Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
File: MU0IhXjsDimwS0PpAUk1hnJjZP0.mft (raw, json)
Hash identifier: wzwiGw/NSRSUuMU6LZpKvz4IDXqPqmMqa/DdlXPcgZE=
Subject key identifier: 83:BB:69:EF:DE:98:1F:48:39:A3:86:B6:B5:D2:15:8A:9F:65:7C:A8
Authority key identifier: 31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
Certificate issuer: /CN=314d088578ec0e29b04b43e901493586726364fd
Certificate serial: 019659149F0C5EBB33E85CA6809376520A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
Manifest number: 1238
Signing time: Mon 21 Apr 2025 16:00:45 +0000
Manifest this update: Mon 21 Apr 2025 16:00:45 +0000
Manifest next update: Tue 22 Apr 2025 16:00:45 +0000
Files and hashes: 1: MU0IhXjsDimwS0PpAUk1hnJjZP0.crl (hash: pGeDN98JpHKVHcAYGJadPX3ozHFr/5yAVR7vwHU5FsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:9f:0c:5e:bb:33:e8:5c:a6:80:93:76:52:0a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=314d088578ec0e29b04b43e901493586726364fd
Validity
Not Before: Apr 21 16:00:45 2025 GMT
Not After : Apr 22 16:00:45 2025 GMT
Subject: CN=83bb69efde981f4839a386b6b5d2158a9f657ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:8b:ac:b6:36:8d:cf:43:71:49:06:2f:18:
72:a7:72:7a:70:78:7d:af:f3:d5:28:75:c7:b5:47:
ac:b1:07:a3:57:38:dc:7c:78:be:ab:a2:6e:e4:e7:
a3:7e:50:4d:fd:dd:4a:1d:8c:96:5a:48:3c:45:29:
c7:78:7d:b8:85:8c:a2:b6:7e:5f:91:52:b6:a2:c9:
1d:2f:2a:c6:02:fe:0e:cb:14:0c:4c:1c:7f:f7:ed:
64:91:68:fe:b2:3c:e6:08:06:53:fa:d3:72:3f:c7:
05:4c:9d:6a:9e:16:97:11:0e:d3:0e:46:4e:e5:32:
9a:dc:a2:78:58:d6:51:33:bc:c1:a8:eb:51:e5:a0:
21:56:35:dc:9a:6d:c6:a5:44:79:95:60:fc:83:fa:
9b:d2:ac:d4:ba:92:42:89:cd:a3:40:46:ef:11:a5:
d3:2f:1a:f4:4f:d4:9e:b8:98:f6:e2:81:72:0b:1d:
db:27:b9:87:eb:2e:96:97:12:95:ea:82:50:2f:d6:
aa:ee:60:df:6b:c9:05:1a:13:93:21:0a:f4:b5:ed:
cb:ef:5e:08:16:cd:eb:5e:db:ed:ef:cc:19:9c:36:
b0:17:9d:c8:2a:c2:1d:4b:d6:90:ec:21:a2:01:a2:
ec:6d:6c:f0:c9:f5:1f:cf:64:7c:99:7d:bb:a9:d3:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BB:69:EF:DE:98:1F:48:39:A3:86:B6:B5:D2:15:8A:9F:65:7C:A8
X509v3 Authority Key Identifier:
keyid:31:4D:08:85:78:EC:0E:29:B0:4B:43:E9:01:49:35:86:72:63:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MU0IhXjsDimwS0PpAUk1hnJjZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/373874-34fd-4e64-b6a9-18006b6643af/1/MU0IhXjsDimwS0PpAUk1hnJjZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7d:8c:e0:34:d0:60:b2:0a:c8:c7:f1:1e:95:54:1d:8a:b0:
24:1d:49:3f:14:54:12:88:78:d8:97:98:ed:86:15:31:ae:ac:
e9:fd:db:d2:b1:b4:16:76:f0:cf:b4:35:6e:1c:17:01:c5:62:
d5:b8:d1:52:be:d4:30:2c:b5:4e:b4:44:ba:4b:65:5f:fc:e5:
33:1e:b4:cb:df:66:b2:5c:47:ab:a0:0d:a5:b8:e3:11:3c:df:
45:6e:63:95:f5:77:2e:6d:bd:c9:fd:7b:b6:b3:34:96:c8:ab:
d9:6d:c3:86:20:33:4a:c8:d7:dc:91:6c:45:a3:ea:3f:de:de:
cd:55:94:92:e3:35:7d:8b:a4:38:51:71:59:db:5b:50:ee:44:
90:b6:6e:7c:71:25:bf:9b:a2:64:da:3d:85:f3:4f:cd:64:04:
05:63:3e:6e:00:b7:8d:83:a0:b0:fd:bb:77:5a:e0:ea:43:50:
fa:bf:71:9b:6a:90:d5:74:6d:4a:2d:8c:5b:7d:15:f1:f7:33:
ed:89:57:0a:a8:85:eb:9f:01:91:87:e2:3c:d7:62:14:88:b4:
94:97:fd:e8:33:66:c4:1f:48:f3:6b:c2:e2:a8:1d:a9:72:64:
1f:d6:12:69:2b:0d:07:f4:06:b7:cc:aa:1b:c5:c0:77:50:c0:
e4:54:d0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:22:25 2025 by rpki-client