
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File: nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier: G+Z3k0plkuq7S013TLSpAaxZhldmLilCG3aWgejjIFo=
Subject key identifier: AE:6B:AF:2B:60:82:6D:7E:07:D0:5A:60:FE:04:3B:73:E8:76:12:CB
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer: /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial: 0196A2776D309684EEF06AA72606C4AAFF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number: 0B4F
Signing time: Mon 05 May 2025 22:00:57 +0000
Manifest this update: Mon 05 May 2025 22:00:57 +0000
Manifest next update: Tue 06 May 2025 22:00:57 +0000
Files and hashes: 1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: +fEqDHxAUNtPZYOjshFVf+dgxRW9mD9Oq1whYECWx48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:6d:30:96:84:ee:f0:6a:a7:26:06:c4:aa:ff:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Validity
Not Before: May 5 22:00:57 2025 GMT
Not After : May 6 22:00:57 2025 GMT
Subject: CN=ae6baf2b60826d7e07d05a60fe043b73e87612cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:66:65:4b:51:5a:28:40:c5:c3:29:de:e9:
87:cc:b6:5e:63:1d:cd:ba:35:01:47:c1:80:6b:41:
e2:60:37:5d:60:f0:1a:9f:bd:4e:c2:f8:27:65:c6:
19:e8:6f:74:70:1d:1e:f2:c3:02:9d:66:23:d2:b3:
a6:90:5f:a8:8d:d3:20:fe:e9:88:53:fc:39:e3:c8:
c9:05:bc:2d:2a:65:ae:c1:9f:2a:c1:8e:2b:7f:c0:
48:72:ea:0a:46:9b:a5:bc:0c:2d:8e:bf:39:42:a5:
ca:7d:f7:42:0d:37:62:16:45:2a:88:0a:16:b1:1d:
4b:ee:71:49:9f:4b:1c:98:43:fe:3b:35:07:3c:2f:
cb:98:de:ff:87:c7:6e:6a:43:08:7f:e8:53:bb:a7:
55:50:42:bc:b7:f3:94:d3:13:06:6f:d1:30:08:82:
6d:44:1f:d3:06:82:42:56:da:d7:87:1a:ef:55:ea:
98:f0:b6:34:97:a3:a6:19:1f:27:f1:34:65:b0:40:
0d:76:70:90:f9:ef:59:2b:ab:6c:cb:35:4d:20:ef:
34:9b:20:75:ce:75:1f:fc:6e:cb:dd:69:70:03:76:
00:1f:49:62:c1:e3:3c:4f:3c:76:a6:1a:f2:62:cd:
91:2f:98:33:dc:ff:35:35:f5:5a:3f:61:d5:b6:7c:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6B:AF:2B:60:82:6D:7E:07:D0:5A:60:FE:04:3B:73:E8:76:12:CB
X509v3 Authority Key Identifier:
keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:71:48:3c:47:90:9e:23:ee:8d:3b:00:bb:22:7f:39:51:4b:
ec:be:fe:4e:af:c1:bd:aa:31:ad:74:02:dd:6b:01:48:ea:4f:
13:10:f2:7a:2b:2c:f6:3b:05:8f:00:23:d4:99:9b:73:61:eb:
fe:88:0b:6f:f0:56:1a:65:c1:4a:67:32:34:74:c0:48:39:25:
e3:d6:28:52:f0:90:48:bd:87:e0:4c:95:d5:af:86:dc:16:a4:
af:8f:90:ab:64:d0:a7:77:da:f8:c8:58:7f:db:c4:0a:52:3b:
b6:08:87:40:77:02:ca:86:2c:72:5c:db:ef:4d:1f:46:7b:45:
a7:60:fb:5c:02:af:6c:f9:bb:34:50:25:26:39:00:4a:c6:5c:
46:2c:a8:f7:89:1a:bc:46:73:93:c7:82:92:02:5a:75:02:4a:
b2:51:50:cc:cb:0b:53:66:ef:41:93:35:86:a4:4d:72:b2:64:
ae:63:18:0e:42:e7:13:05:1e:90:cc:ac:4e:da:de:f8:78:8e:
fd:6c:58:30:ec:5c:72:84:eb:1f:d9:1f:90:0d:4b:b2:a8:8d:
18:a2:36:5e:63:fa:16:f3:03:84:df:f6:10:97:49:47:83:a3:
5c:32:ef:08:58:f8:33:01:4d:50:0f:03:10:fd:e1:22:08:4f:
64:ed:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:27:00 2025 by rpki-client