Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: eOKjlZY+ZmyzF9+PCstNvRLjeWdFdme8QZhLWWRPs9I=
Subject key identifier: 98:DB:B7:5C:AF:B1:15:3F:7A:58:17:6F:F0:A2:DA:39:54:BB:94:71
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 0196CEE229CE01E2C7CD0ADEA65F61CF541A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 0619
Signing time: Wed 14 May 2025 13:00:50 +0000
Manifest this update: Wed 14 May 2025 13:00:50 +0000
Manifest next update: Thu 15 May 2025 13:00:50 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: fygbaFgxzZbPb9QDm/9o2jj9pJJc3ZldYxfU4JClkbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e2:29:ce:01:e2:c7:cd:0a:de:a6:5f:61:cf:54:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: May 14 13:00:50 2025 GMT
Not After : May 15 13:00:50 2025 GMT
Subject: CN=98dbb75cafb1153f7a58176ff0a2da3954bb9471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:67:0b:f4:fd:2e:e5:86:8b:72:b9:98:c8:
63:4e:29:40:d2:dd:0a:9d:5e:59:bf:35:c0:d9:48:
ff:19:c8:8d:30:25:07:22:e6:26:29:04:77:d0:0e:
45:e6:82:95:80:6c:f3:3a:77:da:6e:ad:a3:71:ba:
14:93:59:61:ce:50:91:6e:96:9c:36:43:ab:41:33:
71:cb:e4:0a:03:6e:5e:36:1a:e6:51:69:ed:cf:a7:
3b:1a:8f:c3:1e:bb:16:aa:a1:94:65:97:b2:6b:1d:
dd:48:8b:c4:06:61:5e:e3:1c:ec:94:18:02:1e:76:
95:e4:f5:f9:5b:70:fc:e1:1f:ff:76:a1:ce:a1:88:
ad:1a:04:5d:ae:6c:46:bb:6a:c7:cc:ec:9d:ca:47:
66:51:c9:ba:c6:a7:23:f8:d1:d0:32:d8:d3:09:33:
a0:e3:46:22:8a:90:d1:03:81:a6:ef:1f:df:15:4c:
b5:ec:1a:31:f3:64:c9:1e:e3:d6:33:5b:48:9d:02:
30:42:60:e2:08:ca:61:65:59:9c:97:cf:e7:85:db:
82:a8:75:a5:b4:9e:df:35:84:c8:99:92:77:bc:75:
d0:4c:19:72:f4:0c:32:c6:85:6f:43:b3:24:bc:af:
82:e1:de:55:c2:2b:34:0f:4c:c7:6f:98:5b:f9:7e:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DB:B7:5C:AF:B1:15:3F:7A:58:17:6F:F0:A2:DA:39:54:BB:94:71
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4b:24:ef:02:e0:ac:4d:ba:ef:c5:32:76:dd:35:9c:6a:7e:
ae:49:fc:52:6b:7a:12:1b:e5:7e:dd:9a:33:41:92:14:be:f0:
fd:40:71:27:ad:6f:29:17:f8:82:c7:5b:00:bc:65:78:62:9a:
ba:33:0b:81:f1:4f:31:86:fd:2e:96:97:cf:b9:0c:fb:50:f8:
a0:ed:9d:4a:6a:da:56:ae:77:6e:cf:cc:e6:cc:b0:b4:d3:40:
aa:67:86:20:c6:39:67:f3:04:0a:32:64:f4:9a:ae:a6:1e:db:
8f:4d:68:e8:90:96:30:58:3c:59:43:1a:86:1f:0d:33:5c:fb:
e1:2c:be:e6:27:d6:59:c5:fa:45:ce:b3:41:9b:53:02:4f:d4:
cd:2c:11:1c:ac:e2:68:8d:7b:bc:64:da:a4:56:d7:eb:da:e5:
b2:5d:b6:21:c6:f0:3c:a7:ca:97:ae:cb:f2:96:f6:65:90:4a:
12:8c:29:dd:b7:60:23:0d:57:b9:8a:c4:9e:7e:d0:66:a3:c2:
50:ec:66:b0:12:c5:f3:32:6b:29:41:b7:ef:55:2b:01:77:ed:
b7:66:fc:33:43:df:9a:98:e3:91:93:b2:fd:0e:14:de:bb:db:
78:bd:b3:45:7f:b6:66:ff:66:05:23:b6:57:61:37:bb:b5:3c:
9c:23:d3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:21:35 2025 by rpki-client