Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File: mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier: eg/PDjjma2iUw2jBtbsYCRu5N7UZWHkYE0ZSexK+Te4=
Subject key identifier: 76:64:8D:7B:D9:F0:F6:28:FF:44:D7:F9:FD:5F:17:C0:CA:41:E4:A4
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer: /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial: 0194BB9712E539B22421F0A2F1B96A85FF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number: 0169
Signing time: Fri 31 Jan 2025 09:00:27 +0000
Manifest this update: Fri 31 Jan 2025 09:00:27 +0000
Manifest next update: Sat 01 Feb 2025 09:00:27 +0000
Files and hashes: 1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: ZOkhc3tRJGH9P0JrwKmJwMJUXBHdObIcJyC4YD/aqas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:12:e5:39:b2:24:21:f0:a2:f1:b9:6a:85:ff:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Validity
Not Before: Jan 31 09:00:27 2025 GMT
Not After : Feb 1 09:00:27 2025 GMT
Subject: CN=76648d7bd9f0f628ff44d7f9fd5f17c0ca41e4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:49:bb:67:f2:d6:da:cb:79:80:9c:5d:65:3c:
57:96:79:fc:17:61:ef:54:61:ed:98:cf:14:47:25:
71:58:86:f0:64:7c:1d:0c:33:56:db:d4:aa:fd:a0:
a6:2f:e2:53:ad:eb:ad:72:8b:c4:9e:d3:75:dd:30:
02:8c:51:16:e9:ab:26:fe:0b:25:42:c1:70:10:63:
67:f3:1a:40:d1:f0:52:b6:03:ca:d1:8a:08:da:37:
2a:92:b4:10:19:e0:71:2f:11:cf:cf:35:d0:71:9a:
38:ea:20:d4:ac:ed:d9:1b:7b:41:de:21:43:98:04:
53:c6:eb:aa:cd:20:a5:d3:23:98:3d:5e:f2:74:af:
59:74:15:0c:58:1d:1e:bb:4f:03:63:cc:59:c5:ca:
09:ce:81:4d:dd:4c:6d:37:b5:52:e9:2e:b9:4c:4e:
0d:70:d6:9c:90:5d:fe:5d:f6:f4:8d:87:e4:f3:6c:
e5:3a:e2:8d:30:e1:ea:6a:b8:2f:98:8b:c8:b5:9a:
b6:01:30:5a:8c:0d:e1:52:22:81:56:6f:2a:f4:e6:
99:a9:58:7c:79:96:ff:02:45:c5:0d:6c:af:a1:39:
4e:c9:6f:92:ab:b1:4f:3f:0b:bc:41:c7:02:78:48:
42:6d:38:cb:a4:c9:01:d4:d7:de:cb:d9:e9:cb:c8:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:64:8D:7B:D9:F0:F6:28:FF:44:D7:F9:FD:5F:17:C0:CA:41:E4:A4
X509v3 Authority Key Identifier:
keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:26:7a:e2:07:90:3e:f9:de:3e:37:98:a6:2c:f3:08:33:51:
04:eb:fb:2c:04:42:d5:1d:4e:a2:ad:98:0f:1a:a9:af:ba:45:
c7:6d:a7:15:c6:1b:31:1c:5b:0a:e0:e5:af:60:f2:e8:27:55:
40:5d:26:ab:66:d5:c9:82:64:06:8e:c2:81:74:5e:fb:2d:bd:
33:8b:71:8b:53:2e:62:54:6b:44:a3:58:16:17:75:ca:e9:43:
8a:b3:d8:4e:75:f9:47:86:d9:1a:60:01:21:a0:7f:82:ab:6a:
f4:b6:82:3c:ba:02:22:8c:ab:26:87:33:d0:5d:92:b0:22:8e:
50:8f:99:7e:12:85:f9:a1:63:06:ec:42:c3:83:0c:d7:86:3e:
ab:41:56:d0:5b:e9:0b:6a:44:b2:cd:d3:07:08:b8:af:e2:db:
51:42:dc:c6:12:bd:35:d0:34:1d:5e:63:2f:a8:46:2d:82:34:
57:8b:47:19:e1:b4:ca:89:e7:1e:6d:a7:24:13:c7:35:32:62:
53:4a:9b:d9:65:f2:6e:60:f4:4d:ce:c3:8f:b2:7c:c7:09:22:
cf:1e:03:81:87:e6:08:3c:7b:30:df:c1:aa:44:0a:17:ca:bd:
7a:65:b9:7f:be:78:30:6b:0d:39:21:de:ec:ed:0d:6d:74:eb:
d9:ee:7f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:05 2025 by rpki-client on console-fra.rpki-client.org