Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
File: MBc-_VmPqpjUtSWOUfs6txbXrHE.mft (raw, json)
Hash identifier: JEUOcKoYwyJfxX+MKmksXmhWVHgS9Nu8yL0XX/d2mWU=
Subject key identifier: E3:3D:A0:07:55:0E:E0:1D:E9:DE:60:A1:6E:B3:7C:67:55:A1:A7:66
Authority key identifier: 30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
Certificate issuer: /CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Certificate serial: 019655DCFA9A30DF9DEE26E28774B2066F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
Manifest number: 13A9
Signing time: Mon 21 Apr 2025 01:01:07 +0000
Manifest this update: Mon 21 Apr 2025 01:01:07 +0000
Manifest next update: Tue 22 Apr 2025 01:01:07 +0000
Files and hashes: 1: MBc-_VmPqpjUtSWOUfs6txbXrHE.crl (hash: /LDJld3caBrgAxPY1J38lGAP5gf409nJcN2MtDHSHco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:fa:9a:30:df:9d:ee:26:e2:87:74:b2:06:6f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30173efd598faa98d4b5258e51fb3ab716d7ac71
Validity
Not Before: Apr 21 01:01:07 2025 GMT
Not After : Apr 22 01:01:07 2025 GMT
Subject: CN=e33da007550ee01de9de60a16eb37c6755a1a766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:15:f5:88:14:22:18:6f:ed:2e:b5:28:80:
2a:eb:42:c4:9c:bd:3e:32:1f:67:bb:54:39:ca:8a:
ad:ee:6c:ce:75:9a:ab:7e:13:e3:22:f2:34:d3:b2:
59:81:2a:5d:ee:35:53:d0:2d:2c:3a:76:a7:21:2f:
a4:31:61:f2:83:c9:a6:4e:9b:52:52:a6:c9:6d:56:
f3:53:27:99:a1:ee:62:f2:7f:69:d7:73:19:23:4e:
40:e6:28:16:5b:15:1b:d4:14:99:3f:bf:ea:d4:f1:
58:99:ee:f9:a0:59:16:84:41:76:e6:a9:20:1d:8a:
2e:21:a3:e3:76:ba:92:3a:c0:34:4a:f1:c7:36:1a:
36:06:29:9f:0e:23:6a:c7:f0:2f:eb:56:69:51:47:
ca:88:a5:45:7e:ea:29:d2:fc:f9:d1:90:a7:3c:97:
59:f5:c7:94:fe:23:ee:5d:b3:2c:1a:b6:50:e3:30:
9f:88:09:8c:5f:09:77:fe:61:8b:f3:52:de:1a:84:
fc:04:ef:43:8c:aa:ba:76:42:c9:ab:d4:f0:6a:ad:
f5:c4:22:83:8c:b5:c2:0c:22:b9:09:f5:99:fa:a6:
95:8a:f4:13:5b:09:eb:c0:db:66:0c:33:6f:2b:63:
7c:11:c4:7d:c9:79:a1:59:2f:a8:63:2a:9f:66:9a:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3D:A0:07:55:0E:E0:1D:E9:DE:60:A1:6E:B3:7C:67:55:A1:A7:66
X509v3 Authority Key Identifier:
keyid:30:17:3E:FD:59:8F:AA:98:D4:B5:25:8E:51:FB:3A:B7:16:D7:AC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBc-_VmPqpjUtSWOUfs6txbXrHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7a067c-ea19-405a-8e74-b4a3fc3a01f1/1/MBc-_VmPqpjUtSWOUfs6txbXrHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3b:98:a3:79:b4:fa:29:2e:78:f6:3a:b9:45:27:29:5e:fc:
2e:0a:11:9d:7c:3a:3a:71:d1:44:ce:38:3b:10:85:39:15:0f:
43:3e:ce:63:46:6b:f9:14:42:da:ca:5d:3b:0d:88:85:13:6e:
bf:de:b6:f0:c4:f4:7f:75:27:16:98:c8:ae:b9:a1:65:c1:cd:
1c:f3:f9:06:ac:22:1b:15:5a:06:81:b7:8e:46:19:bc:ab:26:
a3:67:55:eb:4c:5e:ce:2a:9b:34:c6:e6:7e:a5:8f:a5:a3:d3:
72:75:c8:f2:2b:5c:cd:92:14:c2:a0:23:8f:ad:98:c7:aa:2e:
8f:f1:5c:eb:c4:e1:1c:30:4f:c9:2d:93:95:9b:5b:e2:35:3c:
06:ea:fe:f2:c0:76:41:ff:8f:bd:5a:c2:60:35:d1:32:07:cd:
b7:0c:b1:80:aa:7a:e7:7a:5c:ed:2e:e2:4a:b7:40:8a:7e:39:
2d:51:54:14:74:6e:d9:95:06:de:a1:b4:13:f5:b1:1d:43:62:
1b:a4:15:12:2f:ed:7d:12:5c:ba:ce:61:ab:66:38:ec:5e:54:
f9:3e:b0:62:51:e5:23:73:63:13:9b:28:ac:ec:73:90:e2:b3:
ac:5a:af:8d:c1:fa:22:f0:15:fb:a0:1b:b0:f4:24:a4:f7:1a:
a8:20:c7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:14 2025 by rpki-client