Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
File: mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft (raw, json)
Hash identifier: 2TalEv2AWrGTf8T39H1pggGgTdtBnmOODbifDxtCJt4=
Subject key identifier: 10:B1:71:75:B0:CC:7E:32:36:46:6B:BA:C0:01:EC:AE:5A:76:1D:AD
Authority key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
Certificate issuer: /CN=9928b812e2e9f472eec7d233f604af263e850f31
Certificate serial: 019659142C077085B64CFAFDA44AF4EE10A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
Manifest number: 0A38
Signing time: Mon 21 Apr 2025 16:00:16 +0000
Manifest this update: Mon 21 Apr 2025 16:00:16 +0000
Manifest next update: Tue 22 Apr 2025 16:00:16 +0000
Files and hashes: 1: mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl (hash: vUn9Fl276GQAdxoHjV8wazLj9tgfZmg2kYdKY8wGiOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:2c:07:70:85:b6:4c:fa:fd:a4:4a:f4:ee:10:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9928b812e2e9f472eec7d233f604af263e850f31
Validity
Not Before: Apr 21 16:00:16 2025 GMT
Not After : Apr 22 16:00:16 2025 GMT
Subject: CN=10b17175b0cc7e3236466bbac001ecae5a761dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:87:70:e0:b5:0b:91:1a:1c:9e:72:01:f3:
5f:3e:02:d6:b2:7d:fe:d3:a0:c9:01:83:3a:d1:a2:
b9:72:60:1b:fe:16:9f:c4:b5:dc:0c:f2:a3:f9:77:
6a:93:c2:33:6c:bf:64:ef:7f:5b:3a:b3:9f:f6:68:
31:a7:51:1b:c3:43:95:66:82:19:56:89:e1:41:d2:
e4:eb:53:6d:82:5c:be:ac:77:05:22:13:ee:79:1c:
4e:33:e7:a8:0c:fe:6e:19:e8:e5:6b:71:aa:0b:23:
98:7a:b8:6b:70:08:72:ad:a0:97:8e:37:14:71:ad:
60:4b:8a:08:b9:ae:7d:f9:d2:8a:b3:ae:5f:86:dc:
6a:d6:30:4c:27:20:0c:e1:23:a5:79:e8:ab:d8:c1:
6e:7f:f8:52:70:9a:d0:9b:be:fb:dc:e0:61:71:8c:
14:a5:a0:f1:0c:91:63:73:98:9d:a1:c3:e7:d2:37:
83:bb:fb:ae:f7:46:65:7f:f7:83:3b:70:cf:de:6a:
0d:35:ee:76:52:c9:4b:c5:15:e4:7d:c7:2a:a0:ad:
40:f9:26:5e:dd:ab:60:71:da:a6:ed:ae:95:c6:0b:
89:cb:b7:87:60:45:09:f3:0b:97:91:03:12:bc:dc:
7a:92:66:92:91:3c:49:2c:f3:a6:93:1f:72:3f:0d:
9f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B1:71:75:B0:CC:7E:32:36:46:6B:BA:C0:01:EC:AE:5A:76:1D:AD
X509v3 Authority Key Identifier:
keyid:99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:47:c1:9d:41:f1:7f:27:0c:6e:35:38:ed:5a:f8:69:cf:e2:
ac:5f:af:b1:6d:d5:4c:59:e7:35:33:5a:e8:c6:44:c0:f4:15:
8c:6d:06:1f:20:42:f2:de:b7:f5:8f:4e:af:f9:0e:d8:52:62:
19:13:fa:20:6f:28:1b:0a:3a:77:2b:2a:a6:8b:bb:16:10:bf:
f1:85:04:3a:5b:fe:d8:fd:62:82:21:d2:9b:a6:e8:00:47:6a:
a7:9f:5c:c6:7b:97:cc:64:fe:8c:10:16:e4:ef:0e:a0:7e:e1:
e0:1c:fb:44:a7:65:73:22:36:53:87:64:19:43:65:29:e0:7a:
83:76:f6:29:ae:0e:6b:00:81:6e:f4:b7:f5:71:60:aa:91:c4:
15:f0:15:23:65:96:b7:00:79:90:d1:4f:fb:de:34:d8:f1:0c:
eb:f9:d5:e2:41:c6:40:00:36:08:59:c7:8a:85:94:15:a5:fb:
b0:c3:01:5f:22:9d:81:b0:94:48:46:d1:8c:54:cc:cf:8b:ed:
34:c3:12:9f:e2:01:4e:00:7c:d4:6a:21:81:e6:a0:17:26:29:
f9:1c:af:1a:b8:b6:c4:87:e1:04:49:47:a6:1b:d0:29:a9:6a:
35:14:03:67:ab:e7:00:43:c6:d3:de:ac:b7:04:f9:5e:89:6e:
27:f6:4e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:27:42 2025 by rpki-client