Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
File: mdXL9__sUlSnHvex7fem12x1liU.mft (raw, json)
Hash identifier: NzXFwQaxtUfJPcI3xkBF3c5OuU0sO009Jp3UJjZZHuc=
Subject key identifier: 95:51:C5:53:03:C2:05:FC:E4:77:6D:62:5C:E0:C1:6C:AB:7C:75:0F
Authority key identifier: 99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
Certificate issuer: /CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Certificate serial: 01964F6C8D20D1D9477CF50CB43C87E52949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 19:00:36 +0000
Manifest this update: Sat 19 Apr 2025 19:00:36 +0000
Manifest next update: Sun 20 Apr 2025 19:00:36 +0000
Files and hashes: 1: mdXL9__sUlSnHvex7fem12x1liU.crl (hash: mpt4bgSZNhonwIRnGjW3ofSErWlfW9yIYhEFA7bxawk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:8d:20:d1:d9:47:7c:f5:0c:b4:3c:87:e5:29:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d5cbf7ffec5254a71ef7b1edf7a6d76c759625
Validity
Not Before: Apr 19 19:00:36 2025 GMT
Not After : Apr 20 19:00:36 2025 GMT
Subject: CN=9551c55303c205fce4776d625ce0c16cab7c750f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:a3:82:86:2d:d3:dc:ba:57:10:c1:cb:c6:
27:23:d9:49:ae:8f:56:70:ba:0d:c5:d8:93:1c:64:
98:03:30:f6:f7:1b:9e:a8:e7:23:3d:cb:5f:cd:71:
5b:e5:36:de:86:e5:5e:26:f6:79:02:25:34:d7:71:
c2:c3:b6:45:f4:98:6e:61:2e:43:81:72:65:ed:6c:
2c:44:6e:32:a8:ed:ad:12:f2:b6:4a:03:0e:69:73:
08:a8:66:96:2f:09:63:dc:b4:66:27:ef:4d:02:64:
6a:78:1f:e0:72:54:24:8f:52:c4:8b:77:37:1d:32:
01:df:00:d0:e9:ea:ea:89:c5:52:94:d8:a1:cf:15:
eb:7e:34:d8:9b:d3:d4:23:d6:c4:45:de:eb:05:15:
82:b4:9e:1d:f2:30:02:1e:7f:a4:da:31:d1:29:94:
14:11:01:d3:52:ef:9b:7c:cc:2f:bb:8f:ce:1e:fa:
cf:ed:a2:f3:05:68:a4:df:bb:97:95:b2:a1:b2:e1:
1c:ae:94:64:d7:80:73:a2:52:a3:ec:d7:b7:86:dc:
06:18:bf:b7:f6:ae:28:85:5c:79:dc:52:4c:e3:61:
05:4a:24:ad:f6:30:ec:2d:81:97:4c:89:a3:4d:62:
2f:ae:fb:8a:ca:67:4d:0c:12:85:4d:75:49:6f:10:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:51:C5:53:03:C2:05:FC:E4:77:6D:62:5C:E0:C1:6C:AB:7C:75:0F
X509v3 Authority Key Identifier:
keyid:99:D5:CB:F7:FF:EC:52:54:A7:1E:F7:B1:ED:F7:A6:D7:6C:75:96:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdXL9__sUlSnHvex7fem12x1liU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5236e9-ff5a-4019-94d4-aeae6e3593a7/1/mdXL9__sUlSnHvex7fem12x1liU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:76:a6:23:1a:fc:30:21:1f:ef:ee:ea:67:19:ac:76:1d:59:
5f:e6:7a:f7:cc:f1:b1:94:3c:91:58:e5:ba:97:a7:70:e5:ae:
93:03:ba:2a:ed:0b:f5:79:69:d4:45:47:ed:4f:c9:81:8d:81:
d2:39:35:eb:ff:55:6f:2e:32:4e:9b:d0:2e:17:bf:49:ef:2f:
21:87:1f:2a:65:af:32:42:55:33:f5:dc:15:4e:08:fc:37:4e:
d3:4c:10:15:d9:8d:03:d8:e2:60:d8:d2:18:e9:7f:58:13:ac:
30:c2:f2:71:07:a4:5e:b1:46:3b:a4:ef:cb:fd:fb:26:47:1e:
cc:1f:c4:57:12:c5:85:0e:26:b9:ca:05:15:db:5a:09:9d:5b:
93:b2:ad:dc:cf:21:16:01:ea:b3:fe:f5:d5:eb:b1:bc:77:ce:
81:e8:3a:d5:d2:c6:16:1f:ff:cb:b6:02:c0:b8:1e:6c:a4:86:
e5:5a:38:db:36:e9:9f:76:4e:ec:86:e8:36:01:8e:11:66:4f:
72:7c:db:3f:77:a2:c5:f4:e7:9c:6f:ba:74:31:69:1f:72:0e:
a8:6d:a0:b2:0b:83:6c:dd:2a:86:37:6f:3b:28:aa:d6:90:88:
31:cb:9b:77:27:d7:c8:f9:ee:50:30:c6:5c:f0:c9:af:d4:3a:
4b:1d:a2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:21 2025 by rpki-client