
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File: mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier: zTpjyAOPlwVe6tkeRdzPigUBwzlANHDoxEVsK82QoEo=
Subject key identifier: 4A:40:54:ED:B4:92:92:BC:B1:2D:BA:2A:DB:71:63:3F:83:DC:B9:49
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer: /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial: 01974C3250B75D450EF359A3454017037D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number: 02BD
Signing time: Sat 07 Jun 2025 21:00:55 +0000
Manifest this update: Sat 07 Jun 2025 21:00:55 +0000
Manifest next update: Sun 08 Jun 2025 21:00:55 +0000
Files and hashes: 1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: /fFDV3XhglNi72K1Wkp78TQKftltcuzGKMAbo4Dcu8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:50:b7:5d:45:0e:f3:59:a3:45:40:17:03:7d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Validity
Not Before: Jun 7 21:00:55 2025 GMT
Not After : Jun 8 21:00:55 2025 GMT
Subject: CN=4a4054edb49292bcb12dba2adb71633f83dcb949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:9d:ae:27:eb:fc:14:f6:a7:44:67:33:15:
5f:cd:3d:19:9b:c2:b3:6c:48:c7:e9:27:73:a3:13:
5f:3c:fa:ef:af:93:c7:82:07:5b:c6:07:c1:46:94:
9b:5d:1a:32:79:bf:75:26:95:25:a5:e6:40:ed:83:
08:46:40:38:c4:60:b0:36:6a:a4:48:f2:41:e0:2c:
d5:0e:14:45:6c:86:93:12:76:bb:df:f3:71:c5:29:
6d:62:5e:bf:e6:dd:4f:da:cb:a3:76:c2:be:cd:e9:
5b:09:a9:55:0f:4e:f4:3e:98:81:79:55:30:b5:c4:
c0:8a:fc:82:1c:1c:85:0f:ab:b7:d1:3e:df:c1:0b:
1c:14:d2:95:41:dd:c2:58:f8:83:bd:06:48:69:30:
bc:44:1d:77:19:7b:4d:16:75:c2:88:9f:0b:87:d8:
95:91:22:94:72:22:ef:29:41:f1:66:b5:35:89:c9:
88:3a:73:63:7b:a6:3a:27:c6:6e:62:e0:c2:c0:6b:
65:bd:52:80:88:6a:21:83:d5:9e:72:b5:ce:c4:3c:
17:d0:5e:f0:2f:c6:c7:a7:79:3c:a3:b9:1c:54:b2:
5b:8a:c1:e7:e3:3a:82:f0:fb:ec:26:c3:f6:68:1d:
de:f0:26:ae:4a:78:e4:6d:8e:9b:3b:a1:83:45:d9:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:40:54:ED:B4:92:92:BC:B1:2D:BA:2A:DB:71:63:3F:83:DC:B9:49
X509v3 Authority Key Identifier:
keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:61:6c:a0:d7:63:32:46:f2:82:c8:9e:ec:82:9b:b7:fe:78:
5e:59:e2:72:24:d7:ae:1b:2c:64:16:b6:c9:39:15:0d:fe:c6:
cf:6c:98:ef:87:d9:94:5c:e1:39:26:43:09:05:2e:f2:fc:e1:
88:86:5a:74:37:39:6f:5c:d0:cf:0b:eb:04:6b:e6:b2:8c:9f:
95:70:01:ea:56:b9:a4:46:c0:3b:3b:79:af:0b:20:52:00:c5:
5b:2d:8c:70:75:58:4f:74:d6:d9:a2:9d:da:00:6e:df:e4:d0:
41:e8:51:43:ce:56:73:91:3c:d7:50:ab:92:6d:35:9e:cc:95:
02:ab:eb:88:9b:99:20:17:ae:f5:aa:48:81:f0:f6:e0:26:aa:
30:aa:f8:42:30:a0:f1:19:5d:e3:f8:66:1d:30:7f:b0:d5:d3:
5e:49:63:9d:d0:19:66:73:90:b5:1e:d7:51:94:1d:72:5f:0f:
a9:ee:34:33:5e:1d:e9:c5:93:56:58:55:cd:28:72:b2:48:59:
45:3d:65:69:1c:b3:fc:db:56:6e:10:64:f8:6a:9f:68:72:eb:
85:38:91:38:2c:7b:3d:89:0a:88:67:a9:89:51:7b:5c:6f:a7:
16:14:7f:69:81:0b:5e:6d:ca:83:29:20:c9:4e:4c:03:fd:40:
98:b6:5d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:39:11 2025 by rpki-client