Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File: M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier: vuYKyJlaHOF+nk3axP7Vlswkc7+Y66WF9abL6xzVPTo=
Subject key identifier: DB:21:AA:D5:A9:FD:EB:69:D2:92:58:06:3E:65:A9:DF:3B:EC:D4:10
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer: /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial: 019650113C501D59073DD36C9673453AA652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number: 1240
Signing time: Sat 19 Apr 2025 22:00:28 +0000
Manifest this update: Sat 19 Apr 2025 22:00:28 +0000
Manifest next update: Sun 20 Apr 2025 22:00:28 +0000
Files and hashes: 1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: tX5rLwrHYVVzsxNHK18alF+aIhxym1U9PLipxrcEaA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:3c:50:1d:59:07:3d:d3:6c:96:73:45:3a:a6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Validity
Not Before: Apr 19 22:00:28 2025 GMT
Not After : Apr 20 22:00:28 2025 GMT
Subject: CN=db21aad5a9fdeb69d29258063e65a9df3becd410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:75:2b:b2:d4:62:de:04:09:67:3b:ea:bd:
1b:17:bf:1a:c9:b6:8e:5d:88:6c:66:1b:99:47:93:
be:e4:d6:5e:1a:08:5b:a5:47:7d:0d:cd:84:a0:6c:
fa:03:ab:c9:01:a0:ec:e4:cd:a2:a0:97:bd:56:22:
fa:91:36:56:28:6e:a0:9a:6c:3b:ba:54:74:58:11:
6e:ea:1b:ce:04:6f:3b:5b:11:76:e4:bb:14:d8:f5:
41:4e:85:ff:7b:4b:83:00:07:76:68:38:f9:95:10:
7b:61:06:fe:6d:cb:fc:b2:32:3e:69:10:1e:46:07:
90:08:9d:4f:b1:7d:cb:31:24:0c:b1:6c:a2:44:68:
8d:d6:f0:71:97:e8:38:75:8f:93:19:98:23:e6:e7:
bb:0a:c9:6c:ce:e0:ed:0a:ab:8e:15:6a:7c:d7:8b:
d0:29:75:23:26:6d:1e:d9:3f:61:f9:e3:9c:2b:fc:
3c:4d:c4:4f:9b:ca:4e:82:30:e4:78:71:a4:ec:98:
2e:4d:90:c0:62:36:40:55:ca:1c:89:68:48:16:48:
9a:9d:0a:a4:6c:26:72:12:b2:92:9f:ff:4f:32:a1:
6c:7b:47:d1:33:7c:3e:1e:c5:a8:62:93:03:34:98:
83:5b:6b:2c:17:2b:ec:b1:9d:d3:0e:da:95:ed:37:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:21:AA:D5:A9:FD:EB:69:D2:92:58:06:3E:65:A9:DF:3B:EC:D4:10
X509v3 Authority Key Identifier:
keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:46:82:b0:51:30:c5:d8:63:07:d0:49:b7:6b:ad:24:fe:bf:
06:6d:54:d3:58:5e:86:2a:2b:0b:aa:67:30:c8:38:09:2d:c8:
2c:8c:fc:30:e7:28:ee:4d:fe:05:72:67:6f:4c:64:a2:22:9a:
e1:6d:de:c6:4e:96:69:f9:ed:fa:c4:82:b5:27:10:1f:04:fd:
a0:37:f1:8f:d8:26:36:b2:a9:37:96:de:32:6a:b7:56:e3:a9:
20:d6:5a:9c:b0:59:f8:34:1d:98:35:d4:e7:81:3f:b2:3f:f6:
8d:d8:8d:10:0b:4c:6e:4b:6f:41:1f:46:a0:b8:e3:a1:52:65:
56:c9:a8:e1:81:e6:6c:25:4c:4a:55:22:24:bb:f7:2c:61:cc:
8e:96:ca:db:33:eb:fd:86:96:ca:6b:4a:07:d9:c3:a0:50:fd:
bc:fa:91:36:05:9b:a4:d1:25:35:2e:14:e6:80:44:6f:b4:1e:
75:0e:33:f8:2d:fc:2f:2d:62:12:a2:1a:9e:e8:ed:4a:4f:d7:
76:c8:6f:f2:66:b2:67:d3:6e:ca:4e:cf:ee:cd:cc:bb:70:3f:
a1:4e:f3:18:77:fe:69:fb:81:d0:c6:aa:23:51:2a:53:d4:2f:
c4:37:c6:db:6d:98:a5:0b:7f:7a:39:8e:17:0d:95:ed:04:55:
07:1a:9d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:26 2025 by rpki-client