Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
File: MobxwgXuMYfirBpKW8BJ80Sf9mc.mft (raw, json)
Hash identifier: EPmuQjplApG6be0l2gMRR70lDtr4E/gJk6HUaAK4iQY=
Subject key identifier: 26:48:36:F3:37:89:55:BC:D1:2B:84:20:35:93:1A:49:66:9C:8C:49
Authority key identifier: 32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
Certificate issuer: /CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Certificate serial: 0196523656C05D521464ED62A3FBFC93A130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
Manifest number: 11CD
Signing time: Sun 20 Apr 2025 08:00:14 +0000
Manifest this update: Sun 20 Apr 2025 08:00:14 +0000
Manifest next update: Mon 21 Apr 2025 08:00:14 +0000
Files and hashes: 1: MobxwgXuMYfirBpKW8BJ80Sf9mc.crl (hash: DbOdgYgJaXg45m2L7SzknzBCOv2X+d0f0WDBWsbdGiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:56:c0:5d:52:14:64:ed:62:a3:fb:fc:93:a1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286f1c205ee3187e2ac1a4a5bc049f3449ff667
Validity
Not Before: Apr 20 08:00:14 2025 GMT
Not After : Apr 21 08:00:14 2025 GMT
Subject: CN=264836f3378955bcd12b842035931a49669c8c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:7d:af:51:b2:c3:81:76:de:0e:15:01:10:
e5:56:22:ef:04:5b:e8:cc:f3:a8:1d:aa:de:c2:a4:
38:e2:3f:c2:be:01:8a:10:08:b2:bc:66:fe:f8:55:
5c:32:58:07:2a:4a:34:e7:63:cb:31:2f:91:97:7b:
ec:ad:ea:7f:c0:77:14:4a:c5:13:6f:51:ab:62:1b:
44:57:38:01:b8:82:46:c0:26:c8:f7:e3:3e:68:ba:
bd:8b:df:1f:df:36:d7:76:55:e4:d1:1e:a6:4c:5e:
e1:50:30:81:58:37:b4:a1:c3:0f:0a:9c:cf:04:1b:
3a:9e:76:16:71:3c:a8:6d:f7:a3:02:97:05:bc:b4:
4b:ff:69:d3:de:b0:d0:3e:38:a5:96:cf:47:f7:84:
ed:10:9a:df:5b:01:8f:0f:ab:ed:e4:34:17:1b:97:
94:46:6a:94:c7:3b:21:17:90:b9:46:9b:22:63:01:
82:a8:a7:e6:ba:d8:51:05:5a:3b:76:3e:6c:0c:cb:
a0:10:8e:d6:5d:3e:40:b9:74:fc:00:7c:88:2c:a5:
e5:6c:ab:7c:0c:02:87:3c:5c:3b:75:9c:48:8d:0f:
21:37:4c:37:32:2f:34:10:98:c1:37:5a:d4:50:68:
c1:24:c4:a4:db:72:ca:26:9c:12:bc:6e:8c:43:6d:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:48:36:F3:37:89:55:BC:D1:2B:84:20:35:93:1A:49:66:9C:8C:49
X509v3 Authority Key Identifier:
keyid:32:86:F1:C2:05:EE:31:87:E2:AC:1A:4A:5B:C0:49:F3:44:9F:F6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobxwgXuMYfirBpKW8BJ80Sf9mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2bcfc5-3bc9-477f-bc42-324ef34ebea2/1/MobxwgXuMYfirBpKW8BJ80Sf9mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2c:8b:92:aa:5e:24:86:4d:d1:c9:bc:1f:35:55:e8:4b:12:
1a:69:3f:47:45:7f:bf:c6:47:64:62:84:f2:a5:6e:42:c8:04:
6b:16:d4:da:a5:1c:de:ca:25:e5:38:4b:cd:6d:2d:ed:43:cb:
c9:35:f1:74:19:0e:d2:74:7a:a3:0a:83:39:2e:1c:70:14:97:
8d:a4:60:cb:e3:d4:d7:a7:77:ea:9a:0e:8f:ff:2e:89:f6:19:
ab:44:d4:ac:0f:29:a0:94:b2:8d:24:ab:cb:3f:52:b2:37:aa:
ed:d0:bf:55:03:f6:3f:29:20:19:75:1d:7f:96:29:bc:05:f0:
ff:d4:53:63:f1:73:e1:44:76:dd:8b:a2:4c:08:47:07:ed:d9:
f2:9d:57:b5:49:49:bf:8b:4c:1f:12:a7:82:27:f6:8f:b3:00:
58:d5:7e:4f:ec:99:12:19:ca:56:ba:27:7e:16:34:09:68:b7:
87:8c:a5:d4:2b:91:e4:aa:e3:bc:99:78:f7:f4:88:3c:a3:8d:
f2:18:d4:40:d4:79:d0:93:c9:14:36:24:23:e7:7d:c2:61:11:
da:88:ee:a1:a1:dc:f8:d7:b0:45:07:d3:4a:1b:ae:3f:c8:15:
e4:70:f9:1e:7c:02:5c:78:6b:c2:89:06:3f:53:7a:78:10:3a:
5b:e7:c1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:41 2025 by rpki-client