Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
File: mO4cQpzn8y4xDctEE9iv6MdkWmE.mft (raw, json)
Hash identifier: kmHWZ5PSksYLk38yDGC08NqtA/cEo51BMOHj3R1LriI=
Subject key identifier: EE:E9:A8:AE:01:FA:71:07:68:56:FC:F8:81:FF:75:6C:AB:7B:AE:7B
Authority key identifier: 98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
Certificate issuer: /CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Certificate serial: 01965725DAA2757430724B0BAAA7BAF51D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
Manifest number: 093A
Signing time: Mon 21 Apr 2025 07:00:20 +0000
Manifest this update: Mon 21 Apr 2025 07:00:20 +0000
Manifest next update: Tue 22 Apr 2025 07:00:20 +0000
Files and hashes: 1: mO4cQpzn8y4xDctEE9iv6MdkWmE.crl (hash: 8i3u9cyL3/wAAgL530nFALEJBV5SderMclZYm5nmxHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:25:da:a2:75:74:30:72:4b:0b:aa:a7:ba:f5:1d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Validity
Not Before: Apr 21 07:00:20 2025 GMT
Not After : Apr 22 07:00:20 2025 GMT
Subject: CN=eee9a8ae01fa71076856fcf881ff756cab7bae7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:e4:78:eb:72:e2:0e:e5:39:83:3f:5b:4c:
94:7e:85:66:e9:d4:3c:79:2b:f3:c9:3c:e0:ed:0f:
52:ea:53:77:18:95:6a:2b:05:ba:2c:f9:74:7a:e1:
aa:23:a3:b6:a6:c8:19:38:a5:73:9b:cf:57:f1:a3:
7e:64:14:ed:bb:5f:13:25:fd:12:71:e0:58:88:e9:
a3:cb:b4:00:2f:28:64:41:fc:be:7b:d6:3d:36:ef:
fd:d2:ff:25:0b:75:d6:f3:66:ed:04:28:13:7d:b3:
44:d4:98:ba:a4:4d:b0:16:be:65:db:81:82:be:21:
82:5e:01:15:2c:cb:90:b3:eb:e3:26:54:90:43:54:
ec:8d:38:2e:25:ec:ec:20:c6:88:21:21:72:cf:be:
a3:4c:c5:c4:a4:62:3d:a6:54:f1:12:b4:16:16:de:
00:f1:af:34:98:09:11:68:d4:4f:a1:71:68:35:5f:
29:9d:cb:0e:5a:a5:f8:f2:7c:b0:2e:a6:49:1c:ea:
89:37:bc:ea:bd:b3:a5:c9:98:e7:72:09:e4:8d:8f:
e4:4a:95:5e:82:29:8f:6f:4d:9c:1b:0e:9a:76:b8:
08:e5:9c:9a:5d:ef:52:53:55:1f:ac:96:66:7b:06:
00:e2:63:06:e3:38:d8:0e:f7:6c:03:fb:67:9d:66:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:A8:AE:01:FA:71:07:68:56:FC:F8:81:FF:75:6C:AB:7B:AE:7B
X509v3 Authority Key Identifier:
keyid:98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:17:2f:59:fb:6f:04:ff:d8:12:bf:26:7a:0c:49:a1:bc:99:
70:fe:50:8d:16:f0:6d:a3:27:31:34:00:f9:65:a6:1a:9a:72:
8f:db:ee:70:b1:14:99:aa:b4:22:d8:bd:d4:e5:de:ea:6f:60:
ef:3f:d9:18:f9:67:5e:c2:c9:4b:a8:7d:06:60:1f:3c:e9:8a:
a9:94:93:03:62:f6:31:a5:bb:9c:a4:e2:76:91:99:5f:a5:ce:
56:03:51:8a:22:4b:30:95:29:ee:73:66:12:2a:7e:3f:f5:68:
73:0e:0c:4c:ae:7e:42:8b:dc:3a:fd:71:e6:db:05:34:f6:19:
fc:ea:fb:2e:51:c8:94:27:6e:18:0a:96:7d:bb:7a:65:30:af:
2f:b3:d8:b9:2e:f9:ef:f8:69:9c:b7:83:b9:2d:f0:c2:97:e4:
da:ed:2f:72:37:27:a9:56:6a:d3:21:16:77:2a:1d:ff:25:a3:
dc:7f:3a:51:c4:7f:ab:16:3c:aa:a5:53:82:bc:a3:8a:26:8b:
bd:cf:1c:fc:f8:f7:00:68:5d:19:88:45:01:2e:e8:d7:aa:4a:
18:a7:67:d7:f7:83:ef:f7:dd:66:3c:7d:4e:59:f5:2d:43:f5:
f8:7a:55:4b:ac:11:42:3e:c8:df:9b:de:b6:b2:50:5b:12:47:
3a:5d:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:20 2025 by rpki-client