Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
File: 5b-MGBsoDj0oKNobJHe5ECNVlVo.mft (raw, json)
Hash identifier: 0loOm0WBdB0BLhG/BvqD3SWXlwp6eXt9SWJpT8A165o=
Subject key identifier: AD:4F:7B:3F:7D:77:35:B8:FD:26:20:46:E5:8B:2E:9F:F3:BB:75:C6
Authority key identifier: E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
Certificate issuer: /CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Certificate serial: 019510FE23B364C70EA3910A44B3A8A034D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
Manifest number: 133D
Signing time: Sun 16 Feb 2025 23:00:45 +0000
Manifest this update: Sun 16 Feb 2025 23:00:45 +0000
Manifest next update: Mon 17 Feb 2025 23:00:45 +0000
Files and hashes: 1: 5b-MGBsoDj0oKNobJHe5ECNVlVo.crl (hash: iuSkVjvUt8qEncoxVxCSXGdWGck9HFLYC8ERUJPMt3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:23:b3:64:c7:0e:a3:91:0a:44:b3:a8:a0:34:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Validity
Not Before: Feb 16 23:00:45 2025 GMT
Not After : Feb 17 23:00:45 2025 GMT
Subject: CN=ad4f7b3f7d7735b8fd262046e58b2e9ff3bb75c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:00:a4:1b:55:8b:83:98:2c:02:68:70:74:a1:
b9:96:57:42:3e:fe:03:ae:e8:07:d5:4c:9e:b0:f5:
f7:4c:49:04:5a:7f:e1:32:59:fb:0b:63:35:2c:25:
2d:6a:89:21:56:a5:3f:71:c1:fb:85:ae:33:21:dd:
8c:79:a7:3d:7e:5f:88:16:e3:54:c9:d5:2e:01:d7:
6a:c8:ea:2f:51:b1:5a:4f:f0:7f:dc:2b:5d:53:97:
3d:85:87:3e:c0:8d:76:20:37:a9:d8:41:0a:6e:da:
11:00:00:fc:bb:61:c3:94:00:58:55:4b:8b:c5:96:
de:52:7a:b1:e1:15:d8:f9:4a:87:46:cc:f2:f0:be:
16:ba:86:a5:a4:a6:48:5c:33:6b:8d:86:a3:ff:3e:
74:79:16:1b:90:53:52:6c:2b:c4:a3:59:59:4a:53:
f0:a6:bf:72:67:a0:04:4a:76:ed:a7:fb:f2:9d:a3:
2b:cf:98:75:ff:ff:0b:15:9e:f9:09:d0:01:95:25:
d7:7a:5c:f3:33:18:c8:92:a9:b3:c5:20:ec:46:33:
66:66:98:51:ae:a7:14:19:f4:ce:8f:c1:b7:d0:13:
dd:4b:35:c8:e9:0a:f7:32:3c:6f:35:2f:ce:0d:5a:
e9:5d:eb:b6:35:27:c2:d0:8b:7e:3c:65:83:04:35:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4F:7B:3F:7D:77:35:B8:FD:26:20:46:E5:8B:2E:9F:F3:BB:75:C6
X509v3 Authority Key Identifier:
keyid:E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:76:7a:6d:f1:16:23:46:bc:3a:79:3c:72:32:88:f6:a5:19:
b4:bb:74:c6:90:1e:9f:b2:0a:b3:ba:a5:f2:27:3a:bf:a8:65:
95:ac:68:0f:48:47:aa:fe:75:01:e7:eb:0f:c9:7a:bd:1c:c9:
ee:90:46:e2:1d:d3:b8:61:6e:a3:08:39:b7:a5:03:41:8e:13:
e2:d7:72:49:2e:d3:0b:a5:cc:91:03:2f:47:c2:c4:08:0e:ca:
39:09:92:1f:ce:9d:da:29:27:f9:fb:79:0d:3a:b3:76:6e:0d:
62:41:09:fe:3c:d2:36:8f:ee:37:eb:83:ff:8b:1a:45:82:e7:
79:32:e3:30:71:71:35:b7:89:25:29:6c:10:55:fe:67:99:23:
aa:69:2d:87:74:be:c1:07:ac:bd:8f:f1:d2:4c:09:b0:5f:22:
f7:e6:71:d9:84:16:49:a4:a6:cf:8f:d0:f4:cf:19:23:82:54:
17:47:39:ff:30:5b:3b:49:5e:1a:42:d4:e0:cb:48:c0:66:73:
33:1f:00:ea:dc:57:d9:7d:b8:7c:f3:84:37:ac:37:a5:dc:02:
c3:93:47:c2:18:6c:83:26:71:ef:bb:98:87:34:d7:ae:b6:69:
64:0b:17:45:fd:5e:09:b7:58:7a:20:58:3f:6b:34:90:4d:11:
8f:9f:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:20 2025 by rpki-client