Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
File: MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft (raw, json)
Hash identifier: X8VtKwJ6W1Tsr0m/QWrqpAa7Ivh7v1cCNoNsP8otIB4=
Subject key identifier: BD:B5:9C:61:0D:4E:C5:5F:FE:13:DE:BC:FB:3E:1A:1D:A0:AA:77:A4
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Certificate issuer: /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial: 019651FFC9E766438D65C6DE902CC127F9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 07:00:39 +0000
Manifest this update: Sun 20 Apr 2025 07:00:39 +0000
Manifest next update: Mon 21 Apr 2025 07:00:39 +0000
Files and hashes: 1: MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl (hash: iX4kR7WqqSehk7Rb4YOSEjt2a08VsWTjOs2a5fGrDhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:c9:e7:66:43:8d:65:c6:de:90:2c:c1:27:f9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Validity
Not Before: Apr 20 07:00:39 2025 GMT
Not After : Apr 21 07:00:39 2025 GMT
Subject: CN=bdb59c610d4ec55ffe13debcfb3e1a1da0aa77a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:04:24:cc:9b:22:dc:b9:55:f0:e2:03:89:
a7:a8:d4:43:f0:56:6e:c3:84:12:c1:fe:e0:12:5a:
13:ce:73:6e:69:95:4c:19:0c:65:9a:1f:f7:e6:bd:
c2:73:ee:db:7e:c2:46:be:d7:63:5a:63:30:1d:84:
d9:93:ea:d2:2b:14:7f:ac:02:07:76:62:f7:67:3f:
58:74:bd:db:31:12:98:7f:14:7a:47:5f:7c:97:2e:
21:37:46:92:42:1f:3d:62:11:72:8a:e7:f5:46:67:
29:b9:0b:15:09:ed:d0:bc:36:12:a4:45:16:e4:6b:
8b:4a:65:ef:ff:c7:e5:14:d7:cb:c1:00:7f:23:ca:
1d:65:43:e4:1d:56:5e:58:82:de:3c:33:0a:a5:5a:
25:e6:27:17:59:3c:46:10:a5:e6:13:12:bc:b1:b6:
07:90:53:97:6e:7c:9b:5f:f2:4a:c2:9b:c4:6d:24:
08:62:61:81:97:e4:60:21:18:95:28:70:c0:8f:a6:
c3:c7:ca:0c:25:a8:09:17:f6:da:e8:3f:3d:e1:09:
2d:2e:d3:b4:d4:50:c0:a3:11:69:9c:87:64:64:c7:
61:b4:d9:16:b7:ca:d0:17:4f:89:fc:43:9b:bc:24:
3b:7c:18:7d:08:6c:b3:8f:af:fc:66:3d:d7:dc:f8:
9e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B5:9C:61:0D:4E:C5:5F:FE:13:DE:BC:FB:3E:1A:1D:A0:AA:77:A4
X509v3 Authority Key Identifier:
keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c4:90:de:55:d6:95:ef:24:d8:34:bf:38:ca:8a:d0:40:76:
1f:3d:6d:3f:8a:47:f3:98:0e:7c:fc:57:a0:d4:a4:40:85:ac:
59:70:39:9e:15:86:9d:f4:3e:82:f7:06:97:5a:01:69:7f:50:
19:fa:cb:ef:df:50:f5:25:e5:f5:c5:1e:dd:2c:41:bf:7e:0b:
f8:a8:aa:6d:6f:4e:d9:6d:c6:04:37:42:bd:0f:12:a3:82:90:
64:5e:a9:72:0c:b6:07:51:e3:c3:fc:7d:5d:1a:a2:68:0b:d5:
83:38:17:06:89:4d:58:98:2d:5a:22:77:18:be:20:e8:ba:06:
f8:dc:aa:56:76:16:6c:51:1f:45:22:ef:b4:7e:41:aa:84:2c:
16:f3:0a:f8:14:47:7b:26:f1:80:d4:c0:13:c2:ac:02:2b:b5:
83:8b:ae:20:09:1b:e2:92:a5:88:d5:f4:ab:f1:8f:33:15:12:
cb:48:dd:bd:77:83:37:b8:42:6c:8e:ed:1c:99:05:a1:a1:49:
f0:47:ff:ec:16:51:2a:14:54:d8:1d:6a:3b:b1:c3:d3:3f:28:
09:0e:59:4a:5b:f8:7a:a7:24:8e:90:81:3f:d8:e0:c6:1d:89:
fa:6e:9f:ac:14:0a:f4:84:5d:6c:63:d4:29:d7:ac:1d:5f:09:
b6:3f:f9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:08 2025 by rpki-client