Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json)
Hash identifier: O3xHVUL15Tav9XNG55p4AUSBlvjAOpsOedZtPa5rAhk=
Subject key identifier: 07:60:FC:7E:C7:F2:72:58:AF:35:45:A8:47:72:CE:72:31:C0:11:C9
Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Certificate serial: 01964D7E0A6E8278DF658ECE9352D8A2BD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 10:00:27 +0000
Manifest this update: Sat 19 Apr 2025 10:00:27 +0000
Manifest next update: Sun 20 Apr 2025 10:00:27 +0000
Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: daemM6WyaIjELHa7kpV35jQMQfE6oMDQMSsMblUjteY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:0a:6e:82:78:df:65:8e:ce:93:52:d8:a2:bd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307
Validity
Not Before: Apr 19 10:00:27 2025 GMT
Not After : Apr 20 10:00:27 2025 GMT
Subject: CN=0760fc7ec7f27258af3545a84772ce7231c011c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:e4:9b:91:54:3a:ff:39:87:3c:b1:4d:06:
ae:53:ec:6b:94:12:f0:5a:ec:9b:8e:4f:49:db:6c:
e9:2b:6d:b5:15:ce:cb:91:9a:3e:5d:0f:c6:49:89:
fd:3f:51:5c:7b:6c:5e:ad:be:21:0f:ab:88:b6:ef:
da:bb:09:27:5d:44:5e:a5:27:5a:6e:60:a6:3f:dd:
7a:5c:51:5a:ad:a9:b2:c2:39:21:98:d9:5b:c2:82:
1d:ef:81:ab:57:d0:9f:f0:0a:08:8c:bd:70:40:f8:
c3:93:b3:ee:ac:ef:94:e3:42:89:ca:c1:51:85:44:
f5:e2:0b:c9:51:bd:7c:90:1d:c5:3d:45:e1:12:e5:
0f:f6:ef:92:71:98:3a:41:ab:01:7b:82:9f:88:d1:
f1:06:b7:ee:80:02:33:49:76:31:dd:c2:2f:64:56:
e0:3e:86:23:fa:16:f5:bd:1d:0a:25:84:2f:37:ae:
6e:c6:a1:5b:0f:c7:3b:75:ed:5b:f9:81:f2:57:d9:
c1:80:1d:57:1b:8c:86:19:be:d5:e8:31:40:d7:1f:
aa:f9:9d:b0:36:2c:f6:f9:0d:d3:19:a4:66:58:be:
69:d6:0b:8f:82:30:76:e6:8f:4e:a9:c2:f8:23:4f:
ec:ae:a4:f3:0c:f3:a4:aa:5e:b6:1b:fd:b2:9a:69:
4f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:60:FC:7E:C7:F2:72:58:AF:35:45:A8:47:72:CE:72:31:C0:11:C9
X509v3 Authority Key Identifier:
keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:27:7b:b1:ac:8f:49:a5:fd:99:48:59:40:79:f7:70:3d:3b:
0e:0a:0e:32:12:5a:26:da:f0:f0:e1:54:47:d7:af:96:f7:10:
bf:ed:4f:8b:36:4c:67:b0:87:19:81:5d:e6:c2:d2:1a:09:2c:
03:d6:80:bd:be:ff:9e:7a:cd:9c:4e:82:18:1c:0f:b9:23:d3:
73:9f:69:8c:d3:8d:b3:69:e4:63:23:78:d9:dd:49:5a:ec:43:
ef:4d:40:46:37:40:7e:e9:f7:ef:95:0f:58:51:5e:91:57:8d:
33:49:fe:ba:97:19:a5:12:ea:55:fc:81:b7:9b:f4:57:80:21:
f3:a7:b9:66:f9:bf:04:f1:27:6e:08:72:8a:8b:5c:dc:4f:2c:
ce:8c:e8:87:5a:7b:76:db:b8:58:ee:25:f9:6b:68:40:83:41:
92:fc:6b:f1:c1:7e:6e:cf:84:b7:4e:58:33:5f:a5:54:a3:40:
5f:29:6e:a4:e7:e9:51:77:8a:6d:bb:30:01:cf:7c:c0:d8:fa:
ef:a9:88:43:fe:c1:f8:f0:51:13:ca:84:d7:53:32:37:ec:78:
a3:56:21:7b:fe:f4:f1:4f:3e:fd:8c:e7:c1:87:38:9b:b6:d6:
e3:06:a6:01:e2:18:5a:c1:41:97:57:63:5f:02:4e:fb:71:dd:
94:f3:4d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:05:25 2025 by rpki-client