Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
File: mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft (raw, json)
Hash identifier: HOCn7t70q95VfVgIUl1PwFt5bXrOJawcwOgoujjchOo=
Subject key identifier: 56:95:32:93:45:CB:9A:BE:10:B2:5C:64:B4:9A:0A:A7:53:94:A6:97
Authority key identifier: 9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
Certificate issuer: /CN=9b134b6e9024064b9057283489bf2c436f4075e8
Certificate serial: 0196B9A4A1D85C7E5866076E33DB2C6B72AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
Manifest number: 068D
Signing time: Sat 10 May 2025 10:01:36 +0000
Manifest this update: Sat 10 May 2025 10:01:36 +0000
Manifest next update: Sun 11 May 2025 10:01:36 +0000
Files and hashes: 1: mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl (hash: Z0QYVWhptO2roCBljhU/mqnfwh+V5Mbg7WJOgsgUNr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:a1:d8:5c:7e:58:66:07:6e:33:db:2c:6b:72:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b134b6e9024064b9057283489bf2c436f4075e8
Validity
Not Before: May 10 10:01:36 2025 GMT
Not After : May 11 10:01:36 2025 GMT
Subject: CN=5695329345cb9abe10b25c64b49a0aa75394a697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ed:8c:96:e1:64:79:f1:f8:0f:d0:b2:a0:9c:
6c:1d:b0:e7:99:d1:a2:1d:fb:26:9d:95:96:14:d7:
55:f8:44:26:8f:49:52:fe:f8:a8:27:d0:64:87:a2:
83:df:72:17:42:d6:80:a6:a1:71:ff:a4:2e:d1:2f:
20:11:04:36:6a:71:61:6d:96:0d:64:12:b7:94:62:
e4:bd:2e:15:e5:e9:5f:76:f9:37:99:04:80:d5:5f:
0c:8a:45:8c:57:3c:d9:6e:59:1d:c0:c9:8e:e4:92:
05:0f:e6:e2:c7:27:92:24:e9:82:1b:d9:9a:e2:ac:
9e:f2:e6:75:73:fb:8c:eb:2e:b1:be:36:5c:3b:da:
76:d8:50:ea:3f:f5:8e:69:1e:c5:f5:ce:f9:c6:53:
0d:dc:50:77:21:6f:df:48:75:5e:f5:af:8f:c6:1e:
b9:6e:bc:c1:28:f1:f4:5c:87:ab:ba:bf:9b:b9:0d:
18:a1:2d:fe:be:86:ab:b1:4a:0e:8a:43:ed:0b:75:
d6:74:d3:fc:14:c3:49:ec:01:50:c8:00:31:2e:3e:
b3:c4:26:d8:14:be:84:78:30:97:16:45:44:bf:ce:
ae:c6:65:e3:0a:37:eb:1b:5b:f2:e5:d6:20:f6:95:
d5:af:a0:c5:63:a2:69:f1:1e:14:70:8c:91:14:85:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:95:32:93:45:CB:9A:BE:10:B2:5C:64:B4:9A:0A:A7:53:94:A6:97
X509v3 Authority Key Identifier:
keyid:9B:13:4B:6E:90:24:06:4B:90:57:28:34:89:BF:2C:43:6F:40:75:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxNLbpAkBkuQVyg0ib8sQ29Adeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8b060c-17c1-4d9a-851e-b47e0417397d/1/mxNLbpAkBkuQVyg0ib8sQ29Adeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3a:76:ea:58:43:b5:b7:f0:f2:34:3c:44:90:65:96:8e:6a:
10:cb:60:f9:8e:e6:98:59:a7:ae:5f:e1:18:e1:47:9c:ad:2e:
95:e0:7f:43:ec:ee:de:6e:ff:ca:ee:4f:db:dd:99:d6:fd:41:
e7:e6:7b:65:59:cb:1b:47:44:22:eb:10:d2:5b:23:84:7f:2c:
ac:a1:b0:5e:42:1e:0e:fa:82:04:3f:6c:89:d3:a0:07:ad:25:
83:40:a9:88:b2:6f:01:05:eb:a5:fe:80:ab:63:ed:0b:fa:23:
13:b8:50:61:51:14:69:9e:ef:5a:7e:55:12:13:20:69:f7:dd:
8f:0b:45:a2:6e:25:43:36:e8:92:69:0f:e1:42:3e:8c:fb:e9:
9f:30:23:cc:0a:57:1e:16:32:02:91:96:4f:f9:a8:9b:86:37:
f6:30:4f:73:59:7d:e0:fc:5a:49:bc:44:eb:d1:f2:f8:26:0d:
23:ed:2e:e4:17:81:2f:84:ce:c7:1d:9c:82:34:43:60:dd:0f:
6f:d6:78:ad:50:dc:04:f0:b3:ea:c8:b3:81:fb:54:4b:44:91:
dc:f4:d9:1e:09:d9:de:9f:c4:0a:0c:29:d6:d2:5a:6d:cf:a6:
dc:cb:3a:63:44:22:0a:a8:00:64:a8:c6:35:e3:c2:97:e0:39:
27:f0:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 17:10:12 2025 by rpki-client