Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
File: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft (raw, json)
Hash identifier: c95akF5PODwp2UI/kcyip+ghdEUi3WosQDoJOJJxtnY=
Subject key identifier: E5:7A:5A:6C:22:3E:C5:C4:53:31:5B:42:78:8D:78:0A:35:B0:45:66
Authority key identifier: 98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50
Certificate issuer: /CN=98ae843e7bc8748d015bc47f635b17561be72850
Certificate serial: 0196C539F736C3A442D93A864D82567D2BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
Manifest number: 1533
Signing time: Mon 12 May 2025 16:00:32 +0000
Manifest this update: Mon 12 May 2025 16:00:32 +0000
Manifest next update: Tue 13 May 2025 16:00:32 +0000
Files and hashes: 1: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl (hash: qV3wIE8olTLm/GlcZzVb+kD3o+xOXCJxBOMIPaK5qmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:f7:36:c3:a4:42:d9:3a:86:4d:82:56:7d:2b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ae843e7bc8748d015bc47f635b17561be72850
Validity
Not Before: May 12 16:00:32 2025 GMT
Not After : May 13 16:00:32 2025 GMT
Subject: CN=e57a5a6c223ec5c453315b42788d780a35b04566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:9c:72:c9:7f:72:82:a9:e6:b5:85:f7:aa:
cf:f7:ca:c4:11:6c:93:b3:d9:85:41:e6:53:60:1b:
69:05:ee:ac:bd:77:c5:c0:8c:b2:33:8d:b8:22:da:
a3:db:a4:ef:01:87:34:77:81:f6:7f:bb:45:38:44:
0d:7d:d9:81:23:3f:2e:69:6b:91:69:e1:1e:bb:ce:
d1:f7:4f:f9:dc:2d:8c:d2:84:a4:b4:a4:8c:b1:8b:
2c:f6:ba:59:63:57:6d:cb:8e:4b:98:37:a0:33:f6:
4e:7c:78:ed:5c:20:0c:88:28:72:42:47:5d:37:21:
81:1d:d4:96:b0:24:a1:74:a7:94:a7:2a:8b:09:8b:
bd:cf:d7:0b:98:04:95:76:31:44:99:17:60:74:05:
b3:81:18:5c:38:ee:7f:f9:bb:63:e3:b2:48:7d:49:
d4:ac:a0:54:30:57:c0:fc:75:59:5e:14:fc:3c:18:
59:c9:35:87:f8:cb:ce:84:9d:a4:96:6b:66:1b:df:
09:ca:10:5d:73:92:5b:d2:15:42:37:a6:02:ae:5b:
f1:d0:3b:47:3e:7d:4f:6f:29:d9:03:23:d4:71:06:
82:20:2c:08:9a:72:ce:e7:12:8b:5d:02:7a:6e:9b:
a3:62:fe:56:5e:34:00:13:67:2d:03:50:7a:c6:ba:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7A:5A:6C:22:3E:C5:C4:53:31:5B:42:78:8D:78:0A:35:B0:45:66
X509v3 Authority Key Identifier:
keyid:98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cd:2f:1d:e2:8f:7d:9b:3e:2a:c7:d8:4d:b0:65:2b:64:48:
ae:f0:68:1f:bc:d0:a9:9e:22:6e:8e:ec:5a:be:a1:97:07:76:
2b:f2:ce:71:33:42:c8:7d:38:e1:77:7e:8e:13:17:61:59:a1:
92:5a:ec:f3:81:52:56:ea:04:90:fc:23:12:1b:71:e3:f0:ee:
03:02:8a:b5:50:1a:a2:16:f5:80:d7:fe:8f:58:68:f0:e6:72:
f0:79:cd:69:9c:56:1f:25:ef:10:8f:5b:ee:71:16:c6:47:ef:
4b:de:10:fa:9e:77:bd:b7:9c:6d:f2:6e:06:3e:61:b5:8e:15:
a3:c7:f9:9c:e0:f1:aa:aa:4e:f3:bf:f8:4b:f2:91:8e:f6:7d:
84:d7:95:ba:b0:1b:70:de:d3:4a:00:b3:dd:58:8b:1c:1a:2e:
f0:6e:2a:72:87:13:7a:da:ef:d0:f4:9c:eb:74:eb:42:02:4e:
90:b4:d0:c1:29:46:5f:a0:5f:53:7e:35:55:17:89:23:c5:7d:
3c:fa:f4:c4:2d:69:a2:00:96:a6:13:9d:7b:26:a8:30:1f:76:
a4:8b:e0:9e:9a:b8:39:bc:b0:ec:c4:3e:64:be:29:65:25:b6:
cc:09:f6:89:4a:34:7e:0a:b5:59:ed:e2:f2:bd:89:10:b3:f4:
7b:ae:83:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:49:50 2025 by rpki-client