Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File: msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier: fzwyUqxelwr1RsAbB7Q3YTT1EzX/g6KfwX7ViMJTJyU=
Subject key identifier: 90:40:99:B9:90:DA:7E:41:B5:75:46:6A:C8:B2:1C:30:F1:FA:06:63
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer: /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial: 01974A7ABAD2703B72B8F83FAE469416721A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 13:00:46 +0000
Manifest this update: Sat 07 Jun 2025 13:00:46 +0000
Manifest next update: Sun 08 Jun 2025 13:00:46 +0000
Files and hashes: 1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: xN+xdrK628jRCPIb3sPNTqDond+vTs1idAxJaCMz7kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:ba:d2:70:3b:72:b8:f8:3f:ae:46:94:16:72:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Validity
Not Before: Jun 7 13:00:46 2025 GMT
Not After : Jun 8 13:00:46 2025 GMT
Subject: CN=904099b990da7e41b575466ac8b21c30f1fa0663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:19:bf:d1:d1:9c:0d:cb:06:70:74:3f:65:
db:e8:33:09:67:db:66:99:5c:cc:6c:a0:de:9c:ba:
11:91:51:ae:6b:f4:4e:d7:ed:fc:16:b5:56:00:99:
7f:37:71:8e:9e:73:b1:37:b3:72:34:d9:9d:09:44:
85:ae:64:4a:fc:67:05:9a:25:de:2b:fa:4f:1a:83:
60:26:d3:4a:d8:a3:96:b8:88:d3:54:09:bc:23:3f:
1a:8e:86:17:d5:bd:b6:0a:bb:b8:4a:5b:7d:21:c2:
73:75:73:27:72:43:49:ef:a5:76:7a:6c:0d:81:fb:
d3:e4:e2:ea:46:a2:8c:6c:38:a4:8f:4c:ab:97:d4:
83:e5:8c:cd:e7:6a:9a:21:c2:87:a7:fd:9d:eb:41:
c3:32:53:fc:7c:36:5c:42:02:ce:b8:8a:e1:97:a2:
2d:63:88:92:a1:94:a3:e1:70:bc:da:48:a1:37:b7:
8c:c6:b5:83:c6:a3:6c:07:33:af:f9:5b:94:8a:26:
b9:6e:fb:a8:b4:6e:d5:06:7b:f3:3b:84:5c:b3:53:
ee:8b:05:be:27:5b:d4:bd:f9:fb:19:d8:65:db:00:
5f:8c:41:9b:f2:9b:84:fc:c8:8b:00:8a:4f:89:b1:
ff:c9:04:98:d0:38:66:a2:11:f8:17:87:14:66:7c:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:40:99:B9:90:DA:7E:41:B5:75:46:6A:C8:B2:1C:30:F1:FA:06:63
X509v3 Authority Key Identifier:
keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3c:f3:6f:fd:67:73:da:10:07:3c:cc:7e:f1:37:4b:82:5a:
f4:97:10:f3:51:85:dd:d2:58:3c:94:26:a6:fd:41:20:c0:20:
47:49:e9:f0:7f:44:e0:ea:20:8d:65:47:78:e2:d5:54:65:f6:
da:e9:6d:7e:35:e4:bb:9c:53:eb:d8:68:7c:b3:17:c3:3a:84:
a5:35:53:31:c9:d0:49:f3:61:c2:1a:9e:3e:32:9f:0a:23:38:
d1:27:5e:c8:a7:02:0d:96:af:29:d7:9c:a4:52:25:7f:d7:e3:
49:6b:16:b6:0e:bb:b7:0a:14:f1:f7:ab:49:1a:4a:3a:8b:cd:
f0:d5:94:f0:28:43:4d:25:05:41:94:fb:53:a1:1c:ca:0d:5d:
d7:28:15:06:72:d8:ef:3e:92:da:38:1f:62:fa:f1:72:a6:0a:
e2:20:16:24:3d:d3:a1:cf:27:0c:fb:46:ed:f4:52:5a:45:03:
ef:47:4f:9c:77:e9:6d:53:12:e4:71:2d:c5:21:81:5c:bf:25:
b7:5f:12:9b:16:d5:83:1f:e7:0e:a2:8f:eb:f0:e1:36:15:63:
1a:b7:f4:8d:99:61:e3:38:93:99:36:5e:5e:f3:af:77:f2:f3:
f5:63:3f:30:67:29:94:81:59:a3:ad:13:16:23:a7:2d:b0:ec:
c8:2e:f7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:17:44 2025 by rpki-client