Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
File: mXZKyKibCft4hQ10xo4dqo8-KvE.mft (raw, json)
Hash identifier: 9faXV90LolwqTfl9jwfWJO65UsT7pCqW9pMbtMLwpHU=
Subject key identifier: 84:02:1B:F9:83:81:AF:6C:2F:33:2C:84:1E:7D:C6:35:B2:BA:77:15
Authority key identifier: 99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
Certificate issuer: /CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Certificate serial: 019655A5E08148941C3A3B36001BAC2AB53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
Manifest number: 0711
Signing time: Mon 21 Apr 2025 00:00:56 +0000
Manifest this update: Mon 21 Apr 2025 00:00:56 +0000
Manifest next update: Tue 22 Apr 2025 00:00:56 +0000
Files and hashes: 1: mXZKyKibCft4hQ10xo4dqo8-KvE.crl (hash: 8JkiUlawb5y936KhALpoYbaqP4dgu3nH/eK5q7jUv0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:e0:81:48:94:1c:3a:3b:36:00:1b:ac:2a:b5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Validity
Not Before: Apr 21 00:00:56 2025 GMT
Not After : Apr 22 00:00:56 2025 GMT
Subject: CN=84021bf98381af6c2f332c841e7dc635b2ba7715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:23:0d:d4:4d:24:6f:5c:4f:01:aa:51:4f:
97:3b:32:d9:f3:a4:84:48:24:82:fa:d9:dd:2c:c5:
86:1f:2e:5e:a2:a8:23:7c:e6:b7:3b:14:fa:08:ce:
db:81:82:f0:87:b3:96:93:2d:31:10:87:7b:a5:6b:
88:f3:c5:32:16:03:17:d9:10:14:56:b2:07:d4:a4:
95:c2:16:f6:d6:fe:05:fa:0b:e6:33:09:0f:f2:8b:
c6:34:48:65:e3:52:38:67:ba:51:0a:ef:1a:af:2a:
93:81:2c:33:87:10:d0:57:f3:b7:b5:c6:5c:e2:1b:
50:4c:5f:95:ad:bb:1b:88:b9:76:62:55:5c:a8:45:
6a:99:bc:86:36:fd:99:9b:09:6d:e1:29:5b:40:fa:
1c:29:01:ea:ba:1a:47:76:67:a3:fa:d6:d3:48:84:
f8:22:3a:a3:02:7f:f9:fe:57:90:4f:13:18:45:07:
37:02:c1:4f:6f:23:78:f7:e1:d4:77:61:e8:13:92:
fc:84:99:75:b0:e3:89:a1:ec:52:0d:b2:c4:96:4b:
55:e2:38:01:fb:95:c0:28:ef:5a:13:7c:db:55:8a:
da:c9:81:98:22:dc:af:79:9a:33:64:bc:2e:8e:60:
5a:89:c5:35:f0:eb:a7:2a:13:64:08:8d:89:a6:68:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:02:1B:F9:83:81:AF:6C:2F:33:2C:84:1E:7D:C6:35:B2:BA:77:15
X509v3 Authority Key Identifier:
keyid:99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e2:87:06:32:52:82:af:9d:cf:84:81:b1:4a:36:46:17:6a:
96:e2:b4:fe:8d:4f:d7:8b:5c:60:88:8e:aa:78:b6:cd:95:9c:
fd:e4:c5:75:80:4c:a8:3c:bf:39:af:18:77:77:3a:31:e8:bd:
a8:ff:62:39:55:35:06:c7:52:fa:36:86:88:74:13:0b:5d:d3:
83:3f:06:75:b1:a0:8a:64:86:9b:d2:32:cd:04:cd:84:ed:db:
13:65:98:49:de:6f:61:9d:86:58:14:32:83:19:27:2f:23:46:
06:63:f2:8c:03:42:92:2d:73:92:2a:32:ba:90:cc:2b:53:a9:
fd:1f:b6:bf:46:88:41:ca:19:29:66:95:d8:00:cf:65:28:aa:
2d:1a:c5:e9:fa:78:57:88:8a:f6:06:ac:c7:c1:25:13:a3:63:
7c:27:52:e0:20:51:22:29:da:9d:94:6e:23:9d:3d:35:63:94:
2f:a5:05:6d:73:35:b5:8d:93:e1:b9:b4:f3:2f:97:a6:6f:58:
0f:f6:45:78:a1:21:07:3d:9a:89:16:29:01:02:86:3d:6a:c4:
f0:9f:e6:10:d7:a8:47:ba:c3:71:51:be:1d:90:d4:cc:bd:f6:
58:3f:4d:94:93:79:6b:17:11:7c:e0:59:fc:0e:29:18:d8:9c:
b6:78:e9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:09:34 2025 by rpki-client