Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File: mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier: d1BHCFZsmk9disk+gknTL5J/z6piGL99u99MiXQH7fA=
Subject key identifier: D5:85:90:6D:8E:9B:04:6F:60:E5:0E:8D:52:15:3C:1B:CC:F9:2D:E5
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer: /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial: 019847769EFEB144B6B648587B91A6F29D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number: 033F
Signing time: Sat 26 Jul 2025 16:00:12 +0000
Manifest this update: Sat 26 Jul 2025 16:00:12 +0000
Manifest next update: Sun 27 Jul 2025 16:00:12 +0000
Files and hashes: 1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: KKy5ezg0A1rUERqgTTC6fKpEXuTMlAphHxWc0y4sHNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:9e:fe:b1:44:b6:b6:48:58:7b:91:a6:f2:9d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Validity
Not Before: Jul 26 16:00:12 2025 GMT
Not After : Jul 27 16:00:12 2025 GMT
Subject: CN=d585906d8e9b046f60e50e8d52153c1bccf92de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:45:44:27:6b:82:c9:2a:50:1c:4f:83:36:
bf:df:e8:7a:ce:32:6a:c0:ef:12:24:1f:e2:87:57:
e9:0a:04:3c:ee:93:a4:7d:33:7f:d4:86:68:b3:9f:
66:38:9e:3e:53:b6:61:c8:31:da:4f:eb:aa:a7:77:
27:2b:1d:a2:b9:94:1d:24:f1:20:5f:b2:f2:5c:8c:
a4:4f:5c:37:71:15:fb:26:68:30:ff:67:85:63:a0:
6d:b7:c6:c4:0a:8e:83:58:d0:eb:44:55:ae:34:2b:
c0:6f:e2:dc:44:5d:8c:7c:8c:1a:25:60:13:4e:dc:
31:07:a3:1c:8e:43:cf:cc:c0:14:ef:49:45:a8:4b:
2c:d1:a3:e0:53:a2:25:f1:08:97:76:f5:fe:27:0e:
c1:a3:40:81:0c:52:e0:6e:bc:d9:f7:23:f6:4a:a3:
f3:8e:b5:3c:6c:a1:f1:10:c1:d6:d9:78:ee:5a:e3:
e2:67:5f:4b:6a:bd:2d:0f:0d:fd:04:fb:5f:3f:0a:
25:d4:ca:67:93:55:2b:f4:c3:15:98:84:92:8b:cf:
ed:01:95:f6:f0:ff:7a:b3:c3:2f:40:24:d2:14:38:
5d:d2:58:a5:e8:2f:f6:01:2d:7e:94:56:03:ff:40:
66:af:d4:4d:2f:91:92:a7:d3:52:24:9b:2e:b7:1a:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:85:90:6D:8E:9B:04:6F:60:E5:0E:8D:52:15:3C:1B:CC:F9:2D:E5
X509v3 Authority Key Identifier:
keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d7:27:e4:8a:1c:62:50:a5:50:5f:10:8a:93:89:70:bb:f5:
5a:d5:12:4d:a7:37:cb:11:1f:11:70:fb:46:1d:7c:79:76:fb:
5d:f0:a3:3d:0e:d8:dc:b3:de:7d:a9:36:8c:8e:5c:1e:8c:50:
45:7e:66:22:0e:05:b5:50:e7:78:6c:4b:30:66:c0:91:3f:d9:
3f:32:a4:a8:68:ee:0d:91:9c:29:35:02:38:74:6b:24:6d:43:
1f:c3:93:ef:0a:3f:3e:21:da:81:72:c5:f3:53:a6:97:1b:10:
c9:e2:4b:0c:66:17:e5:a2:34:b2:52:5f:c9:79:f5:6b:df:df:
28:d8:12:ef:1d:f7:25:ee:40:cd:e8:1d:0f:80:d8:c1:d0:94:
cb:18:a9:1d:0b:85:fd:d5:55:c0:ba:65:9b:59:2c:29:e3:f6:
d8:57:aa:fc:80:49:b7:f5:4f:cd:91:01:25:1b:3c:ad:48:4f:
ac:25:91:8f:89:99:91:8b:9d:97:db:fb:1b:fb:6d:d4:5e:33:
15:51:aa:62:fe:4f:2b:58:ba:a9:4f:d6:13:0e:e7:07:b1:be:
0a:88:9c:13:5b:cd:67:a1:0c:45:4c:09:c7:6a:dc:68:a9:55:
ef:3f:72:3d:2a:23:cc:d3:e7:dd:cd:af:c9:72:d4:8b:05:d5:
43:e5:24:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 18:28:46 2025 by rpki-client