 053D
Signing time: Mon 21 Apr 2025 07:01:40 +0000
Manifest this update: Mon 21 Apr 2025 07:01:40 +0000
Manifest next update: Tue 22 Apr 2025 07:01:40 +0000
Files and hashes: 1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: exdDWQlCicou+goAksZug10FPaU+cG7fDDLZMihgkWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:27:10:af:6b:d3:f7:3f:5a:95:1c:9d:a7:c2:1d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
Validity
Not Before: Apr 21 07:01:40 2025 GMT
Not After : Apr 22 07:01:40 2025 GMT
Subject: CN=079865c7169d5d5854c36e38a49174b4f129892b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:c1:38:c1:fc:a6:c1:72:78:79:52:94:9a:
e8:3a:91:26:cc:51:b8:79:ff:e2:bd:59:db:f3:4f:
33:9d:92:14:af:77:8f:dc:52:0d:94:19:68:f0:83:
3d:15:b8:3d:c1:da:15:16:7c:3b:9a:cf:91:3c:b1:
06:e3:ea:ec:14:2f:f0:88:21:54:cd:8b:05:ef:ba:
81:c7:09:8f:db:ce:87:3b:bc:c4:c2:07:89:56:d0:
32:13:07:87:f6:a4:8c:9f:49:aa:4d:78:af:d3:e0:
76:7d:58:0f:6e:11:1e:eb:7a:7c:78:34:f0:b4:8e:
5b:6b:1c:12:e3:19:1f:69:5e:ef:5e:16:3a:91:ba:
26:2e:34:fb:c7:ba:de:dc:31:68:e5:c8:f5:b4:52:
9a:99:2d:d5:55:e7:db:37:69:95:1e:d4:0d:b6:9f:
50:b0:06:dd:3a:b7:59:29:25:d5:87:15:19:13:c9:
a2:2c:a3:c1:40:f2:80:b6:f6:b2:82:f8:57:1d:02:
6d:ce:6c:d8:6a:db:a0:42:33:f4:c0:74:96:18:9e:
86:0c:53:06:b6:4f:b7:55:9c:bd:80:82:0d:96:9f:
56:9c:40:7b:67:ca:b6:58:64:f3:d0:f0:fc:49:73:
c1:41:a4:50:42:46:c8:35:f7:68:6a:97:75:85:04:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:65:C7:16:9D:5D:58:54:C3:6E:38:A4:91:74:B4:F1:29:89:2B
X509v3 Authority Key Identifier:
keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:90:00:91:92:88:61:ca:d2:a5:f8:9a:e6:c7:61:0a:5f:19:
0e:19:6c:c9:fa:05:5e:4a:b7:18:f8:6f:c4:70:ac:df:31:e7:
72:5c:e5:d9:ea:67:86:7d:f5:35:7e:fa:01:39:af:60:2b:22:
58:88:71:bc:ed:cc:cb:35:b1:20:c5:7f:ad:6a:7c:14:fa:d9:
3d:d7:f8:bd:27:46:83:01:07:09:40:74:c3:70:97:5b:8a:7e:
fd:2c:5d:d3:d7:91:2f:b4:85:01:8a:0d:c4:95:aa:79:26:9b:
c2:a5:69:76:09:5d:b6:4e:9b:ca:60:b5:30:03:fd:a8:3f:1a:
3b:0b:b3:b0:1c:d1:69:43:bf:0f:a2:0a:16:6a:12:17:ab:89:
10:8c:1c:19:ee:3e:a4:ae:e1:93:c0:a2:c9:67:d6:b1:bd:3d:
ba:56:c2:50:30:f9:f6:9a:f9:f0:d6:04:99:ed:ed:ae:65:cc:
4d:43:2f:a4:47:19:55:bf:fc:30:53:d9:32:35:a1:88:8c:c8:
5b:99:99:e5:84:83:0f:6e:76:c9:26:8f:61:75:f7:76:66:92:
67:29:2b:90:71:4f:dd:72:03:4a:37:bb:0f:2a:86:c6:5a:ab:
92:4b:84:9f:d7:0d:98:ff:c8:6e:d4:d8:74:7f:ca:bd:fe:5c:
48:13:ad:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:33 2025 by rpki-client