Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
File: cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft (raw, json)
Hash identifier: TuTOhe7FIbDpHiq4m2QwMjslmxfu6ewUmbn1YJWgLFI=
Subject key identifier: 6F:2C:3D:71:64:81:FD:33:CE:E5:F4:5A:84:69:B1:D8:7D:78:5D:83
Authority key identifier: 72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
Certificate issuer: /CN=726f9448a910d2574157a30403f46c1172aeedb6
Certificate serial: 0196B8FF139EAD04796251AE3E5973FCE673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 07:00:46 +0000
Manifest this update: Sat 10 May 2025 07:00:46 +0000
Manifest next update: Sun 11 May 2025 07:00:46 +0000
Files and hashes: 1: cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl (hash: 2jYXaCav5KnmCwYIRGkqQSD7P38C0OCzsN0txYdiibI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:ff:13:9e:ad:04:79:62:51:ae:3e:59:73:fc:e6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726f9448a910d2574157a30403f46c1172aeedb6
Validity
Not Before: May 10 07:00:46 2025 GMT
Not After : May 11 07:00:46 2025 GMT
Subject: CN=6f2c3d716481fd33cee5f45a8469b1d87d785d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:98:73:f4:41:44:76:0a:56:7d:18:76:fc:
59:58:a2:43:50:da:5a:d6:81:bc:b7:fe:d8:8d:48:
a3:5e:1b:d0:20:c5:50:27:72:4c:8d:91:5e:0b:37:
ba:64:09:20:21:7d:e5:52:0f:d1:49:1b:fb:d4:73:
f3:5a:3b:dc:38:83:a5:82:00:b0:3e:30:4b:24:77:
17:86:30:f2:90:65:55:72:1c:6b:17:1e:b0:85:b5:
72:81:48:db:0d:4f:97:3f:3e:8e:58:6e:ca:1e:fc:
c8:35:dc:49:16:86:e1:71:b3:ec:10:4d:eb:97:95:
f3:a5:e5:26:92:7f:c4:77:02:d6:4d:ff:75:f9:c7:
42:fb:78:d5:f3:f9:36:d7:88:a7:ed:57:6c:69:96:
4b:8c:5c:aa:ce:7f:26:6c:7e:50:38:ec:20:f8:b1:
12:0c:de:3d:0a:fe:aa:7c:1b:1e:f0:fe:8c:76:05:
40:bd:d0:3e:6e:d6:ac:e5:7c:4d:25:5a:8c:98:ad:
93:e5:20:96:b6:56:d2:62:05:3a:cb:06:ea:12:eb:
82:3d:e8:47:72:74:02:81:05:b4:e9:c8:6b:1d:4c:
b0:a6:0e:61:17:50:af:eb:fe:1d:3f:86:23:b2:6d:
05:5d:89:e0:70:46:b5:32:6e:e0:ad:a9:8b:1c:cb:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:3D:71:64:81:FD:33:CE:E5:F4:5A:84:69:B1:D8:7D:78:5D:83
X509v3 Authority Key Identifier:
keyid:72:6F:94:48:A9:10:D2:57:41:57:A3:04:03:F4:6C:11:72:AE:ED:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cm-USKkQ0ldBV6MEA_RsEXKu7bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7e36e-a323-4f47-a776-66b141194fd2/1/cm-USKkQ0ldBV6MEA_RsEXKu7bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ce:e6:3c:f9:f1:eb:5c:89:5c:0b:63:c2:a7:46:0d:5e:39:
bc:ba:32:d2:6a:ae:6f:33:83:cb:8e:66:c5:fb:ea:d2:c8:52:
a6:32:b5:ff:66:04:8b:60:10:b3:f1:48:bf:8c:f8:47:d0:97:
3c:2a:54:44:52:d0:79:a1:bf:dc:13:62:22:d5:63:77:65:ba:
8b:89:85:f2:48:54:64:c9:86:41:38:01:85:63:a3:87:f2:de:
cd:88:af:2a:95:c2:b9:c3:a3:f9:22:26:33:1f:2e:65:64:20:
6d:ee:f9:7d:23:38:06:40:90:43:70:06:eb:da:16:e2:78:25:
21:de:bb:b1:ed:70:dc:c5:de:71:cd:a8:1c:a1:30:db:ce:c4:
82:bc:2a:60:56:c2:09:78:05:2d:11:5a:09:1e:8d:55:45:e3:
2f:26:e6:4b:a4:73:41:f5:5b:0d:3e:23:a1:71:12:9a:12:0c:
a3:06:0f:5a:b8:d8:31:f9:da:ad:ce:c8:73:f9:2a:14:0a:ed:
c5:54:0f:fb:fa:0a:62:23:bc:e5:82:71:b4:0d:d6:74:ce:05:
4d:22:57:b6:98:d4:88:94:a9:1c:0d:b8:29:2b:7c:d9:39:69:
cc:6b:7d:9b:89:4c:1c:1e:1c:8e:d1:31:36:79:9e:f7:28:56:
c3:71:c6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:58:20 2025 by rpki-client