Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
File: RMmsJXmD7SmqZgqd1TEiTwmsS10.mft (raw, json)
Hash identifier: fmoNXrcA7ncRp9/gNDoNA/QhJyJtU/NH+bKHq2giY+w=
Subject key identifier: 0F:A7:71:6B:D8:D4:F7:AE:92:8D:20:F2:91:11:55:9C:0A:B0:F6:6C
Authority key identifier: 44:C9:AC:25:79:83:ED:29:AA:66:0A:9D:D5:31:22:4F:09:AC:4B:5D
Certificate issuer: /CN=44c9ac257983ed29aa660a9dd531224f09ac4b5d
Certificate serial: 0196507EE587258E2E4CB3E8B5661D5FDF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
Manifest number: 02D5
Signing time: Sun 20 Apr 2025 00:00:15 +0000
Manifest this update: Sun 20 Apr 2025 00:00:15 +0000
Manifest next update: Mon 21 Apr 2025 00:00:15 +0000
Files and hashes: 1: RMmsJXmD7SmqZgqd1TEiTwmsS10.crl (hash: nrkKFPenL1/0iD8f7oIbq6H2lFe9kCZkjzi1J64fjCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:e5:87:25:8e:2e:4c:b3:e8:b5:66:1d:5f:df:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c9ac257983ed29aa660a9dd531224f09ac4b5d
Validity
Not Before: Apr 20 00:00:15 2025 GMT
Not After : Apr 21 00:00:15 2025 GMT
Subject: CN=0fa7716bd8d4f7ae928d20f29111559c0ab0f66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:4c:f1:08:da:b3:6a:98:9e:d8:d2:4a:eb:
35:65:95:20:fc:66:6a:2f:09:14:de:81:81:b2:3e:
5e:7f:24:6e:7a:7f:59:28:22:7e:fd:cc:be:37:cd:
9e:55:d7:d9:ab:38:2e:e0:79:70:87:ff:af:ba:77:
08:df:81:c6:96:54:7e:98:56:35:fa:40:8f:f6:bd:
c1:9b:8a:b2:61:f8:2f:0c:cc:3a:13:20:8a:ef:50:
ef:62:23:4d:29:10:34:92:99:cd:da:c7:7c:ec:ef:
37:99:f3:3c:62:d0:1d:5c:72:d6:e8:9d:dd:04:d2:
bd:0f:c0:f1:da:65:8c:30:9f:cb:a5:32:94:a8:8b:
4e:01:5d:a5:56:32:12:75:f0:97:ab:e8:0b:18:18:
a4:a2:75:ef:6b:f2:45:66:1d:a8:80:7d:13:6d:5d:
6e:40:b0:3c:a6:40:1d:c8:80:8a:4f:bc:e0:4c:72:
ab:d1:d4:d1:f3:15:9b:74:f0:ed:30:7f:ae:f5:de:
a8:b2:72:61:89:72:e2:4a:e6:90:41:7e:27:ec:f7:
32:19:47:e8:a5:56:91:61:c6:2f:52:c7:e4:ce:47:
ba:1c:26:bc:08:df:92:cb:75:76:b7:a6:90:96:8b:
18:36:fd:dd:54:aa:12:6e:dd:69:64:6c:d5:fa:fc:
8b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A7:71:6B:D8:D4:F7:AE:92:8D:20:F2:91:11:55:9C:0A:B0:F6:6C
X509v3 Authority Key Identifier:
keyid:44:C9:AC:25:79:83:ED:29:AA:66:0A:9D:D5:31:22:4F:09:AC:4B:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c3:90:ca:b3:76:3b:f3:f9:7d:c6:ab:5d:f6:46:fc:30:a9:
0d:11:6b:b0:12:cf:79:72:89:f3:30:2d:c5:5a:72:60:14:41:
e1:c2:2c:36:fa:d3:e8:0c:5e:9d:25:db:0b:25:f8:ad:cf:33:
ac:e6:4b:0b:ea:d0:95:48:de:87:76:6c:e2:8a:5d:e3:74:d7:
cb:95:83:fd:2d:fd:39:d4:17:92:58:92:b8:05:1e:33:2c:90:
9b:3e:67:4e:37:66:cd:d2:40:70:bd:21:0e:74:f3:56:dc:f3:
63:16:96:6a:03:91:27:ea:98:cb:9d:bd:8d:5e:2e:0d:7b:dd:
1d:c0:9d:9f:33:a6:ac:09:2f:1b:34:5e:61:c4:b0:3f:db:19:
75:11:eb:95:06:5d:19:28:2d:14:61:47:fc:9c:22:46:03:38:
89:41:6c:a6:ea:3a:90:47:43:5d:36:67:0a:53:11:cc:fb:8d:
4d:c7:22:e0:ef:66:b3:0a:ca:77:e2:c7:08:ed:f9:89:24:6b:
d2:98:c6:40:08:dc:37:38:c2:d2:ac:c9:cd:9c:d7:d3:26:91:
79:13:a8:3f:8c:0c:32:5d:d0:11:fa:e5:1f:91:3a:ee:d8:2c:
91:ee:89:0c:17:23:07:32:49:dc:37:9c:cd:2e:4b:61:e6:3c:
14:a1:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:34:25 2025 by rpki-client