Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
File: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft (raw, json)
Hash identifier: V/2cg5bFZifD2RW+DkNND7z1tT9LDiAVIvRIAJaCR14=
Subject key identifier: 59:51:F7:08:CA:DA:D2:51:30:63:97:87:77:A1:EB:5D:2E:32:AA:F8
Authority key identifier: 32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
Certificate issuer: /CN=325052b7a678faa097dcbe6547170c9152b46cf1
Certificate serial: 019653B6EBFCEDD6D89FD0C2BC2698297D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
Manifest number: 148C
Signing time: Sun 20 Apr 2025 15:00:18 +0000
Manifest this update: Sun 20 Apr 2025 15:00:18 +0000
Manifest next update: Mon 21 Apr 2025 15:00:18 +0000
Files and hashes: 1: MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl (hash: nVXAXIP7M4OYB4qN9rwaEtmoWcvURMnRTvX903uRgDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:eb:fc:ed:d6:d8:9f:d0:c2:bc:26:98:29:7d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=325052b7a678faa097dcbe6547170c9152b46cf1
Validity
Not Before: Apr 20 15:00:18 2025 GMT
Not After : Apr 21 15:00:18 2025 GMT
Subject: CN=5951f708cadad2513063978777a1eb5d2e32aaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:8b:01:b1:d1:4b:3a:8d:b6:ee:f9:81:90:
47:e3:95:80:2a:d3:cd:21:04:a2:ff:76:fd:fe:35:
4f:31:52:99:21:f4:8c:e8:ac:41:34:e2:e9:c8:ec:
64:3a:ab:85:ff:66:ba:97:72:05:22:f4:4b:86:96:
b4:57:aa:1a:10:97:9e:87:dd:ca:e3:fc:54:bb:6f:
7e:22:74:cd:7c:4f:f8:f0:fc:4a:ae:dc:85:b8:89:
24:d8:da:0f:ed:77:52:6b:3a:96:ec:0f:3c:5a:b6:
21:0c:38:31:49:28:b1:d0:1a:27:22:4f:d4:c6:ca:
4c:a8:17:23:d1:88:ae:af:7c:94:63:c5:ff:ab:1d:
19:7c:d0:eb:63:9a:bd:41:1e:be:e6:d3:08:b3:0b:
54:d1:8b:4c:90:84:71:6a:86:58:7a:af:69:7b:a3:
c3:93:9d:f8:e7:aa:e2:c8:1a:8f:67:8f:79:78:b7:
c7:a9:99:2b:85:32:81:7e:63:b9:29:d5:46:d4:74:
09:9c:dc:83:07:bd:e0:25:79:89:23:72:34:43:88:
26:9f:d0:95:55:3d:b3:de:a8:a7:cd:df:60:74:b1:
13:7e:f0:b7:58:4f:f6:e2:04:af:b2:79:08:ac:7c:
97:b2:cd:16:68:ba:32:cf:37:9d:2f:fb:80:ef:e6:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:51:F7:08:CA:DA:D2:51:30:63:97:87:77:A1:EB:5D:2E:32:AA:F8
X509v3 Authority Key Identifier:
keyid:32:50:52:B7:A6:78:FA:A0:97:DC:BE:65:47:17:0C:91:52:B4:6C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2fd023-e646-406a-84a5-bb6945a16fe7/1/MlBSt6Z4-qCX3L5lRxcMkVK0bPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6e:b7:e9:5b:97:e9:ee:4a:96:63:3a:39:9c:34:73:bf:cd:
2a:86:e6:90:88:dc:5f:ff:4d:f9:e1:bd:c1:89:ab:8c:a7:0a:
a0:5e:81:46:62:f8:d6:b9:91:c7:83:df:61:3e:6b:76:56:ad:
13:ad:ac:69:f5:4e:c8:dd:00:4c:e2:8b:92:31:8c:37:2f:9e:
61:87:44:18:ea:48:86:85:71:95:c4:2b:d4:41:63:1e:83:58:
ce:3c:c9:45:4f:41:d3:57:5d:e5:a8:ca:5c:01:06:a0:58:e0:
46:0f:0b:be:1a:74:1f:d5:e4:8e:23:d5:dc:b4:b3:48:cc:ba:
3a:0e:34:37:bf:fe:b6:d7:65:8a:54:8f:91:f6:0d:28:4c:f4:
a6:a7:7f:38:93:3f:07:5f:8a:fa:a9:fa:a8:e8:32:bd:42:8d:
f8:92:81:7a:f8:76:0c:1f:99:7e:7c:9a:d3:b7:ca:44:f8:76:
8e:50:7f:2a:ac:78:90:1f:e5:d9:71:c7:f4:3b:4b:91:6e:ee:
0b:37:60:87:f7:17:f8:08:23:48:1c:74:d8:0c:ba:e4:db:02:
33:6f:45:6d:b5:59:c3:5c:60:7f:2c:03:a4:20:e0:b6:62:c3:
3d:e1:3f:16:9a:16:78:fe:c6:c1:46:8b:2d:ac:8c:5d:7f:d8:
a4:f7:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:11:41 2025 by rpki-client