Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
File: mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft (raw, json)
Hash identifier: oZopG78KEz0Bjd4kZxNNi4kYvjobyLZyK8cgECXnJZ4=
Subject key identifier: A5:33:D4:99:7C:43:75:54:81:25:58:D9:D5:E2:63:0C:21:1A:12:BB
Authority key identifier: 99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
Certificate issuer: /CN=9928b812e2e9f472eec7d233f604af263e850f31
Certificate serial: 01974E57F1E782302258BE16F27B0FEF3A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
Manifest number: 0AB7
Signing time: Sun 08 Jun 2025 07:01:15 +0000
Manifest this update: Sun 08 Jun 2025 07:01:15 +0000
Manifest next update: Mon 09 Jun 2025 07:01:15 +0000
Files and hashes: 1: mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl (hash: 6gMNZ8ByceoOW+c2pywqJYi6pZfk7tgszN97jI2uoZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:f1:e7:82:30:22:58:be:16:f2:7b:0f:ef:3a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9928b812e2e9f472eec7d233f604af263e850f31
Validity
Not Before: Jun 8 07:01:15 2025 GMT
Not After : Jun 9 07:01:15 2025 GMT
Subject: CN=a533d4997c437554812558d9d5e2630c211a12bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:b6:03:10:4b:79:a3:4e:1f:d6:e6:07:9c:
b2:0a:ba:1c:97:29:32:af:be:1e:d8:e7:36:71:40:
c7:ee:19:93:ed:29:59:1f:16:8f:9a:96:12:28:71:
3b:62:ed:20:6b:25:97:5f:66:fa:cf:00:56:5d:2c:
e2:61:02:3d:2b:fe:04:41:13:b9:2b:af:4d:22:66:
10:d5:32:b1:a9:e6:da:22:db:79:9e:f5:0b:66:f5:
22:28:4f:a1:7d:1e:74:33:f2:02:60:e3:fc:6e:20:
39:a9:57:28:94:60:6b:7a:25:11:47:b3:2c:0e:e2:
22:22:0b:86:f3:c2:d7:31:cb:03:76:5c:ce:9a:27:
03:e5:29:3a:5d:a2:72:f6:97:21:f7:9c:d8:56:88:
5b:24:23:75:e4:c6:4c:a6:e3:99:53:1a:21:24:0f:
a5:7c:af:e8:c6:ff:55:d4:4a:ed:3b:e4:3c:32:02:
a8:49:b4:d9:3d:61:f7:7c:59:35:30:c0:d9:23:f5:
77:32:1f:a2:fd:65:25:b8:6b:54:e5:d9:f5:3a:3e:
07:48:c3:f0:11:91:79:ad:92:bf:85:47:bc:d3:98:
64:9c:0b:e9:bf:ef:eb:6c:98:f0:60:54:9d:68:1e:
f5:34:5f:2b:2f:73:f0:47:24:34:b6:69:b7:63:99:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:33:D4:99:7C:43:75:54:81:25:58:D9:D5:E2:63:0C:21:1A:12:BB
X509v3 Authority Key Identifier:
keyid:99:28:B8:12:E2:E9:F4:72:EE:C7:D2:33:F6:04:AF:26:3E:85:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSi4EuLp9HLux9Iz9gSvJj6FDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2d9929-4eff-4798-a538-c018bd7ed480/1/mSi4EuLp9HLux9Iz9gSvJj6FDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5f:d0:5b:b1:b2:3e:ec:30:79:f3:a3:d5:a8:23:15:d8:4e:
41:8c:22:89:bc:a7:59:62:ff:9c:54:39:99:87:43:30:43:09:
7b:23:db:f6:a1:b0:dc:98:07:d8:75:6d:96:31:37:4c:fe:aa:
6a:27:90:54:cb:ed:59:c0:b9:35:8f:27:b3:f5:70:02:cf:22:
d0:8d:27:a0:2e:4b:94:88:c8:39:c7:be:a2:fe:9f:fa:42:6f:
25:8d:d0:32:ee:5b:c7:b8:53:63:f6:61:e3:4a:66:c0:bd:01:
c8:d0:06:ee:9d:35:d4:71:1e:54:d6:8b:21:b8:ea:18:13:45:
4f:b3:94:e9:97:eb:c5:c4:27:d4:cf:af:d3:58:05:15:67:b2:
06:8b:f4:f4:e1:e2:d8:ae:29:24:69:a6:5d:2c:bb:5a:27:1a:
cd:26:71:29:09:d9:80:90:a0:ad:0c:8a:1b:61:75:ff:f8:57:
fb:49:3b:22:f2:13:ba:dc:7e:09:5b:75:bf:13:17:1b:ac:bb:
67:f7:e5:3d:c4:a4:7a:96:04:4e:e2:15:a5:5e:80:8f:cd:20:
85:cb:33:11:38:55:38:04:33:75:b3:d6:13:56:40:6d:aa:3c:
6c:4a:91:55:c3:b3:18:c1:bf:d5:5d:a8:bc:56:58:29:0d:62:
ae:ff:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:11:39 2025 by rpki-client