Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File: mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier: F8hjMZJNEJNdlCwT2H/krXaWUkIlZ8L2eFuzwaBSKGs=
Subject key identifier: 90:CF:CB:1E:B2:B5:D6:11:76:51:9B:11:5F:06:B3:1A:EE:D0:31:9B
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer: /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial: 0198D4729E4F300AECE4E2FD69A73E54A1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number: 0388
Signing time: Sat 23 Aug 2025 01:02:17 +0000
Manifest this update: Sat 23 Aug 2025 01:02:17 +0000
Manifest next update: Sun 24 Aug 2025 01:02:17 +0000
Files and hashes: 1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: fv5M3+GW+r3u8zppOaZaBAepi2w2n+SeO0jKEigZDFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:9e:4f:30:0a:ec:e4:e2:fd:69:a7:3e:54:a1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Validity
Not Before: Aug 23 01:02:17 2025 GMT
Not After : Aug 24 01:02:17 2025 GMT
Subject: CN=90cfcb1eb2b5d61176519b115f06b31aeed0319b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:e9:f9:75:48:e5:d9:a7:8a:56:d0:53:b5:
ee:88:28:fb:4a:33:88:9d:53:53:5e:38:22:2c:20:
92:9e:ca:d2:53:78:71:1c:39:49:97:98:ea:dc:9f:
79:9f:44:d6:55:28:94:e9:60:d0:8c:36:b6:8c:4a:
aa:e6:18:8d:e7:b3:f3:6c:d4:1b:ed:64:ea:08:8b:
51:20:e8:60:e0:bd:fd:14:82:cc:83:d2:6a:53:8b:
d2:3a:44:76:2e:e0:59:89:69:be:cb:f2:1e:30:8c:
54:7b:4a:cf:0f:b0:c8:cf:af:c4:e2:48:de:a0:a6:
49:cf:3c:33:e8:9d:6a:e8:20:53:98:7e:ed:52:c3:
ce:c4:c3:07:7b:7f:46:6f:fd:a7:27:74:d4:23:97:
f3:1a:71:13:08:15:e9:69:ff:3a:07:91:ec:bc:ea:
8d:60:ed:57:d3:f8:0c:aa:55:5b:aa:0a:ed:a7:3c:
84:12:cd:e8:b8:70:b3:75:b7:8f:83:4f:c0:4f:33:
11:0f:08:0c:e9:13:51:6c:99:b3:d7:74:b6:19:8e:
4e:9d:e5:46:27:af:3e:29:c0:0c:b4:6c:6b:f5:73:
57:a7:fb:1a:00:6d:0b:2e:69:da:ad:ed:58:5a:d9:
c1:f7:9c:f2:17:cc:de:69:d9:90:ec:d9:34:7e:71:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CF:CB:1E:B2:B5:D6:11:76:51:9B:11:5F:06:B3:1A:EE:D0:31:9B
X509v3 Authority Key Identifier:
keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:40:d8:a2:a4:44:40:eb:3a:ea:d3:93:bc:db:88:4f:04:b9:
6f:d8:dd:cd:6a:ff:87:17:05:60:3c:99:48:aa:fd:5e:59:50:
8d:d5:53:d3:fa:e2:c4:51:fc:85:40:23:33:6c:cf:0d:76:5e:
5b:70:b5:b5:dd:68:35:ad:56:56:0e:0e:9d:b8:dd:56:9b:f9:
1d:34:30:87:89:6d:a0:d9:ec:c6:84:bf:28:e0:20:45:74:6b:
10:ae:04:d7:b3:77:d6:94:ab:b3:51:7f:df:b8:32:36:3e:32:
88:14:03:da:62:c6:3e:a2:82:8d:78:38:67:14:63:6b:d5:c7:
dc:76:df:17:6c:0c:06:d7:a6:a5:27:a5:be:60:e5:ec:6e:e3:
d2:db:7b:82:8b:02:4e:4e:d1:10:f3:f3:51:b8:1c:6f:f8:94:
e5:fb:4b:be:73:e6:3e:09:ec:fd:b7:da:97:11:30:9b:4d:f4:
f2:81:4e:88:c1:ed:70:1c:6b:ec:cc:3f:c8:b4:5a:44:66:31:
7d:aa:58:55:de:1d:e9:2c:e8:f9:8c:85:f2:e7:e3:71:0b:0e:
13:5f:ee:b8:d6:bb:d8:f8:7d:f5:df:a9:9f:fb:81:85:29:8e:
cc:56:23:7e:2b:7e:72:3c:0b:5d:2c:15:f2:d5:2d:66:14:ae:
4c:9a:56:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:16 2025 by rpki-client