Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
File: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft (raw, json)
Hash identifier: 8LJck9nOgjmFUOiaSRwPHC9DPwVIoFvB5us/l/Qhypk=
Subject key identifier: 5F:48:D4:88:7B:6A:2E:9B:AB:16:55:71:F4:AC:63:B1:DA:D1:1F:43
Authority key identifier: 32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
Certificate issuer: /CN=325052b7a678faa097dcbe6547170c9152b46cf1
Certificate serial: 0194C3F58A4050DB18A99D62F5D3CA250454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
Manifest number: 13BD
Signing time: Sun 02 Feb 2025 00:00:36 +0000
Manifest this update: Sun 02 Feb 2025 00:00:36 +0000
Manifest next update: Mon 03 Feb 2025 00:00:36 +0000
Files and hashes: 1: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl (hash: O5eOsuGwVm+JT7+p2TB7ZOOGPc2x6Bd6fNoCdWFe4JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:8a:40:50:db:18:a9:9d:62:f5:d3:ca:25:04:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325052b7a678faa097dcbe6547170c9152b46cf1
Validity
Not Before: Feb 2 00:00:36 2025 GMT
Not After : Feb 3 00:00:36 2025 GMT
Subject: CN=5f48d4887b6a2e9bab165571f4ac63b1dad11f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:ef:28:c0:0e:5b:62:d9:e8:6b:e0:93:e7:
40:a6:5c:85:ad:aa:f2:e7:2d:0f:ba:5b:fb:b0:c4:
44:65:f2:1b:22:8d:fc:f0:84:9c:ca:49:3a:09:5b:
5a:25:d3:ca:00:b3:ee:33:3e:b5:10:d3:4b:dd:f7:
4e:e2:a7:93:fa:a2:74:55:53:b4:f9:be:7d:bd:23:
b0:68:81:05:8d:0c:82:82:9d:96:29:5d:c7:b9:bb:
53:40:b7:54:38:2e:d4:c3:af:c6:3c:ae:f9:61:57:
14:f3:e2:64:c3:7d:fe:8e:35:20:8a:9e:de:86:f8:
4b:1a:0b:87:e7:8d:ac:4f:84:c1:a6:dd:d5:af:4a:
e3:9d:35:7c:3e:8d:01:d3:f3:26:2f:20:fd:0d:c9:
0b:2d:bd:0e:72:58:75:11:0b:3d:58:3b:8f:16:ee:
4c:49:fe:89:ad:e7:7d:1b:99:5b:b9:06:99:02:78:
a4:44:b5:c4:a0:f6:80:f9:14:f1:fc:8c:c4:5a:91:
56:fd:aa:1e:c3:eb:19:5c:61:5d:8a:f5:ab:f1:25:
51:67:39:7c:2c:3f:71:19:02:8f:21:e4:3a:8b:bd:
35:c3:b1:69:aa:4b:62:4e:7e:ff:43:f7:5a:b5:c3:
53:2b:ad:9d:77:c4:03:8f:66:d5:d3:e3:22:5d:9d:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:48:D4:88:7B:6A:2E:9B:AB:16:55:71:F4:AC:63:B1:DA:D1:1F:43
X509v3 Authority Key Identifier:
keyid:32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:58:ed:86:d5:f2:9e:67:41:e1:11:8a:b8:3b:58:35:24:42:
b0:cb:1a:89:4d:5a:13:97:8a:00:e8:8a:39:d6:26:ba:ef:ae:
bf:6f:c5:dc:57:f8:f3:2a:91:be:59:cd:9c:b6:9a:c6:5b:fe:
12:1d:6a:34:89:c3:41:b6:a2:a8:11:a2:b0:ee:50:e5:38:d5:
9a:76:8c:fa:09:8a:80:82:78:30:eb:85:48:25:83:16:43:6f:
ea:40:42:4c:af:44:68:42:66:4f:b5:67:0c:96:f6:8f:c2:9f:
88:ce:70:52:f9:d2:cd:60:2f:66:c2:64:9b:10:c7:31:b2:42:
6e:11:29:3e:93:4d:0d:59:f9:66:c8:71:05:0b:2b:8b:ed:b9:
3a:77:eb:f9:2c:66:1d:42:ba:21:91:62:ad:30:2f:eb:b2:e7:
9a:a7:cb:4a:74:75:11:b3:70:d6:4b:54:d0:a8:aa:d9:96:68:
58:77:b5:5b:8b:a0:3b:b9:48:f6:4c:e4:88:28:d8:58:ea:33:
cb:63:8d:17:7f:05:4d:7b:18:18:f2:3f:57:aa:1f:bb:a6:8f:
b0:d7:77:fc:34:5d:d6:7a:0d:35:88:79:ee:1c:f2:f4:10:e4:
b9:08:93:e3:25:19:2c:ed:87:e5:0a:57:5a:e9:d9:d8:be:90:
e1:3d:4a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:58:31 2025 by rpki-client