Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File: 99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier: kH+zF/UHgmjR2mFyPKLpe1fDiu6fkOB/0iR8Afi6ARA=
Subject key identifier: A1:40:C4:2D:1A:B7:57:9E:6D:F9:BE:C1:A8:2F:FE:C0:F1:79:2E:B6
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 019652370A77760E6773E8BF5ECE78C53743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 08:01:00 +0000
Manifest this update: Sun 20 Apr 2025 08:01:00 +0000
Manifest next update: Mon 21 Apr 2025 08:01:00 +0000
Files and hashes: 1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: EhxVk9C6BxBB7asA1LFuACOlB2Yge4h5j8TwuOOuZ8M=)
2: FYg_psCFhdR_n5VNhP25gINYx6M.roa (hash: h+fjKLWgHVAllkPWeuz1NL6KyEoRyUzS/iNO+yf1JFI=)
3: ZhvVa7SGL0ihaaWqEDQl81ffNSw.roa (hash: ytKQDKvlQVK8AL0ByiBKUDRRuwN5/717YGo/cNpO++k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:0a:77:76:0e:67:73:e8:bf:5e:ce:78:c5:37:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Apr 20 08:01:00 2025 GMT
Not After : Apr 21 08:01:00 2025 GMT
Subject: CN=a140c42d1ab7579e6df9bec1a82ffec0f1792eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:d0:79:b0:a0:0a:a8:11:32:b2:39:2e:03:
99:ec:6a:4e:b9:d6:43:d8:5b:01:b3:4f:88:1d:e1:
95:7e:f6:54:a6:70:3b:3f:e0:de:98:45:aa:3d:68:
91:e4:88:13:60:37:ee:4d:7d:3f:e8:33:16:59:c9:
74:46:64:c8:3a:c4:4d:14:8f:83:a2:c3:d7:18:b2:
f1:e5:89:9a:70:1b:1a:76:e6:8f:b9:22:be:74:8c:
da:4c:bd:2b:9a:2b:e6:8d:09:39:bd:fe:92:98:f1:
c3:83:03:47:8b:4c:28:5f:bb:ad:2f:c6:b1:ab:01:
85:ad:05:55:10:af:8b:32:2c:7c:ed:c9:c4:48:e6:
b0:d0:5c:d4:cd:ff:19:bd:ba:59:2e:00:19:cd:e7:
5c:8b:f0:41:33:48:15:72:47:1a:d3:f0:08:a9:34:
4b:07:2c:a0:47:08:bb:bf:c7:3c:8a:31:6e:de:33:
93:27:35:bc:ff:b9:82:4a:64:a3:d0:26:ac:72:ee:
27:d6:71:67:ae:47:72:e8:cc:34:90:72:64:bc:d5:
ff:ef:81:7b:f0:d0:b9:9e:97:3f:9d:60:69:d6:48:
14:4f:af:cb:a0:39:e0:ae:45:0d:bb:c3:ea:72:2c:
e8:31:7d:3b:de:43:dc:2d:53:30:8d:dd:fa:7c:e4:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:40:C4:2D:1A:B7:57:9E:6D:F9:BE:C1:A8:2F:FE:C0:F1:79:2E:B6
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:62:3e:54:20:ca:f7:a1:fd:1a:7a:33:76:79:a1:ef:b3:76:
19:8f:ff:9b:51:2c:04:ae:ce:28:5f:7f:41:20:42:74:4c:18:
1f:ee:99:c9:3f:47:0c:14:0a:73:53:cc:4d:cf:a2:3a:18:ef:
32:8e:13:f3:f7:20:95:ae:01:37:9f:3d:b6:64:f7:86:7e:c1:
91:fd:0a:41:ed:63:3d:f4:84:b6:4a:cd:fc:76:36:6d:9b:6e:
63:b7:26:14:8b:55:b4:72:43:19:e5:ba:c7:70:3c:22:85:c0:
48:ed:8c:af:7c:0d:cf:81:0a:e0:76:54:2f:fe:cb:1f:0e:c3:
67:5a:84:e2:74:44:01:12:19:81:1d:ef:89:8a:e5:9c:31:e2:
c3:dc:93:e2:92:35:92:76:81:df:54:43:e0:db:d2:92:df:9a:
16:68:30:55:c1:b6:7d:8a:e4:72:e8:0d:a5:0f:7f:b3:5c:7c:
5c:b0:4b:dd:d4:13:f8:ce:4e:54:1d:f9:55:98:6f:53:14:53:
7d:c8:26:28:46:c0:7d:08:bd:5c:ee:60:83:be:b4:8d:a1:e2:
68:63:02:ee:89:60:61:44:8a:df:1f:c6:da:c7:07:03:71:42:
49:37:6d:84:a6:d8:15:e5:91:a5:57:f0:d7:02:3e:27:1c:d2:
80:bb:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:40 2025 by rpki-client