Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
File: mSlM_9YStex7SLhCMqRdarbd_5U.mft (raw, json)
Hash identifier: 5qXiyi9a8yHmlK/WmFXw05LX+E6jom065g4fcyyGUTg=
Subject key identifier: 61:BD:C6:75:B9:35:D2:23:FF:10:27:C5:D5:D7:F7:46:17:1D:37:3B
Authority key identifier: 99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
Certificate issuer: /CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Certificate serial: 0197B6A175D0909CAB7B62D401C18CC50A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
Manifest number: 02F4
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: mSlM_9YStex7SLhCMqRdarbd_5U.crl (hash: lKzoc5LSk0PDOrHuCCblZtkwLkQ/yZSrsZoemb138LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:75:d0:90:9c:ab:7b:62:d4:01:c1:8c:c5:0a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99294cffd612b5ec7b48b84232a45d6ab6ddff95
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=61bdc675b935d223ff1027c5d5d7f746171d373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:4f:87:5a:44:93:34:77:c8:91:ac:77:e9:
2d:1b:e1:68:ce:3d:d1:01:37:03:0a:22:9f:8d:e6:
ec:0d:4a:f5:5b:0e:cc:23:64:f4:88:eb:6e:f8:04:
4e:bd:60:03:cb:7b:51:dd:63:ac:8b:e9:33:54:ef:
fc:fe:00:55:89:dd:ff:39:7b:b5:8a:32:18:cd:fc:
8d:f9:73:80:f3:30:e6:bb:40:4c:65:7f:f0:52:f3:
79:2e:12:14:e7:e8:6d:e6:1a:5f:45:6a:3c:c6:bd:
db:f5:59:86:5c:f2:35:4a:f2:68:0d:9e:7e:46:51:
92:db:cd:39:7f:c7:d5:cf:c5:03:93:82:b7:9d:4d:
59:4e:c2:65:ec:c4:b5:7d:84:6e:16:f5:f6:8c:bf:
5c:c9:7d:8f:30:b6:0f:ce:a9:f6:f2:9f:d6:f7:b5:
1e:77:c2:18:f2:29:df:c9:6e:20:69:ae:e9:b3:c1:
b9:20:3f:9a:f0:ce:8b:96:6b:a5:7a:60:29:12:a7:
30:d9:96:ad:7b:f2:18:c6:01:0e:5d:dd:4a:a7:9b:
8c:4f:09:65:8d:51:a8:00:59:fa:8c:73:1c:3d:fd:
11:d3:ea:d1:93:4b:10:fc:52:e6:b2:d0:f2:b5:67:
53:c8:dd:c0:41:1b:4f:e0:4a:10:16:1e:8b:a9:2d:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BD:C6:75:B9:35:D2:23:FF:10:27:C5:D5:D7:F7:46:17:1D:37:3B
X509v3 Authority Key Identifier:
keyid:99:29:4C:FF:D6:12:B5:EC:7B:48:B8:42:32:A4:5D:6A:B6:DD:FF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSlM_9YStex7SLhCMqRdarbd_5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7cac4a-6b99-451d-a649-5d9272e48a7c/1/mSlM_9YStex7SLhCMqRdarbd_5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ee:fa:74:c9:25:0c:5c:a3:80:02:35:75:3a:c8:80:e0:27:
8e:ae:16:f7:d6:56:f1:db:51:07:92:ca:58:9a:a3:b2:71:b5:
7a:09:9e:3a:99:3e:a8:56:37:91:31:af:b0:3f:4b:cb:00:22:
bf:66:6b:02:2f:b1:15:65:0a:5e:a0:d5:b4:5c:f3:56:b7:82:
b3:e6:d5:78:74:a1:da:c6:b6:0d:0a:01:58:de:bb:1e:e2:01:
b4:b2:b1:13:8d:f9:a9:e7:90:c8:fa:fe:73:bb:17:3c:2d:4d:
a4:f9:10:08:68:90:8b:9b:e6:a6:7c:f7:e4:2c:01:7e:70:e6:
dd:f5:df:a3:e1:c2:9d:df:54:7d:ed:b8:de:7c:d5:93:c2:32:
39:f4:d3:80:be:b7:f7:91:c0:80:32:87:cf:81:92:27:9a:ab:
99:01:0e:66:5d:25:30:98:54:7c:00:74:ad:cc:9b:a1:b3:36:
14:be:20:96:0f:54:7c:4d:39:78:1e:f0:8c:11:d8:a3:18:84:
11:54:48:06:5a:b0:c2:3d:12:1b:67:a8:d1:92:87:33:4a:cf:
db:df:d9:8e:29:06:cb:ca:16:7a:c6:a9:50:79:18:31:53:63:
58:96:e8:8a:56:0f:aa:74:67:26:90:20:78:0a:72:88:75:2d:
96:c7:ea:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:29 2025 by rpki-client