Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json)
Hash identifier: HzTpclJdFd4mHmryBFm5scs39Ureh11hkrpqkgs7oIM=
Subject key identifier: AA:A4:A2:6D:78:1E:C1:8F:49:0B:E3:28:DC:AB:51:EA:61:4B:C1:94
Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Certificate issuer: /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Certificate serial: 0197B7452E882551E68CB7B041D971916064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
Manifest number: 122A
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: W6vNxEaZxkQkvshq5LX09J0XBaoLeYtGFlV0EJXZ3XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2e:88:25:51:e6:8c:b7:b0:41:d9:71:91:60:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=aaa4a26d781ec18f490be328dcab51ea614bc194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:1a:d7:53:0e:e9:41:e0:00:8a:05:37:bb:
49:bb:a3:82:29:02:d7:24:cb:65:8d:58:fa:57:e5:
fc:19:c4:36:10:93:c7:c9:a5:a3:e9:79:e2:69:2e:
73:3d:e2:b5:e4:b9:40:60:17:3f:94:85:8b:02:53:
81:d7:75:b0:ae:f9:08:0e:ef:ed:95:29:16:28:d6:
46:d1:b6:89:52:73:df:13:b7:73:3c:d8:cb:9e:e0:
48:0e:09:66:fb:25:87:47:33:00:ef:90:1b:0b:0c:
19:d6:b3:58:80:6e:1e:dd:11:29:2e:84:fd:85:32:
54:47:a3:5f:68:0b:4e:22:ec:fa:5c:f7:96:34:17:
d4:f2:7d:e6:7c:16:c5:6e:e0:64:21:77:b6:b2:3c:
a4:c6:90:9f:66:ad:59:5e:15:7a:50:fe:05:27:b2:
ec:46:3e:0c:19:13:65:a5:ed:3d:2f:9b:10:79:cf:
69:cc:56:6e:3c:06:4f:a0:c4:cb:1e:c2:c4:ce:03:
c8:e2:41:41:fe:41:a1:82:3f:86:14:ad:fb:ed:f3:
4a:86:6e:89:5b:c9:f4:cd:c6:ac:44:d6:09:7b:f4:
a5:c3:aa:87:18:fd:17:af:3b:e9:cf:04:90:5d:ce:
af:25:fe:be:f2:06:b0:5e:2b:13:f3:21:d2:f8:88:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A4:A2:6D:78:1E:C1:8F:49:0B:E3:28:DC:AB:51:EA:61:4B:C1:94
X509v3 Authority Key Identifier:
keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7f:b6:a9:b6:86:85:1b:6d:c5:58:f5:2d:d3:50:ad:d1:8b:
d6:a3:e1:2c:ea:32:11:c5:65:07:df:9f:30:46:ab:78:5c:29:
cc:4f:8d:50:d5:23:b0:6b:a7:a6:c2:59:1e:fb:d6:e9:9f:82:
05:fa:68:4a:0e:1f:6c:06:27:4a:a3:c2:1d:44:83:57:72:19:
01:be:46:e4:16:c4:ab:d2:17:44:21:8d:68:6a:c2:b4:ca:5c:
c5:b9:5c:1b:f9:1b:f5:ab:91:ce:cd:56:45:ac:0b:22:68:7c:
ba:21:fe:42:ec:49:1e:74:8a:6a:5a:76:57:45:26:35:46:cf:
3d:60:e0:f7:61:2a:03:8a:a5:16:c1:d9:ee:9b:fa:ff:73:50:
25:f5:11:f5:21:e5:ae:97:b4:80:f7:d4:a7:28:51:31:7e:9e:
0d:f0:dd:33:95:c5:68:40:d6:6b:23:cd:b1:ce:a3:f2:5b:89:
ad:35:c7:85:d7:5c:31:b9:83:20:47:e1:cc:c5:fd:8c:2f:29:
7d:d3:ee:52:80:67:a4:52:6e:68:ba:80:e9:29:bb:95:79:72:
d5:42:d5:90:55:8e:15:96:46:16:37:6a:53:e2:b3:01:70:c7:
a6:ce:2e:59:4a:ab:e0:d3:95:dc:5e:bf:f4:be:80:2e:8c:ed:
4b:fd:5d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:18:29 2025 by rpki-client