Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.mft
File: mlTioC3EzxKTf8ybLqE7M0GggGE.mft (raw, json)
Hash identifier: KUfDHyxkQvIzh+ZDRO5FL0+T/kC6zBiac9Hi54sTu3o=
Subject key identifier: 21:B9:7B:D9:6E:A4:B4:27:F0:AA:C9:CE:ED:BE:77:7F:DA:E9:9A:E4
Authority key identifier: 9A:54:E2:A0:2D:C4:CF:12:93:7F:CC:9B:2E:A1:3B:33:41:A0:80:61
Certificate issuer: /CN=9a54e2a02dc4cf12937fcc9b2ea13b3341a08061
Certificate serial: 019510C7F5AFB112E5F75208ACE886D8EF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlTioC3EzxKTf8ybLqE7M0GggGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.mft
Manifest number: 0AE8
Signing time: Sun 16 Feb 2025 22:01:34 +0000
Manifest this update: Sun 16 Feb 2025 22:01:34 +0000
Manifest next update: Mon 17 Feb 2025 22:01:34 +0000
Files and hashes: 1: mlTioC3EzxKTf8ybLqE7M0GggGE.crl (hash: ck8Z1SESp2amciGVBN7P29lfdG0DEuywhlHizOPigPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mlTioC3EzxKTf8ybLqE7M0GggGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:f5:af:b1:12:e5:f7:52:08:ac:e8:86:d8:ef:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a54e2a02dc4cf12937fcc9b2ea13b3341a08061
Validity
Not Before: Feb 16 22:01:34 2025 GMT
Not After : Feb 17 22:01:34 2025 GMT
Subject: CN=21b97bd96ea4b427f0aac9ceedbe777fdae99ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:37:47:d0:6d:c5:e8:b1:97:83:16:7b:cb:
ec:cd:cf:e6:93:50:e4:c6:d2:f0:24:93:7a:ba:56:
1a:9a:d1:0a:22:cc:4e:c6:9b:b9:7b:7a:3d:39:e9:
2c:d7:25:64:e7:ba:d8:37:57:68:ea:44:da:03:76:
4f:7c:fc:a6:fd:09:a1:63:e1:8a:9a:69:d1:8f:42:
aa:49:47:49:af:51:eb:eb:7a:91:a7:9e:19:42:f6:
5b:88:c9:bc:c8:8b:c1:01:3c:3b:00:4f:18:03:27:
85:41:a4:ec:9e:59:b4:1f:6b:f1:b7:eb:e6:29:ff:
ba:69:f7:08:58:fe:aa:ad:f8:e1:a6:ea:53:f4:61:
28:4e:12:d8:26:29:94:97:b3:ae:db:36:ea:8b:21:
33:6f:d7:bb:a4:b5:8d:53:13:e6:c3:4a:80:27:79:
cf:d5:a3:97:7c:45:0d:da:b4:5f:b5:22:ef:07:f2:
4a:8e:e3:4a:4e:f3:40:20:78:c7:f3:a4:33:a2:10:
94:ce:0c:01:c2:b8:fd:b3:cc:cb:26:c9:c3:27:ee:
ae:e9:51:85:e5:af:de:95:72:1c:05:b2:f1:6e:77:
63:d2:4d:3c:79:38:2f:2f:62:73:33:55:84:f4:b7:
90:1c:73:f0:02:1c:25:66:43:29:34:f7:18:2d:1e:
e5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B9:7B:D9:6E:A4:B4:27:F0:AA:C9:CE:ED:BE:77:7F:DA:E9:9A:E4
X509v3 Authority Key Identifier:
keyid:9A:54:E2:A0:2D:C4:CF:12:93:7F:CC:9B:2E:A1:3B:33:41:A0:80:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlTioC3EzxKTf8ybLqE7M0GggGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:bc:c3:bb:bb:43:61:11:93:ab:10:42:6b:71:93:ff:c8:
d7:d9:7f:d8:f1:b5:b8:15:38:40:25:ac:2e:91:0d:1d:0a:94:
6c:fa:27:c4:15:45:80:45:c9:6b:ef:b5:38:cf:5f:4e:24:cd:
2b:81:bb:ab:7d:d2:b3:b8:86:5c:9c:70:cd:07:5a:06:9a:ab:
ae:47:5b:e7:1c:68:90:b7:89:63:5b:1e:cd:4f:ec:02:69:b4:
dd:7f:7d:28:82:dc:95:16:01:c8:0c:00:b5:0e:b0:84:57:45:
3c:ee:97:80:0f:10:e6:bb:58:d6:d4:1e:b9:eb:ec:c0:b3:dd:
e9:ce:e4:1e:6a:d6:b5:85:2f:81:eb:be:c0:9a:04:d4:f6:ea:
a7:7e:ca:2d:0f:26:b6:72:35:9e:da:45:35:9e:14:fc:d2:7d:
de:69:5f:2a:be:a1:fd:41:07:79:3b:7e:db:ba:8c:ce:63:04:
e8:13:42:04:a6:f2:b2:a7:fb:d8:7b:cc:f5:59:06:40:d1:76:
37:eb:67:44:6f:22:6a:3c:7d:b2:40:95:e8:a8:c5:78:03:79:
65:c6:7a:fe:ba:7a:41:fe:ad:2c:ef:c2:1c:75:40:f8:4b:ae:
4a:a2:42:16:94:9f:a0:d5:ce:90:88:98:95:d7:db:d7:c3:52:
9f:fc:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:49 2025 by rpki-client