Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json)
Hash identifier: ZNaW4p9LI6HM6Gd7bi7rrS9ka9UB002f8V+DYeAyHZU=
Subject key identifier: 33:D8:22:61:BC:0F:B5:C3:1E:8A:A8:3B:31:53:95:13:87:C2:39:AA
Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Certificate issuer: /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Certificate serial: 0196C20200212AA209476CA12AEB7FF7AA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
Manifest number: 11AB
Signing time: Mon 12 May 2025 01:00:33 +0000
Manifest this update: Mon 12 May 2025 01:00:33 +0000
Manifest next update: Tue 13 May 2025 01:00:33 +0000
Files and hashes: 1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: 9UhcIPZt7Asy33ClITJ1sq1ivDAyIC0ZQ/dXsR0SVRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:00:21:2a:a2:09:47:6c:a1:2a:eb:7f:f7:aa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Validity
Not Before: May 12 01:00:33 2025 GMT
Not After : May 13 01:00:33 2025 GMT
Subject: CN=33d82261bc0fb5c31e8aa83b3153951387c239aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:85:fe:0d:8b:cc:1e:a8:00:cf:a1:d3:28:a0:
26:e0:10:28:c4:a8:42:ba:b0:11:f6:87:ec:32:14:
26:7b:a0:98:05:7f:bb:19:aa:46:ea:51:ab:65:1a:
71:48:4c:49:75:82:19:b1:a1:69:3e:7a:71:9e:a5:
c2:71:9e:7e:0a:be:07:e7:96:a7:7f:b5:cc:93:3d:
15:31:34:15:e1:8e:a3:14:65:98:37:8c:ee:1e:1d:
d7:cf:66:29:4a:1c:92:52:41:e1:44:34:7d:8b:ab:
9d:f5:e9:2c:7b:1f:f6:91:14:aa:49:30:c1:f8:c0:
cc:06:11:0d:22:45:0f:da:9c:13:af:3f:6e:a8:7e:
6e:47:34:0f:b3:01:be:59:26:cb:c1:8a:2f:e6:c1:
d2:11:6a:70:f0:a1:2c:42:c0:aa:7f:46:da:40:0f:
5a:d3:ea:c9:63:5e:1c:59:8f:e0:cd:fe:2a:da:f0:
1d:85:0e:fa:75:b1:03:25:3b:29:05:c8:98:85:9c:
92:4f:fe:54:e6:aa:d1:b6:f0:f8:54:45:ca:fe:56:
4e:62:43:ed:c6:b6:7d:a2:83:46:4a:f7:ea:7f:90:
b6:92:ec:7d:e0:8e:34:a7:b8:f8:b0:d9:17:22:8c:
a7:55:29:90:d0:92:92:3a:b3:3b:98:47:43:c2:47:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:22:61:BC:0F:B5:C3:1E:8A:A8:3B:31:53:95:13:87:C2:39:AA
X509v3 Authority Key Identifier:
keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:54:d7:5b:a8:01:3c:c0:af:7d:8b:3d:e2:16:d7:de:3b:b3:
9f:17:3c:bf:1e:c3:6e:33:c4:d4:a7:48:9b:11:04:7f:02:b7:
09:a6:38:68:9d:ba:6f:d2:c3:44:4d:fc:13:ae:a4:3e:68:52:
47:4c:13:5a:52:b9:05:0d:9c:cb:79:f4:e9:70:cf:b6:aa:10:
9f:88:91:8b:64:7d:8e:ff:6a:16:12:38:75:b1:36:41:8c:a8:
8b:1f:49:5e:16:ca:55:f3:c4:db:a4:d0:cb:87:cc:42:cc:47:
31:47:4c:c7:47:ef:11:de:31:e2:3c:ca:7b:44:05:de:71:c9:
c5:db:44:f0:62:ae:64:55:2e:7d:a8:16:45:57:47:af:cf:4a:
d9:1b:1c:6c:b4:f6:d4:1f:b5:6c:e0:c0:13:49:29:87:f0:ee:
a6:25:3e:13:90:43:84:8f:c3:5b:20:9f:40:9e:e7:54:ae:c8:
9c:f9:d9:30:8f:3e:e4:95:46:7e:00:20:ac:a9:d3:68:e8:c3:
72:b7:22:14:54:09:58:af:49:07:12:84:dd:9f:d4:27:27:83:
74:c8:e8:8c:a2:92:c3:c2:54:bb:05:a5:e1:d5:8c:36:5c:24:
30:e2:d4:e7:ed:21:b1:7a:5e:4c:0c:31:8a:6b:c4:a4:35:26:
da:bd:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:41:07 2025 by rpki-client