Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.mft
File: mhU_Od12IydNhl3LiFChYTKkIgY.mft (raw, json)
Hash identifier: njrrLHCQN4ChtUEQ2LZ5HQpPqStbTnezRhHwb0m0hqU=
Subject key identifier: 36:62:9D:D5:90:F8:D8:6B:1B:AD:60:1C:7D:6C:7E:7A:7E:39:65:69
Authority key identifier: 9A:15:3F:39:DD:76:23:27:4D:86:5D:CB:88:50:A1:61:32:A4:22:06
Certificate issuer: /CN=9a153f39dd7623274d865dcb8850a16132a42206
Certificate serial: 019654C9FB2A600A6724B10CEEB39C0ABA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhU_Od12IydNhl3LiFChYTKkIgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.mft
Manifest number: 0288
Signing time: Sun 20 Apr 2025 20:00:45 +0000
Manifest this update: Sun 20 Apr 2025 20:00:45 +0000
Manifest next update: Mon 21 Apr 2025 20:00:45 +0000
Files and hashes: 1: mhU_Od12IydNhl3LiFChYTKkIgY.crl (hash: yWgJsxw4IuTm0uXIyj1i0Vc3zytLxDELEdc9TKJCZBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mhU_Od12IydNhl3LiFChYTKkIgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:fb:2a:60:0a:67:24:b1:0c:ee:b3:9c:0a:ba:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a153f39dd7623274d865dcb8850a16132a42206
Validity
Not Before: Apr 20 20:00:45 2025 GMT
Not After : Apr 21 20:00:45 2025 GMT
Subject: CN=36629dd590f8d86b1bad601c7d6c7e7a7e396569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:d3:0d:50:27:a9:0d:11:45:d8:6a:9f:5d:
3c:23:a9:f6:87:d3:02:41:44:7f:c9:32:bb:30:ac:
70:41:f6:cf:b2:2d:7f:86:ce:c2:6c:a0:a4:88:6f:
b6:ff:1d:d7:a7:44:cf:63:34:15:04:f4:67:47:b4:
32:5d:cd:f3:0a:8a:71:22:a8:bd:d4:48:1a:16:79:
80:28:fb:7d:dd:82:be:3d:59:9f:a5:94:04:77:34:
db:f0:89:3c:c4:5c:4d:21:dd:9e:42:b4:8f:f9:94:
c3:e9:1a:fb:05:41:1d:2c:14:8f:e6:f4:14:b6:da:
9f:1b:a0:5b:90:2c:39:ac:b7:70:2e:7f:d8:ac:ae:
f6:f1:e1:69:8d:70:57:3a:8c:4c:dc:b0:a8:1d:01:
db:7e:ba:c8:f6:75:3e:f6:c1:09:47:bf:13:b4:de:
95:9e:32:cb:84:be:89:ae:a4:9f:a9:6f:1d:0d:ef:
a0:93:57:85:21:73:48:ca:a4:70:b6:c2:43:7e:22:
21:f8:9a:d9:e4:5d:0b:4f:69:64:39:ef:ed:28:85:
48:70:0c:eb:bb:e1:f2:a8:8a:f2:e2:7d:53:ca:41:
67:12:43:c4:2c:ec:0c:7e:e8:f9:e8:5b:10:7f:83:
a2:bf:2b:14:ae:06:49:33:b6:6e:43:50:a3:51:8c:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:9D:D5:90:F8:D8:6B:1B:AD:60:1C:7D:6C:7E:7A:7E:39:65:69
X509v3 Authority Key Identifier:
keyid:9A:15:3F:39:DD:76:23:27:4D:86:5D:CB:88:50:A1:61:32:A4:22:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhU_Od12IydNhl3LiFChYTKkIgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3ace88-7021-4c39-9dd9-b893bb07fe50/1/mhU_Od12IydNhl3LiFChYTKkIgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c5:fd:86:7b:91:94:b7:97:fb:58:f8:10:cf:3f:f3:02:c5:
04:28:5c:ef:51:d6:05:1e:c3:4d:4c:c5:95:01:3b:42:f2:18:
b6:1e:a8:42:d7:5f:e6:30:9f:d5:9a:7f:b7:d4:b7:0e:6b:3e:
c9:21:47:bb:0f:3e:10:d8:e9:0b:10:6b:0b:f1:a1:4f:27:4f:
e9:57:22:96:09:ab:d0:77:67:d6:41:20:ab:9f:e3:5e:00:f9:
85:bd:15:e4:f6:2b:98:f5:88:d5:46:15:a4:03:6d:70:81:46:
5a:75:09:18:81:91:95:86:33:4c:24:b4:c8:8b:17:01:75:27:
8a:d9:00:54:7a:27:c0:c5:37:d3:dd:51:57:e7:90:cc:0f:18:
02:a5:ac:6b:2a:fb:b6:c5:7a:5c:7b:2a:7d:e0:9d:70:9f:fb:
3f:b9:ab:ff:f9:0d:25:ea:ba:29:41:b0:49:01:b8:13:51:36:
28:05:56:af:ca:11:9f:e1:e4:b3:25:06:fb:ea:b6:32:5a:0a:
9d:5b:e1:ed:56:5c:8c:d5:7a:a3:55:73:35:a6:93:cf:91:d0:
30:9b:42:aa:4b:70:74:48:e9:96:d3:96:2c:2c:bf:6b:9d:98:
73:5b:52:25:4c:cd:f6:db:9f:10:0f:3d:ad:0a:8c:75:40:ab:
b1:12:f1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:18 2025 by rpki-client