Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier: e4cxJeEaZJOwY0EHi/T5jrAYPJeClqIZwnAYyN7BW4Y=
Subject key identifier: B9:05:65:97:20:6B:31:BF:B7:BE:6C:FC:ED:55:E1:01:7C:C8:B4:5F
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial: 0196B2C5B142ED972279FB8CB52A901EEFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number: 152A
Signing time: Fri 09 May 2025 02:00:22 +0000
Manifest this update: Fri 09 May 2025 02:00:22 +0000
Manifest next update: Sat 10 May 2025 02:00:22 +0000
Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: ekrxIETytugdWx91exjI5r6/EYQXRm9eKa7KTRbRWII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c5:b1:42:ed:97:22:79:fb:8c:b5:2a:90:1e:ef:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Validity
Not Before: May 9 02:00:22 2025 GMT
Not After : May 10 02:00:22 2025 GMT
Subject: CN=b9056597206b31bfb7be6cfced55e1017cc8b45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:b8:10:98:b6:8f:4c:21:40:17:cc:ae:17:
7c:c5:0d:b9:64:89:82:c9:e2:16:54:bb:d5:80:24:
76:c6:bb:9f:68:ee:9e:29:5c:47:5e:a6:c2:6c:0b:
73:86:ff:27:df:17:bc:76:de:da:1d:94:ab:f7:af:
b8:9a:bf:67:d2:45:b7:c5:4d:22:8d:c3:50:36:00:
93:15:bf:da:47:95:02:b7:c3:c0:19:70:57:59:2b:
01:69:ef:f7:f4:d3:19:2b:95:50:ad:f4:4d:3f:0f:
19:3f:f4:8a:28:16:65:7a:35:6c:82:94:f6:c1:16:
57:27:0f:2c:8a:15:e2:fa:07:52:b3:f3:12:86:c7:
bc:6d:71:ad:9f:7e:25:d0:ce:f4:9d:3b:24:b1:3b:
b4:0d:bc:98:b0:8a:64:de:94:d9:00:99:9b:f6:2a:
4b:ac:81:18:a1:de:87:71:2e:d0:5c:64:64:f0:1a:
15:8d:e3:eb:e3:ac:57:a9:63:93:5d:10:27:8c:34:
b2:f8:45:4c:c9:9d:32:c4:20:d2:2e:a9:ae:7e:84:
34:a0:90:db:b9:fc:f9:06:7a:6a:6e:0b:16:98:17:
7b:86:a7:51:da:f8:c2:54:2e:81:70:f5:98:29:ac:
93:4e:c9:6a:12:72:9e:fa:dd:92:e7:94:13:2f:9f:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:05:65:97:20:6B:31:BF:B7:BE:6C:FC:ED:55:E1:01:7C:C8:B4:5F
X509v3 Authority Key Identifier:
keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6e:19:6d:40:10:18:b6:ff:5c:07:13:e6:90:2a:aa:50:f9:
90:9c:28:1c:6d:94:16:e7:db:ba:35:c4:25:b4:6f:fe:73:21:
74:6d:3d:25:c7:f0:44:5f:0c:ff:40:58:a7:cf:6d:e2:b4:a5:
66:01:6b:be:24:e7:83:ad:0a:82:b9:08:38:48:99:48:5b:3f:
1b:e6:e8:dd:f2:77:fe:d5:bc:41:c9:e7:eb:36:ec:09:6c:64:
54:c3:fc:e4:a5:dc:94:dc:00:bd:67:1d:48:71:98:2f:80:b0:
95:e8:c6:b9:48:05:e0:24:c3:6d:b1:92:3a:81:da:be:dc:74:
4e:ac:34:af:03:25:eb:9d:5f:ae:77:69:bf:8e:e5:4b:82:40:
76:0b:98:32:27:79:bc:8d:12:43:d2:ed:fe:fe:25:82:36:72:
4d:e2:c8:19:69:be:13:59:3b:a8:56:e8:20:ef:53:9b:17:7f:
e6:9b:41:76:b2:a6:e4:bb:80:2c:f0:2d:15:d7:b9:5d:8a:94:
ef:75:a4:5b:f5:87:eb:51:8e:a7:75:da:54:cd:24:58:02:ae:
39:33:a9:1e:b5:33:d4:59:32:12:92:28:25:10:77:ff:a0:75:
1e:92:d3:81:b5:60:72:48:41:fc:a7:fc:0e:61:45:04:91:8c:
a7:3e:e4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:25:10 2025 by rpki-client