Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
File: MWxm5C6ILUAfr6K_pCru56dEZ3c.mft (raw, json)
Hash identifier: okQrkryFPDZh8wUxHuRjDmo7vsUT018WovmF1zpnvl0=
Subject key identifier: 10:94:46:44:C2:BE:17:9F:DA:B1:89:00:47:0A:0A:9A:FE:F4:EC:E5
Authority key identifier: 31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77
Certificate issuer: /CN=316c66e42e882d401fafa2bfa42aeee7a7446777
Certificate serial: 019679E9852EEC26A3A489C7C76C74172DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
Manifest number: 1471
Signing time: Mon 28 Apr 2025 01:01:09 +0000
Manifest this update: Mon 28 Apr 2025 01:01:09 +0000
Manifest next update: Tue 29 Apr 2025 01:01:09 +0000
Files and hashes: 1: MWxm5C6ILUAfr6K_pCru56dEZ3c.crl (hash: TpAC609yOcDO4UjJMCzLUXaGxyVXx2ucHk8B2twxxg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:85:2e:ec:26:a3:a4:89:c7:c7:6c:74:17:2d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316c66e42e882d401fafa2bfa42aeee7a7446777
Validity
Not Before: Apr 28 01:01:09 2025 GMT
Not After : Apr 29 01:01:09 2025 GMT
Subject: CN=10944644c2be179fdab18900470a0a9afef4ece5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:86:27:1e:4f:c8:88:47:c5:9e:13:2a:da:
c9:7b:36:de:85:ec:3c:af:c5:43:2a:8d:5e:5d:56:
ed:4d:17:d4:b6:a6:43:3b:a3:53:47:a5:cf:72:86:
cf:9d:4b:63:bf:76:09:1c:de:8a:6c:b5:6b:35:45:
8b:93:5c:d4:5b:5b:08:41:5e:fa:db:76:66:83:8c:
30:c6:92:e7:a1:18:82:07:9c:d9:ce:10:2d:45:cf:
b8:a7:3e:a1:82:12:d6:f6:78:65:d1:69:f6:64:9d:
9e:9f:38:09:a7:4e:f3:00:31:8a:28:46:41:c9:a8:
a2:af:1b:d9:3b:fd:e0:3b:16:70:c8:df:f8:5d:6f:
b3:3d:99:23:18:ed:d6:1d:60:f1:c6:fd:d0:2b:c5:
46:dc:92:ae:4e:e3:10:cc:95:95:91:15:15:00:db:
2d:ea:b7:6d:bc:7e:b5:c1:e9:69:8a:51:b9:27:25:
f2:ec:99:12:81:26:3c:e1:e9:94:4c:91:b9:55:b7:
84:de:5c:36:a3:b2:92:29:34:ef:a4:60:66:92:11:
bd:a7:21:c9:5a:f4:94:76:99:75:8d:35:74:fc:3d:
b6:5a:ec:3b:68:c7:a3:91:c8:5a:c4:8f:3b:50:cc:
74:fa:2e:f1:63:11:4b:2e:67:33:81:81:01:e0:d3:
d4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:46:44:C2:BE:17:9F:DA:B1:89:00:47:0A:0A:9A:FE:F4:EC:E5
X509v3 Authority Key Identifier:
keyid:31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ce:cc:58:5f:56:21:bd:d0:a6:d2:dc:3b:90:ec:d6:16:0c:
fd:b9:0b:d3:69:89:b0:61:aa:ed:11:02:a2:51:99:91:16:a3:
60:f8:1e:5f:73:72:1c:09:31:29:1b:74:47:97:49:c0:e4:5e:
f1:19:a3:c8:e2:12:d1:43:25:39:e1:36:ef:ca:6d:cb:6e:bc:
d0:65:0a:19:27:8e:93:ea:77:0b:c8:07:e0:7f:f9:56:9d:bd:
59:9a:a3:41:45:f5:b1:d1:b0:97:84:24:4d:04:4e:00:09:70:
b7:57:76:43:9c:9f:8f:60:0f:90:49:0c:ff:d7:c5:25:05:e8:
2f:1c:18:4d:02:ba:4b:a4:34:2c:6e:bb:ee:96:1d:af:2b:af:
04:b0:11:ce:4c:a8:36:e3:0e:ea:59:65:07:f3:93:6e:ce:79:
3c:a7:c1:c1:74:bf:f3:22:db:7d:01:2d:53:b5:ae:10:6a:9d:
12:33:88:7a:15:f2:c0:68:15:eb:41:f9:0b:73:1b:c3:cf:04:
c7:8d:6d:5f:9c:d0:77:26:67:14:f5:15:17:9b:1c:5e:29:ef:
57:36:58:97:e7:51:e3:ac:ff:71:8d:59:06:b1:bd:61:75:a8:
d1:ca:26:fd:b2:41:3f:2a:41:87:6f:cd:73:49:c1:0d:7c:c3:
61:c8:80:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:27:14 2025 by rpki-client