Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft
File: MKJtC08pGQMd0kUy3hy9aujaCLU.mft (raw, json)
Hash identifier: Kj4dxoGI6ranfvziJNxMMuogCOkIOP+JhERMdOErkHg=
Subject key identifier: E0:D9:6A:DE:BB:05:FF:58:DF:C4:E1:A4:A5:1C:66:0F:88:9A:0F:35
Authority key identifier: 30:A2:6D:0B:4F:29:19:03:1D:D2:45:32:DE:1C:BD:6A:E8:DA:08:B5
Certificate issuer: /CN=30a26d0b4f2919031dd24532de1cbd6ae8da08b5
Certificate serial: 01965F844AFB584186430105C73CFA2039A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJtC08pGQMd0kUy3hy9aujaCLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft
Manifest number: 09EE
Signing time: Tue 22 Apr 2025 22:00:27 +0000
Manifest this update: Tue 22 Apr 2025 22:00:27 +0000
Manifest next update: Wed 23 Apr 2025 22:00:27 +0000
Files and hashes: 1: MKJtC08pGQMd0kUy3hy9aujaCLU.crl (hash: tOMz8KfYX2wtKo3NKtz7Y2YICFBlf4Z2tg0IVW3AQ6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKJtC08pGQMd0kUy3hy9aujaCLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:4a:fb:58:41:86:43:01:05:c7:3c:fa:20:39:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a26d0b4f2919031dd24532de1cbd6ae8da08b5
Validity
Not Before: Apr 22 22:00:27 2025 GMT
Not After : Apr 23 22:00:27 2025 GMT
Subject: CN=e0d96adebb05ff58dfc4e1a4a51c660f889a0f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:96:18:4a:f6:e9:5b:c2:b5:99:fc:8c:cc:
e5:71:09:69:bf:37:1d:e7:1c:55:21:51:4c:e4:8a:
2e:5e:7b:be:91:b4:22:7e:73:55:ea:ef:8e:3b:23:
48:0f:da:cd:21:6a:a0:31:47:2d:9e:bf:cc:62:57:
21:ce:91:29:55:9e:3b:14:ae:54:e4:92:5d:98:d4:
10:74:e5:28:fc:61:12:b5:4e:57:db:af:06:6f:b4:
8c:94:a3:c9:21:11:c2:9d:1f:9c:fa:93:f9:72:0e:
1a:ac:f8:00:93:50:4d:be:0e:43:5f:be:87:8f:16:
5e:10:9c:4e:cf:6a:4f:00:a1:bc:84:90:84:9f:4d:
2a:fc:ee:22:16:9a:10:6b:ca:a5:ab:c7:ca:28:1c:
24:8b:7a:4a:a1:dd:85:3c:ea:cd:b7:08:a7:04:4c:
c6:aa:41:25:37:ad:95:36:a4:69:74:8e:47:a4:9e:
87:24:f5:8b:49:ff:97:ff:80:7b:6d:f3:55:53:9c:
06:cd:11:83:af:95:86:09:f3:ba:02:16:50:cc:3c:
29:a7:90:89:c1:af:b6:3b:6f:5a:13:93:34:49:34:
a8:4b:07:21:d0:73:a1:85:50:1e:37:e0:b2:46:1e:
b2:7e:eb:a1:1c:98:24:53:5c:1f:32:0e:52:a9:5d:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D9:6A:DE:BB:05:FF:58:DF:C4:E1:A4:A5:1C:66:0F:88:9A:0F:35
X509v3 Authority Key Identifier:
keyid:30:A2:6D:0B:4F:29:19:03:1D:D2:45:32:DE:1C:BD:6A:E8:DA:08:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJtC08pGQMd0kUy3hy9aujaCLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/71b7fc-ce24-4f52-9d6f-0bf5a59693c0/1/MKJtC08pGQMd0kUy3hy9aujaCLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:80:e5:d1:ec:c3:cc:d3:a7:3a:b8:dc:cd:62:34:a0:a1:b5:
f4:e7:a6:a6:6d:b4:22:8a:a3:26:b1:53:2a:6a:7b:bc:93:56:
b6:42:14:68:b5:57:ff:b8:38:5c:2c:46:86:70:e3:58:6c:35:
6d:93:0f:65:40:86:e8:59:77:ed:4f:fe:d0:71:20:ce:05:3c:
ba:ef:4d:de:06:fd:0e:fd:dd:40:2e:66:ea:0f:66:42:b6:75:
d9:bf:b9:9c:d8:b8:f4:cb:4d:cb:b3:be:f8:9b:52:d9:85:d0:
2c:c2:1b:85:d4:2b:87:40:38:52:9b:ec:2b:61:cd:02:49:69:
8f:0f:72:30:64:c0:6c:87:13:90:59:7d:6c:d2:88:0f:c8:85:
d6:2d:a4:89:39:ec:96:69:0c:9c:c1:9b:83:cd:2f:50:c3:d1:
95:cb:e4:78:6f:9e:89:ef:f6:c2:4d:26:14:1d:36:d3:e3:d2:
21:36:d5:10:22:2c:e9:ce:59:fc:57:d1:79:b8:93:ab:d1:a7:
fa:ba:76:9c:b6:3e:97:1d:0b:bb:38:10:4d:c7:b3:a1:52:2e:
50:fc:95:b6:de:30:0c:87:26:1c:9b:ef:3c:76:de:2f:3a:f8:
38:97:76:56:b8:a6:17:ca:d2:00:c0:60:49:ce:21:c8:4e:b8:
ab:f1:5a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:21:19 2025 by rpki-client