Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier: xG2TarOdGRxWVYJZhk6GgPDWSeLUTOJjUaEUXJAxFRk=
Subject key identifier: 5E:E4:E0:F5:FC:A3:B5:70:44:47:70:41:7A:94:B2:4D:8E:95:2F:94
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial: 019689CA0BC79A240678523DD6DF6586A238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number: 0BFE
Signing time: Thu 01 May 2025 03:00:41 +0000
Manifest this update: Thu 01 May 2025 03:00:41 +0000
Manifest next update: Fri 02 May 2025 03:00:41 +0000
Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: FXYh8RPH+dIs0pBZq/jlRHuyLoHqdDJwP6f5LbyfUOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:0b:c7:9a:24:06:78:52:3d:d6:df:65:86:a2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Validity
Not Before: May 1 03:00:41 2025 GMT
Not After : May 2 03:00:41 2025 GMT
Subject: CN=5ee4e0f5fca3b570444770417a94b24d8e952f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:5e:d0:03:43:dc:70:55:5a:7f:57:54:0d:
ef:3c:35:bf:7c:e7:25:26:90:3f:de:2b:85:16:15:
77:11:25:6d:0e:7b:38:ae:10:b9:91:71:8c:37:48:
08:31:98:17:3e:52:39:da:20:99:3a:08:e0:73:a5:
b9:d4:54:ba:f2:7a:90:f3:1c:97:fd:10:4d:75:94:
86:b2:05:20:81:32:1f:b5:59:0f:2d:30:28:69:7e:
6b:68:c2:45:91:23:5a:cf:46:48:c3:28:f7:63:96:
49:44:f6:44:49:79:27:e3:5a:3e:cd:a6:39:6d:02:
4f:dc:92:6b:39:8c:a6:2a:7c:58:10:59:78:0f:54:
55:46:bb:f9:51:09:b5:b7:8f:ba:de:9c:0b:4c:b0:
36:b4:0b:89:82:7d:e4:57:a0:0c:6c:5f:28:1d:9c:
5d:8a:3e:5d:aa:a3:9d:49:b6:14:a9:46:54:16:f7:
1f:43:d0:3b:a8:ba:88:7a:7c:de:4d:80:38:bf:fb:
a8:81:91:92:f4:c7:d7:be:9a:7b:b0:b2:c6:6a:ba:
bd:03:68:02:64:5b:97:88:22:7a:39:eb:c5:80:ac:
8c:b4:b4:28:c0:08:59:08:1b:97:1a:a4:28:c7:e0:
e4:8e:fb:74:50:e4:05:d9:ae:4f:1d:84:55:f7:9b:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:E0:F5:FC:A3:B5:70:44:47:70:41:7A:94:B2:4D:8E:95:2F:94
X509v3 Authority Key Identifier:
keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:24:7e:af:4f:1d:75:b5:8f:c8:e6:07:f1:17:f4:b7:c6:b2:
94:11:5d:9d:81:35:6c:da:b2:a3:d4:ed:1b:77:8f:c4:e0:a2:
ec:e7:a2:1c:c4:44:b1:e1:46:4a:6a:8b:23:1f:eb:66:91:1f:
5c:ec:6e:cd:22:80:1f:93:59:fb:c4:e9:58:26:0c:b3:7c:b8:
f8:7b:07:70:e6:c9:f2:89:25:2b:82:e7:a5:22:1d:a7:a6:94:
cd:2b:d0:1e:02:45:31:42:37:5e:0a:01:73:4d:0f:bf:be:33:
0d:5d:65:c6:5d:3b:9b:d0:5a:90:13:b7:d1:35:ff:ee:48:ee:
cf:b2:f4:59:03:11:d6:c2:38:56:0d:1e:8e:ca:d5:a0:e1:cb:
fc:05:61:cd:8c:a7:16:40:b2:f0:f2:74:69:43:b9:bf:e5:d5:
3e:f0:6e:89:2c:b1:5e:95:2f:45:80:57:48:0f:77:01:c0:80:
d4:9d:cc:7a:14:40:f4:dd:a8:41:d0:ac:95:28:02:70:38:12:
a8:0a:3c:30:13:07:bb:2d:76:39:f0:30:4a:ea:f7:a1:12:7b:
4b:04:95:7d:2e:7f:03:f3:10:1b:78:b9:64:52:3d:74:cd:dc:
bd:e2:62:16:be:da:45:88:99:43:41:a8:62:8d:66:c3:a3:0f:
ef:66:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:26:49 2025 by rpki-client