Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: wbMvtqDgxTLFeaxeqVhZ1GE++BVYgz+J/JIe2Xx8okM=
Subject key identifier: 5F:77:3E:01:D8:02:80:FC:A5:5E:3F:E7:B8:B5:45:36:25:16:5B:B1
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 019655383533293B5F4733B2DBD9C48C9EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 0EDF
Signing time: Sun 20 Apr 2025 22:01:09 +0000
Manifest this update: Sun 20 Apr 2025 22:01:09 +0000
Manifest next update: Mon 21 Apr 2025 22:01:09 +0000
Files and hashes: 1: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: pxGpmcKYo6C/JkvvWiF3rcXYlsYSY5fPSI4gd7lL1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:35:33:29:3b:5f:47:33:b2:db:d9:c4:8c:9e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Apr 20 22:01:09 2025 GMT
Not After : Apr 21 22:01:09 2025 GMT
Subject: CN=5f773e01d80280fca55e3fe7b8b5453625165bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c6:b2:34:a9:4d:30:f8:56:06:ce:1d:48:da:
2a:e5:c8:79:c9:78:4f:e9:e5:e3:79:8d:c4:e0:c5:
b2:ad:de:ae:09:ef:7d:9e:9d:8c:ba:45:a7:87:da:
ac:74:2c:de:d6:0c:55:f2:cf:43:81:03:65:d3:35:
26:82:ed:5d:9c:fc:e6:68:62:a7:ff:43:11:69:38:
e6:14:62:e4:e3:3a:35:eb:64:53:bb:0b:28:85:66:
29:37:54:e3:10:16:fa:a6:4a:09:48:83:3e:77:ba:
1a:40:c8:24:c7:cb:86:ff:b0:47:d3:5f:b0:e0:94:
3f:0f:99:68:51:a3:aa:68:96:10:94:73:1e:de:4d:
53:bb:fe:d5:68:f3:85:0c:85:07:c9:bc:e8:e5:40:
75:2a:a4:92:43:90:8b:a4:62:75:8b:35:ab:27:38:
8a:21:51:6b:b3:86:5f:ae:90:e3:2e:ec:8c:e0:4a:
2e:d9:72:9c:17:ed:94:16:3c:8e:88:82:a3:b5:f6:
86:f5:d7:d7:0b:bc:cc:e7:dd:55:ef:0b:4b:b0:5e:
96:bf:8d:5c:1e:4c:f9:f4:52:75:9b:ee:11:37:1f:
08:86:91:83:27:00:39:ec:47:59:e1:c9:e7:6e:92:
a2:e6:b6:47:8d:56:08:69:90:ac:1f:82:0d:62:61:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:77:3E:01:D8:02:80:FC:A5:5E:3F:E7:B8:B5:45:36:25:16:5B:B1
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6c:55:66:95:be:5f:1c:6d:32:c3:d7:54:f5:b8:c3:77:06:
02:53:a7:52:33:8a:ff:b6:ef:5d:ba:5d:90:f2:d8:03:d9:67:
d2:d6:fb:cc:30:fa:20:1f:c0:d0:2e:54:79:0f:3d:68:08:61:
b7:e2:0d:d6:c8:b1:82:46:e0:60:25:e6:d3:76:89:c8:5b:13:
d3:83:78:9b:bc:8f:f0:a4:54:94:f5:75:88:b6:9d:db:e3:f0:
80:8c:e9:2c:24:07:ae:4b:23:c8:3f:5d:3b:f7:90:ed:21:2a:
dc:73:ba:98:7e:ce:ca:23:b3:cb:88:b0:01:3d:c3:d0:a0:0f:
00:e5:0c:26:14:67:c8:e0:5d:c6:67:ee:bb:a2:59:78:e2:68:
e5:1e:b3:7e:ed:35:82:41:41:f7:3d:6d:5e:c4:7b:b6:1d:c8:
d5:44:ba:f6:64:9e:7a:bd:ca:15:cc:27:38:5a:f0:d7:7a:46:
75:a3:24:d7:13:a9:2a:e7:01:1d:f4:9c:56:04:93:84:f7:87:
90:23:f0:29:61:d1:ac:c1:0d:c2:10:c1:02:d6:92:91:74:26:
23:8a:15:36:e2:d7:4d:51:fe:17:00:75:d5:82:3c:ab:be:14:
c3:1e:84:ab:93:66:89:22:7f:a7:09:07:d6:3a:09:21:59:4f:
c9:95:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:12:57 2025 by rpki-client