Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
File: MlPNw--1IdnV5wqcxeRxsBWGA2o.mft (raw, json)
Hash identifier: x8QMKF5XTfuxfXxtIU31y6oVRwSLpTaTVZ9GmgDvWww=
Subject key identifier: 70:5B:CD:81:B7:C4:93:50:35:02:E8:D5:4A:E4:B1:3F:58:26:38:82
Authority key identifier: 32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
Certificate issuer: /CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Certificate serial: 0196E7FCF6F8E6BE94016B8C2FB851729A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
Manifest number: 086E
Signing time: Mon 19 May 2025 10:00:37 +0000
Manifest this update: Mon 19 May 2025 10:00:37 +0000
Manifest next update: Tue 20 May 2025 10:00:37 +0000
Files and hashes: 1: MlPNw--1IdnV5wqcxeRxsBWGA2o.crl (hash: mG2OJtukdeZhQ+kRCPK13QTmN1suLMMVZ9fTMslnu68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 May 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e7:fc:f6:f8:e6:be:94:01:6b:8c:2f:b8:51:72:9a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3253cdc3efb521d9d5e70a9cc5e471b01586036a
Validity
Not Before: May 19 10:00:37 2025 GMT
Not After : May 20 10:00:37 2025 GMT
Subject: CN=705bcd81b7c493503502e8d54ae4b13f58263882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:46:b8:61:cd:76:ac:13:12:30:6a:bb:d9:
d0:46:01:de:6a:25:bd:14:fe:4f:c6:0f:b8:12:c4:
96:aa:fc:47:47:96:bb:b1:8e:30:69:a0:37:95:1e:
b7:13:40:ee:5c:9a:6d:6f:87:a5:bc:18:ae:58:a9:
9d:90:4e:ed:fd:73:b8:0c:5a:a9:e7:5a:bb:b2:70:
17:d7:bf:08:02:c3:5d:b3:f6:8c:11:ae:ca:7a:ba:
94:8d:5e:65:a0:e9:1d:15:5d:c3:d9:50:82:15:7d:
95:e0:91:a1:2f:58:49:9f:93:74:b3:b9:8d:34:3b:
0a:85:b0:4a:cd:79:a2:f8:a7:b4:33:9b:47:86:a0:
d8:d8:d7:02:46:ec:19:03:80:4b:4d:09:7e:80:6f:
9d:90:d2:d8:b6:80:b3:9c:ce:05:cc:30:81:cb:15:
ed:83:1a:80:11:07:fb:fe:df:cd:17:23:95:7b:36:
68:58:e2:c1:f9:3d:e8:67:fe:4e:01:c8:1c:26:6a:
f6:e4:77:4b:70:8e:11:e0:0d:e0:f5:23:8b:08:ac:
b6:8b:6c:88:5e:1b:14:47:52:fc:c9:5f:f9:c8:6e:
78:b1:4a:1c:c5:ce:cf:24:d5:8f:66:58:a7:18:cb:
34:a8:e7:9b:4c:14:93:02:65:ae:27:64:95:8b:c1:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5B:CD:81:B7:C4:93:50:35:02:E8:D5:4A:E4:B1:3F:58:26:38:82
X509v3 Authority Key Identifier:
keyid:32:53:CD:C3:EF:B5:21:D9:D5:E7:0A:9C:C5:E4:71:B0:15:86:03:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlPNw--1IdnV5wqcxeRxsBWGA2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51a115-de86-4407-a963-1c5c20d13ef8/1/MlPNw--1IdnV5wqcxeRxsBWGA2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f3:a6:b2:43:14:ac:30:ca:fa:9a:00:ac:aa:3c:fb:df:d7:
54:8a:51:f2:2f:a6:e0:84:8c:d1:60:83:7c:75:70:94:07:5e:
c8:82:b5:c4:6f:76:f8:5d:82:7d:6b:bf:e1:ec:9b:74:25:67:
e8:2a:b7:07:1c:ff:23:73:52:c2:25:03:a8:4a:7c:36:13:1b:
04:50:62:ab:f5:2b:c4:21:8a:24:1a:dd:fd:6c:9d:b1:30:98:
c1:29:e5:5b:95:d5:35:3b:8c:03:bc:e7:35:91:8c:04:97:fb:
76:c5:a5:55:89:6a:71:0f:b2:9c:e8:ca:c6:28:db:5b:f6:17:
91:80:3d:08:01:1e:22:e6:2d:62:73:3d:4f:03:2e:ba:09:00:
b5:23:b9:bb:1a:aa:06:8a:75:f9:48:ee:e0:b4:f9:03:4f:1a:
33:66:7c:35:1b:fd:51:b0:9a:ab:30:55:59:d6:95:e5:7a:8b:
cc:da:cc:ce:9e:71:f5:18:d3:ad:77:48:68:1c:62:b7:b3:2b:
79:b4:39:8f:d2:a4:1a:9e:77:a1:d9:26:9a:c0:bb:74:57:bd:
d0:19:a5:cf:95:63:5f:82:ac:f9:95:35:e6:2f:e3:26:05:54:
6c:92:a5:32:a0:be:57:f3:a4:f1:65:95:a4:cb:fc:b0:23:f9:
9a:eb:7c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 15:56:59 2025 by rpki-client