
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File: mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier: tlif6XVD5JzxFESOma+UvLQ7nXIlkbBw/E4vLVkbRN4=
Subject key identifier: 8D:55:9F:56:FE:2C:F2:62:46:32:76:9F:11:DA:4C:A5:01:45:B0:F4
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer: /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial: 0196AA9E5EB2F59A110EE01A33E35FF6B98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number: 0807
Signing time: Wed 07 May 2025 12:00:27 +0000
Manifest this update: Wed 07 May 2025 12:00:27 +0000
Manifest next update: Thu 08 May 2025 12:00:27 +0000
Files and hashes: 1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: czqBPt5w+Q0PT42eXrlgOk/nzsgwKr2EaeDTHt8ntq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:5e:b2:f5:9a:11:0e:e0:1a:33:e3:5f:f6:b9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Validity
Not Before: May 7 12:00:27 2025 GMT
Not After : May 8 12:00:27 2025 GMT
Subject: CN=8d559f56fe2cf2624632769f11da4ca50145b0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:40:70:31:10:a8:4f:63:bf:f7:2b:7f:44:03:
2f:9b:54:09:64:57:63:ee:0c:cd:b8:2a:bf:df:8b:
10:cd:25:c8:89:3a:47:c2:e3:1f:b9:92:f7:3c:f2:
50:51:3e:7b:a1:76:d1:32:06:53:5f:4b:1b:f3:8e:
1b:82:a0:9e:7e:f3:2a:fb:d2:14:9c:c8:bc:f6:07:
94:db:29:62:d4:17:7b:6b:e3:eb:2a:53:76:ba:6e:
5b:7c:7d:78:12:59:fc:8b:71:ea:77:b4:a4:79:85:
37:b2:3f:91:99:0c:dd:61:52:9a:3b:29:75:4e:d8:
d8:b8:1c:0e:ce:f2:d4:4b:a2:2d:cb:fa:83:51:7c:
bd:6c:f9:8a:16:3d:5b:36:18:3c:7f:2b:f3:a6:cf:
a3:c5:ba:3a:88:36:64:61:c7:77:2e:47:eb:4a:c9:
6c:7c:dc:f4:f5:c1:81:fb:fa:09:46:7f:33:69:51:
04:cf:d1:1f:a3:89:08:35:67:b4:23:ce:18:4e:51:
3e:c6:79:c7:31:fc:82:f8:26:9d:30:53:02:4b:ae:
d0:b0:26:79:98:86:86:35:c2:6f:7c:ba:89:4a:d1:
c0:59:9a:71:c6:a8:2e:62:43:d0:92:47:c6:5b:e8:
14:b4:63:57:bf:4c:c6:58:be:8d:3d:30:91:cc:41:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:55:9F:56:FE:2C:F2:62:46:32:76:9F:11:DA:4C:A5:01:45:B0:F4
X509v3 Authority Key Identifier:
keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:48:6e:63:73:15:89:f3:b9:20:99:9d:4f:45:25:42:51:97:
78:95:e9:21:07:d7:88:22:3e:87:52:e9:d8:24:e3:a6:d3:1b:
1c:d7:8a:9d:6c:8f:8e:d4:03:4e:2d:c4:a1:b6:fb:ad:48:14:
2a:de:c9:80:8c:c2:49:8f:44:ad:c8:6f:77:00:f7:e0:12:7c:
46:a9:92:9e:05:1b:05:5c:97:17:d4:89:d9:75:c3:2e:43:67:
9c:f8:cf:ee:45:b1:c3:b5:20:6a:c6:bc:99:c6:f7:d9:de:28:
4e:ea:40:39:fe:67:f3:f2:8f:5e:6c:3c:ce:08:ee:da:1a:24:
07:b3:65:81:db:74:a9:76:b0:bb:7a:7c:b5:d4:a3:49:94:5e:
80:9b:67:87:f3:9a:32:e9:fb:17:8a:b6:90:ec:cd:db:fe:17:
f1:99:1e:70:32:c2:bc:2f:4f:ab:5a:0d:bf:83:56:e7:73:4f:
71:59:81:d5:b1:98:26:0d:d0:57:f3:da:30:38:7f:89:10:e2:
e9:46:ba:2b:79:d2:46:f4:40:88:78:b5:d4:9a:0c:76:99:ba:
63:34:46:1d:8a:cb:28:38:aa:43:db:77:c6:4f:97:74:ab:59:
25:85:05:70:8a:fe:b6:b0:14:4d:e9:56:ad:6f:0a:bf:03:87:
d0:ab:b0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:03:45 2025 by rpki-client