Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
File: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json)
Hash identifier: prLmsijbmG5VHFEmGXzC8+cWo+abS6e5Cv3XXm1xaGs=
Subject key identifier: D2:D9:39:CF:37:4F:AF:56:34:9D:E2:BE:67:01:71:D5:47:33:19:A6
Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
Certificate issuer: /CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Certificate serial: 0196B822F440FFBCA9918EFC7B5DCFD01DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
Manifest number: 088D
Signing time: Sat 10 May 2025 03:00:20 +0000
Manifest this update: Sat 10 May 2025 03:00:20 +0000
Manifest next update: Sun 11 May 2025 03:00:20 +0000
Files and hashes: 1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: J8v650lM9dGZU1vwNQe2S5LX1fv3gjjvPJFLPWnrA0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:22:f4:40:ff:bc:a9:91:8e:fc:7b:5d:cf:d0:1d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Validity
Not Before: May 10 03:00:20 2025 GMT
Not After : May 11 03:00:20 2025 GMT
Subject: CN=d2d939cf374faf56349de2be670171d5473319a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b3:18:ff:27:da:83:68:13:2c:31:f7:6b:a5:
77:cb:1b:13:79:6e:3c:0d:1d:8d:6c:02:2c:c2:d2:
9d:87:41:23:93:0c:4b:b2:c6:6b:85:78:09:3c:63:
d2:68:1e:52:03:f4:50:e0:d4:87:c1:5c:de:aa:8e:
fa:61:e4:3b:fc:c3:d6:3c:da:19:23:72:e2:ef:a8:
16:14:0a:23:c7:bc:96:5f:4e:d8:e1:7b:93:21:3c:
74:5f:a1:96:3a:d9:1b:3b:90:0e:29:c5:83:fa:7b:
af:5b:6b:9c:d8:d7:91:6e:14:ff:ac:21:49:a1:e1:
6d:ba:98:28:a2:dc:92:47:34:a9:1d:8d:39:69:ec:
58:69:13:fa:d8:ac:ab:27:ad:7c:89:c7:9c:5b:be:
f7:6c:c2:f8:0e:0c:c0:f3:5d:54:ef:44:b1:ed:26:
ac:17:e8:48:9e:89:b5:e6:cd:fa:a8:f9:90:ba:c8:
6c:fa:bf:21:c4:e4:57:ae:45:b9:9a:e5:49:8c:c2:
ee:a4:31:28:29:6e:c6:d5:78:28:d8:6f:bf:51:2f:
9a:24:f7:d3:a8:74:35:ad:d5:4f:35:b5:28:62:61:
a0:c9:87:66:d8:99:25:89:d2:34:0d:a7:8d:40:ed:
68:4f:b9:72:3f:a1:fa:5c:9f:83:67:c1:bc:1a:70:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D9:39:CF:37:4F:AF:56:34:9D:E2:BE:67:01:71:D5:47:33:19:A6
X509v3 Authority Key Identifier:
keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ff:90:95:a6:6c:37:ef:fd:a2:1b:1e:10:51:00:b2:88:ab:
9f:e9:4d:69:23:07:26:c3:d7:bc:20:d8:f7:fb:f2:7e:97:5b:
60:d4:36:c5:b0:00:19:e7:ce:eb:b1:21:be:fa:74:08:ed:c2:
4e:d4:39:91:35:3b:e1:a6:f6:50:99:29:21:e5:ac:ad:4a:0d:
83:7e:e4:ba:f1:ac:72:70:5f:86:da:88:3b:92:68:5f:2f:21:
67:44:c1:92:59:12:c2:a1:26:c8:83:d4:59:4f:3c:b7:f8:8a:
fe:88:c3:f7:c6:7d:78:47:34:ef:e3:ff:59:36:5a:b2:83:31:
1f:ca:b2:07:8f:f7:04:d5:2e:56:2f:a4:57:b8:6c:3f:c4:81:
f9:77:41:39:a5:f4:19:14:1f:d2:58:80:bd:20:13:6e:ff:f2:
0d:5e:c7:07:d2:75:97:e3:da:a5:91:04:25:df:0c:30:fb:54:
a5:c1:29:e7:d8:55:7f:20:9e:30:8e:7e:23:fe:8d:e6:62:21:
69:53:9f:6c:7a:c4:bb:7a:15:b0:94:dd:5c:c8:02:b9:a8:5c:
5c:a7:2a:b4:20:ed:57:51:05:da:9d:b3:35:d1:8c:d9:37:4c:
4d:dc:b5:55:88:49:2a:a2:14:9b:50:29:21:2f:a6:72:73:e8:
76:24:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:21:06 2025 by rpki-client