Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File: nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier: Jhmyn/4iLUOmF0ndq1XRXXcz4wqAsW6JboUbBC5Cgn4=
Subject key identifier: AA:B4:72:0E:1B:BE:35:02:50:4D:C4:29:9F:85:41:6E:95:58:67:3A
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer: /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial: 0196515B99DAF9616A5DCF2CED707B342583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number: 0B25
Signing time: Sun 20 Apr 2025 04:01:19 +0000
Manifest this update: Sun 20 Apr 2025 04:01:19 +0000
Manifest next update: Mon 21 Apr 2025 04:01:19 +0000
Files and hashes: 1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: MQkmg29drtbdQXi953S8VLc55BsiFQ7UPOG664wQ0Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:99:da:f9:61:6a:5d:cf:2c:ed:70:7b:34:25:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Validity
Not Before: Apr 20 04:01:19 2025 GMT
Not After : Apr 21 04:01:19 2025 GMT
Subject: CN=aab4720e1bbe3502504dc4299f85416e9558673a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:04:c1:5f:6c:b9:4a:26:85:d9:39:64:59:
3b:ee:97:a9:a3:29:0f:dc:a4:8d:bc:ac:69:96:cd:
d1:38:33:9e:1d:17:e6:1a:ce:26:49:d5:a9:77:06:
e8:a9:10:60:1f:4b:80:d4:df:9f:5d:56:d4:87:4f:
0c:1f:55:19:7d:cb:ef:2a:8c:96:79:60:fa:99:0d:
aa:5c:d2:d8:92:f3:57:f8:ae:4e:e9:9e:12:29:0b:
9c:0f:94:f2:54:02:b5:20:c9:64:a2:69:90:7b:b4:
d9:a4:44:89:3b:1d:05:20:e8:97:0d:89:4b:be:bf:
e2:3b:41:ec:1c:66:7e:25:65:01:bf:be:c3:59:10:
87:28:a9:a2:91:70:23:72:31:38:42:e9:f7:ac:d2:
a6:3b:00:16:d6:7d:a7:ce:6f:41:f7:c1:9e:9f:48:
96:00:31:2e:a4:81:30:a4:64:73:64:23:b5:59:32:
42:16:be:61:f7:0a:eb:42:dc:a5:da:f0:0d:f6:19:
89:9e:2a:8e:26:e0:64:38:ac:92:a1:0e:00:90:a5:
8a:63:76:ab:db:42:04:d1:a6:dc:17:54:66:1c:2d:
1a:8f:09:88:8b:9a:01:bd:6f:94:18:7b:c4:78:a4:
9c:39:d8:38:00:0f:79:e7:a8:1c:9e:f7:87:cd:95:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B4:72:0E:1B:BE:35:02:50:4D:C4:29:9F:85:41:6E:95:58:67:3A
X509v3 Authority Key Identifier:
keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:87:20:74:fb:54:97:a0:f0:8a:51:c7:af:94:cd:ed:69:37:
cc:55:2d:71:ca:ac:f3:93:98:25:f4:9f:57:40:76:f8:c7:fe:
38:0b:db:0f:a3:bf:12:40:68:75:cb:e5:fd:38:d3:3f:4f:f5:
a4:81:ca:a2:0d:71:05:a2:82:61:b8:3b:7b:f1:aa:da:bf:01:
7c:da:7a:3d:2e:d8:81:8a:cc:a9:28:2c:34:22:d3:f7:1d:e5:
93:08:13:40:7f:1a:a8:8e:bf:3d:5b:52:dc:82:71:ff:32:1a:
30:a6:60:fd:3b:e7:43:1e:fa:fa:e1:d7:91:68:60:b4:d4:49:
92:6b:1e:5a:56:03:1c:1a:0a:f0:ed:ad:a1:3c:4d:e3:0d:d9:
ed:87:98:70:b9:15:4b:11:ab:a4:0b:05:46:21:db:d2:e2:4d:
c1:b1:40:56:d2:fe:60:8d:a0:2b:7d:e6:38:0f:35:bd:30:ba:
8c:8e:c8:05:79:d2:88:34:a3:16:42:57:55:8f:6d:ab:30:bf:
33:f4:d7:43:90:f1:d3:43:5f:b2:89:46:c1:f2:ad:3f:a1:cd:
ee:69:62:aa:2b:af:60:cd:23:52:56:6c:0e:bc:4a:cf:14:f7:
6a:d7:2b:37:72:82:a2:80:db:45:00:59:03:90:1a:04:67:de:
3d:07:35:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:25 2025 by rpki-client