Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File: mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier: DcOc7a3e438te5RVa3JByovn75dm2ZlZeBZYL2yIpxg=
Subject key identifier: FC:1D:4A:01:2B:0B:16:3F:9B:C2:A9:98:3E:96:BD:37:18:89:E0:06
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer: /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial: 0196760D1DBCD7C6DD53B3B1F4394B9D4B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number: 0EF0
Signing time: Sun 27 Apr 2025 07:01:33 +0000
Manifest this update: Sun 27 Apr 2025 07:01:33 +0000
Manifest next update: Mon 28 Apr 2025 07:01:33 +0000
Files and hashes: 1: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: Rm58doTs2SFg0tmFw1W3H6fJ8jNo52g2Mu1ofU5RMeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:1d:bc:d7:c6:dd:53:b3:b1:f4:39:4b:9d:4b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Validity
Not Before: Apr 27 07:01:33 2025 GMT
Not After : Apr 28 07:01:33 2025 GMT
Subject: CN=fc1d4a012b0b163f9bc2a9983e96bd371889e006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c6:5f:54:a3:df:7f:7f:d2:70:84:d7:7d:c0:
7e:f7:82:f0:06:9a:0b:1c:ef:10:dd:c2:24:21:4e:
03:5e:1f:24:c8:91:3c:df:80:0b:08:9a:d0:92:ed:
80:35:a8:cd:95:5c:31:9c:2d:67:6f:a2:d0:ea:8e:
f7:9e:f1:f5:b2:6b:e8:4f:dc:e6:26:4c:ad:be:ab:
8d:1a:d0:00:9d:6d:a9:88:c1:d0:42:ea:76:a1:1a:
42:d7:43:c2:69:58:b3:79:96:e2:10:43:67:fc:7e:
e4:b1:81:ad:9e:fb:c7:94:35:9b:27:8a:eb:2c:18:
5a:ff:91:44:20:1d:0c:09:0b:a2:2d:08:61:d7:91:
ea:e4:e0:e7:2d:47:1a:fd:e9:00:0a:9c:c2:84:20:
97:11:f9:11:32:5d:1f:0d:ca:cc:d2:7e:68:47:d0:
be:b3:7a:61:fe:90:c9:47:e7:eb:52:4f:6e:c2:49:
dd:fe:99:d5:82:99:85:1d:17:56:a1:8b:04:e2:5d:
fc:71:11:75:66:13:ce:28:fc:ed:3c:4d:3d:0d:5c:
88:3d:42:28:9f:ae:6e:45:53:f6:59:a1:f2:35:a5:
c7:1a:ce:65:38:32:f2:db:ab:41:5f:13:07:5e:15:
fb:7e:9b:fb:60:bc:21:6f:a5:68:ad:f3:62:9a:96:
56:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1D:4A:01:2B:0B:16:3F:9B:C2:A9:98:3E:96:BD:37:18:89:E0:06
X509v3 Authority Key Identifier:
keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ec:83:49:ab:ee:a2:33:76:22:17:01:79:46:04:f5:bc:41:
c4:5a:8f:bf:89:49:69:96:49:ad:0e:38:4b:10:78:21:e6:77:
66:c8:d1:c6:9e:01:ac:34:e4:43:85:8d:f5:82:fc:f2:23:a8:
f7:1f:2a:09:5c:30:bc:4c:bd:99:4c:0f:4a:97:24:2e:03:c4:
05:85:c5:ff:c4:c9:e4:8a:91:d7:18:e4:5e:b2:31:88:d8:31:
01:83:a7:14:27:89:79:a4:c3:1d:aa:4f:00:52:f2:b8:15:9e:
5d:eb:e0:a9:e9:a3:73:ea:ac:ce:40:8c:e9:1c:f1:bc:3d:4f:
64:57:41:e0:d8:c7:8e:57:81:a1:cf:59:3d:db:99:e3:d9:4d:
d7:97:47:f3:9b:45:9e:83:ac:b0:e8:9b:b4:08:b1:9c:7c:4b:
50:29:95:31:67:01:b1:07:af:7d:38:fb:07:6f:39:5d:eb:fc:
65:d7:7d:d4:dd:9f:34:d7:d8:c9:28:e8:25:ff:a1:d8:63:92:
96:9e:5f:d8:49:a5:69:57:9e:74:bd:5c:de:07:b4:1b:73:b3:
bc:56:64:28:85:f4:5d:d0:12:6c:64:cf:d4:c4:55:cb:e3:cc:
b1:a7:6b:26:2d:88:65:de:2a:18:20:d9:8b:f7:3e:ba:f3:d7:
3d:20:00:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:50 2025 by rpki-client