Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
File: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft (raw, json)
Hash identifier: wEQ4FQJyTokM0U9zFDJlRv5W567viWOTG8KvIstlkZ0=
Subject key identifier: D8:01:E4:9D:6E:F0:23:F6:58:F7:C7:89:A1:5B:8D:EC:5D:91:32:74
Authority key identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
Certificate issuer: /CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Certificate serial: 0196B3340162E69A83AE1BD2D959E1D5BAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
Manifest number: 152C
Signing time: Fri 09 May 2025 04:00:51 +0000
Manifest this update: Fri 09 May 2025 04:00:51 +0000
Manifest next update: Sat 10 May 2025 04:00:51 +0000
Files and hashes: 1: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl (hash: VHvU+Foi8CsF3n7qjDEkp0ojKDraqCgEiCc+SdJHDcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:34:01:62:e6:9a:83:ae:1b:d2:d9:59:e1:d5:ba:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Validity
Not Before: May 9 04:00:51 2025 GMT
Not After : May 10 04:00:51 2025 GMT
Subject: CN=d801e49d6ef023f658f7c789a15b8dec5d913274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8d:45:a1:c3:14:da:b7:dc:0c:20:65:f9:1d:
58:73:87:46:1e:84:81:41:81:c3:69:07:0d:e4:3d:
4a:c2:9f:47:92:5a:50:ec:0b:d6:31:96:c6:fb:8c:
97:5a:b3:f7:ab:14:ec:12:fa:b0:74:fa:c8:6c:2c:
79:4b:f2:08:00:6e:2a:98:e7:42:db:38:3f:d5:fd:
12:3f:32:0c:cf:31:e1:61:0a:cf:31:2d:1e:85:6b:
4e:79:50:19:a9:24:58:e1:bb:4c:48:a3:42:5e:1e:
9f:e4:b4:50:47:0b:c6:8c:e0:04:26:e1:6c:66:da:
81:b4:71:ea:81:7a:4d:0e:15:87:d7:cd:cd:08:e4:
81:12:a4:78:2b:39:14:6f:e1:d6:fa:6a:68:f2:46:
41:b3:e6:16:44:3f:fc:fa:5f:ce:e9:e8:56:3b:8c:
1b:3d:6a:c9:2a:0f:8d:c0:d0:05:eb:c0:af:24:4e:
74:f9:60:c2:ec:df:a1:3e:3d:7f:4c:e5:67:ef:69:
cb:3f:09:5c:f7:20:2c:7d:b1:67:2f:4c:f8:bc:c6:
85:32:4f:de:32:f8:8f:eb:30:69:7c:73:ac:f7:b3:
f4:75:45:8a:99:66:c0:a8:f1:7e:7c:96:04:1c:3e:
ca:bc:64:95:f0:d3:dc:e1:8d:cc:35:c8:7b:e7:58:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:E4:9D:6E:F0:23:F6:58:F7:C7:89:A1:5B:8D:EC:5D:91:32:74
X509v3 Authority Key Identifier:
keyid:99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cc:f2:4f:fa:f9:22:8d:c1:ce:73:27:b3:20:3c:e6:26:85:
5a:0c:14:24:fa:59:0e:db:da:0f:a9:c8:eb:ef:45:8e:d3:25:
a9:04:17:6b:ac:e3:18:ac:64:d5:ec:11:7d:ee:3a:c8:b8:fd:
df:78:05:da:67:37:2b:b0:7f:78:e5:bd:bd:d6:b0:25:f0:22:
d1:66:f3:15:55:13:e6:56:f6:f3:33:14:29:0c:35:c3:6e:6e:
7b:39:4b:51:41:90:c7:90:a6:60:f6:51:90:f6:dc:5f:69:b2:
54:94:78:d3:f8:6b:1d:e3:71:35:4d:3c:3f:34:26:7b:ad:5c:
a7:7b:08:b6:98:7a:5e:f8:d5:31:51:6f:fd:40:ef:4d:04:f8:
a5:28:62:d3:a7:04:f9:69:38:15:76:7f:71:80:bf:06:32:66:
43:59:16:b4:f5:4e:6a:25:cc:72:36:8e:bf:ad:d7:af:77:b4:
61:a1:b4:4f:f9:f7:53:36:a9:7c:c7:b7:77:56:55:c1:ee:24:
a0:d0:04:cc:72:af:28:27:da:0c:4a:93:b1:4c:07:35:0f:17:
2f:07:21:b9:1c:b3:12:d6:45:aa:31:28:07:a3:03:31:95:b6:
52:86:cd:59:e0:8d:51:d2:ff:87:09:64:a6:75:b2:77:fb:c6:
9d:d6:7f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:40:36 2025 by rpki-client