Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
File: mdXL9__sUlSnHvex7fem12x1liU.mft (raw, json)
Hash identifier: GZPAAHNHpbmkiE5iBVINZ9YTWdZX41ol/UeaxN87v+c=
Subject key identifier: 69:C5:E0:AD:D9:FB:41:03:27:6A:D1:3B:EA:A7:6C:1D:DA:5D:02:2B
Authority key identifier: 99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
Certificate issuer: /CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Certificate serial: 0194C388055945D924F718E7CE1BB3239976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
Manifest number: 142B
Signing time: Sat 01 Feb 2025 22:00:58 +0000
Manifest this update: Sat 01 Feb 2025 22:00:58 +0000
Manifest next update: Sun 02 Feb 2025 22:00:58 +0000
Files and hashes: 1: mdXL9__sUlSnHvex7fem12x1liU.crl (hash: K/QmmTC4qd14hQwmM1zc+8VjluzkhhTYiDLYOhFGR0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:05:59:45:d9:24:f7:18:e7:ce:1b:b3:23:99:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Validity
Not Before: Feb 1 22:00:58 2025 GMT
Not After : Feb 2 22:00:58 2025 GMT
Subject: CN=69c5e0add9fb4103276ad13beaa76c1dda5d022b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:05:a4:8e:a7:9d:49:c5:8c:ab:a6:ff:6b:
f9:c0:93:18:9a:d5:fd:3a:41:55:42:61:4c:21:2a:
ae:5c:29:00:30:15:f0:d8:05:f9:b0:11:20:47:30:
65:d1:31:8b:6f:3d:48:5d:69:3c:6a:37:a4:58:d4:
7f:49:92:cb:49:fd:c8:58:77:8c:46:38:d1:39:fc:
b1:4e:32:51:18:b5:15:22:5e:ee:06:59:4b:6b:c4:
08:b2:c6:d3:fe:65:51:02:d3:cd:7a:7a:3d:87:ca:
ee:2e:81:fb:45:d3:a6:be:50:a9:73:21:f1:bc:38:
ef:49:71:53:63:30:8b:bc:5e:9f:8c:34:a8:76:65:
e4:8b:e0:07:04:7a:95:2e:f4:dd:68:d8:ad:26:75:
e4:f6:2c:a5:3b:67:5a:49:26:bd:02:d2:e8:88:12:
dd:7f:1b:0d:7c:2b:96:bb:1b:76:16:db:cd:8f:ba:
06:25:ba:e3:f5:ed:c3:40:c1:d3:b1:d7:f2:67:fe:
18:3c:2b:63:eb:4a:d6:a5:41:67:6d:b8:d9:e3:85:
50:31:83:90:74:56:5a:a0:b8:c7:2f:fc:16:32:18:
08:22:c5:ff:17:e8:d4:45:66:e5:3a:d5:40:48:df:
b8:ac:c2:a5:ba:76:f9:95:a8:8c:f4:65:44:4b:b7:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C5:E0:AD:D9:FB:41:03:27:6A:D1:3B:EA:A7:6C:1D:DA:5D:02:2B
X509v3 Authority Key Identifier:
keyid:99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d3:40:5d:07:0f:41:fb:7e:da:03:c2:bb:f1:7f:45:f4:ad:
ae:9c:9b:af:9c:5c:a5:20:87:45:72:75:5e:4e:53:c1:82:00:
2e:28:aa:8c:8d:24:c0:0e:f4:39:6a:7b:75:09:7e:51:32:3e:
8c:a6:68:c9:3a:24:a3:9d:fd:b7:71:46:7a:b2:ce:de:d5:ac:
9d:01:df:0e:23:f8:c8:a6:b8:51:53:a4:26:7c:47:59:0d:bc:
94:be:11:33:1c:10:5a:e7:c1:fc:86:6f:22:49:d0:68:d1:ae:
18:61:65:2c:0a:b0:69:0d:e6:20:d8:c1:6b:62:35:29:8c:cf:
25:72:0f:4c:39:8c:ec:0d:9f:d9:08:3d:d2:d7:ea:93:4f:d3:
4b:da:b7:3e:03:e5:2e:36:7e:42:5c:4a:75:5d:33:46:d3:1b:
7f:04:0d:11:e6:bd:5a:19:9f:40:5a:72:9e:d0:85:ab:a8:67:
fb:75:67:ed:87:d4:e3:75:eb:13:83:1c:c1:a8:8d:65:f0:ad:
31:a6:6a:fa:70:fb:f9:bd:6d:5a:3d:4b:88:75:ef:dc:1b:38:
4e:a8:91:d9:73:9d:ba:92:20:fd:44:32:6f:2c:5f:ee:0c:0c:
5a:6b:25:9a:45:5a:e4:07:f4:71:fb:86:d0:a6:dd:e6:f8:e2:
f6:76:34:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:42:39 2025 by rpki-client