Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File: mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier: Ai7wFc+eHVr2AmhBJaYOxSEOrYinkq/D+qUZjlpzXwg=
Subject key identifier: 14:A4:C0:5C:D9:F3:F4:07:1E:E4:D8:A1:63:C6:28:4E:1B:3C:C7:D6
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer: /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial: 01964D470B9252100ABCA0D3D2262EDA040F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number: 0239
Signing time: Sat 19 Apr 2025 09:00:23 +0000
Manifest this update: Sat 19 Apr 2025 09:00:23 +0000
Manifest next update: Sun 20 Apr 2025 09:00:23 +0000
Files and hashes: 1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: G4mLsn7BH/nvrxFNphWqgHLYf0weIoyDzd61L7rqcms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:0b:92:52:10:0a:bc:a0:d3:d2:26:2e:da:04:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Validity
Not Before: Apr 19 09:00:23 2025 GMT
Not After : Apr 20 09:00:23 2025 GMT
Subject: CN=14a4c05cd9f3f4071ee4d8a163c6284e1b3cc7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:18:b0:70:98:3d:d0:05:74:f7:51:bd:e6:7d:
41:e1:2d:19:46:89:dd:54:b6:83:9c:88:6d:88:c8:
5c:6c:f0:53:af:5c:76:d5:da:0c:4f:47:83:8e:94:
46:0f:2c:92:9a:59:ce:c4:0e:11:fb:22:53:ae:8a:
66:8b:32:c7:5c:c5:78:cd:68:d1:1a:06:52:0d:32:
0c:4a:d8:cf:ea:3a:c3:a1:fc:3a:73:77:99:b7:61:
63:c0:e0:15:cb:95:b2:04:ac:ed:9b:6b:b4:d2:4d:
62:f0:bf:b0:2a:b3:4c:fc:99:ca:c2:3b:29:fe:7f:
b4:d0:52:68:7a:85:f5:f8:97:53:52:bf:08:ce:f4:
7f:3c:9f:7b:8c:f9:70:e7:16:50:6b:05:b1:6b:b0:
6f:f8:12:f6:f2:ac:ea:43:b5:7c:f3:9a:ac:75:ca:
c4:4f:4b:23:b4:41:79:ea:c2:cd:b9:68:5c:d1:38:
8b:14:4a:14:b2:bb:39:dd:b7:a1:56:46:59:8f:c7:
a3:3a:bc:01:e6:2b:cc:0f:a3:53:ca:6a:3f:43:08:
68:21:ca:83:a3:22:1f:ef:3e:cd:98:e7:b1:f1:9a:
f1:54:c3:a7:14:24:65:e0:90:f4:66:2d:fb:c5:08:
20:4d:6e:92:87:1a:a2:bf:ac:b3:31:4d:da:b1:e4:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A4:C0:5C:D9:F3:F4:07:1E:E4:D8:A1:63:C6:28:4E:1B:3C:C7:D6
X509v3 Authority Key Identifier:
keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:43:ac:54:c8:ca:ca:46:92:26:e0:6e:0e:8d:3b:7a:3a:6a:
1f:5d:5e:69:88:90:bd:b8:c0:60:ae:b0:db:6d:cf:d1:7f:6c:
ef:a7:ab:f2:77:c2:49:6e:76:35:3f:35:02:59:84:56:d0:b7:
47:1f:a8:cc:8a:34:4b:c1:c3:fc:2b:7b:d0:b0:e3:bb:6d:5b:
b1:74:02:0d:55:2b:8d:80:c6:e9:15:35:b6:80:b6:bd:51:9b:
09:6d:04:60:53:c4:37:e2:1b:bb:48:69:6c:f3:b2:ad:f4:74:
c6:b4:71:19:04:7b:b0:e0:29:d2:aa:5d:6f:47:85:51:f2:6a:
35:42:c7:4a:f9:e3:35:14:71:2f:c4:5a:1e:00:0f:be:98:eb:
4d:43:59:0c:73:4e:62:7a:7b:4b:e1:d2:ba:07:61:cc:d5:6e:
f5:68:76:39:79:98:73:85:84:8d:5a:82:57:d1:ea:a5:56:25:
b1:43:b3:c2:29:06:33:14:5b:b9:f5:d4:9d:12:d5:59:ae:55:
cf:35:0d:59:e8:0a:c9:54:29:ec:b5:c3:0b:39:61:9a:d5:8f:
b0:c8:37:27:47:f7:ad:34:5c:d9:81:dc:30:f6:f8:ef:9a:31:
c8:de:32:18:fc:1e:7f:a8:52:2f:7d:f6:37:1b:43:19:a7:6d:
52:56:87:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:13:12 2025 by rpki-client