Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: 0kqV5bQ98HiehYRc7WVwj/GtRKCpe1uAwrUZ/sRHQo4=
Subject key identifier: AA:0A:EE:FE:F5:7D:91:E9:F2:BC:19:0A:CE:70:99:77:F0:90:E9:52
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 0194C38861CA22EEB3238ADB94F0CF9570DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 0E0F
Signing time: Sat 01 Feb 2025 22:01:22 +0000
Manifest this update: Sat 01 Feb 2025 22:01:22 +0000
Manifest next update: Sun 02 Feb 2025 22:01:22 +0000
Files and hashes: 1: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: lmdrl0oQnPsEcmpJz12jevxqZOINpoBRhn9NKNqPNDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:61:ca:22:ee:b3:23:8a:db:94:f0:cf:95:70:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Feb 1 22:01:22 2025 GMT
Not After : Feb 2 22:01:22 2025 GMT
Subject: CN=aa0aeefef57d91e9f2bc190ace709977f090e952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:be:00:3d:06:10:35:72:cd:05:23:b7:0f:de:
75:3a:7b:f7:84:2d:7d:fa:59:17:39:bb:dc:aa:c1:
6e:44:28:d6:b8:ca:d7:24:cd:3b:76:44:df:29:df:
5c:e0:96:f4:c1:5c:ea:6f:30:75:74:f0:33:c8:47:
67:9c:04:b7:ff:63:db:f9:1b:45:6c:a5:76:bd:b7:
03:78:6e:7a:83:a7:11:46:01:ed:23:55:0d:01:e2:
fb:f5:c7:0c:1a:ba:36:93:cb:fe:85:b4:03:38:c2:
1a:11:67:9e:a6:56:77:1b:8c:36:28:48:d6:d5:23:
da:e8:39:3f:49:65:13:5e:b9:3b:a0:08:d3:f0:6b:
06:79:8c:31:2c:31:54:5d:7a:3e:9b:82:9b:00:79:
de:ce:af:c5:2e:ed:27:5b:f2:aa:8f:87:70:38:d3:
87:83:84:19:22:fb:6b:46:c1:b4:4c:53:94:9c:e7:
db:58:05:d3:53:f4:05:c2:2e:19:b6:1a:a4:a6:0e:
b8:8d:36:eb:95:92:33:e4:23:ec:97:20:84:29:54:
76:20:51:20:27:87:94:bb:c8:52:3d:ec:4f:f3:61:
9c:c8:20:d5:82:3d:ae:99:e7:aa:c3:6f:7a:03:c0:
51:68:25:40:4b:a2:2b:b7:17:00:26:f9:5f:01:fe:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0A:EE:FE:F5:7D:91:E9:F2:BC:19:0A:CE:70:99:77:F0:90:E9:52
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bf:3e:74:b7:16:1d:78:36:be:6d:be:89:63:47:8c:ac:a5:
90:43:a0:98:c0:db:05:b4:02:ea:5a:f4:56:91:05:eb:3c:8f:
b6:cd:34:14:05:15:72:39:65:b3:93:07:f4:c6:3b:c8:f8:39:
b1:5e:16:06:4b:37:62:2e:ff:c6:da:a6:86:66:46:aa:08:4f:
cc:8a:96:c2:db:3a:c8:3a:36:3b:0e:49:3e:e1:c8:f0:a4:88:
52:5a:37:c5:3e:2d:c2:e2:02:75:7a:aa:d4:af:b8:8a:36:1d:
5e:ad:a0:ee:5c:55:79:d7:fb:2d:92:74:d9:8a:e5:1b:8a:15:
df:be:e6:aa:10:21:19:7e:d9:d2:49:57:45:66:5c:91:19:5e:
6d:8f:00:c6:aa:54:10:3d:9a:91:35:1e:5d:25:5e:38:66:93:
66:24:5d:bf:9b:9e:dd:aa:ee:f0:4a:b1:c1:ec:fc:72:98:ec:
55:3c:52:53:34:35:c8:64:47:69:d6:db:91:a5:ed:b3:95:5d:
d0:99:7c:46:02:73:ae:b4:76:c4:90:f0:63:e7:b0:72:3b:e4:
64:61:72:8f:b0:15:2f:a3:18:ff:08:50:74:9f:25:85:35:8d:
69:7a:24:25:18:9c:49:6d:b8:a5:14:51:a1:a6:53:c1:95:ad:
51:73:f4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:05:34 2025 by rpki-client