Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
File: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft (raw, json)
Hash identifier: QDhCGFCrrnl3GZlxenvW5Nx+53b5TgnnbbbAovlH1zU=
Subject key identifier: 2B:0B:29:F0:AA:8B:95:8E:50:EF:31:E2:DE:49:63:74:65:9C:C6:05
Authority key identifier: 31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
Certificate issuer: /CN=31fd401741e669e920b03c6c76aa3a7871403f54
Certificate serial: 0196C3148B6447B7BBD65BFD3684A959574C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
Manifest number: 039E
Signing time: Mon 12 May 2025 06:00:25 +0000
Manifest this update: Mon 12 May 2025 06:00:25 +0000
Manifest next update: Tue 13 May 2025 06:00:25 +0000
Files and hashes: 1: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl (hash: EBj16KjlSbdwGedKajCLKiPltjntO936IW9FzKBUaWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:8b:64:47:b7:bb:d6:5b:fd:36:84:a9:59:57:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31fd401741e669e920b03c6c76aa3a7871403f54
Validity
Not Before: May 12 06:00:25 2025 GMT
Not After : May 13 06:00:25 2025 GMT
Subject: CN=2b0b29f0aa8b958e50ef31e2de496374659cc605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:e9:20:0d:3c:97:d9:a8:00:4a:b6:e6:d8:
f8:83:16:cb:ae:08:6a:20:01:57:a8:ca:ac:28:c7:
c8:43:97:85:ca:d4:e4:be:31:8b:8b:d0:16:63:34:
80:f6:aa:5f:dd:16:89:c8:ad:c6:0d:c6:ec:3b:57:
9e:9e:74:ce:0e:49:52:d0:fb:db:00:8a:53:10:51:
10:cd:dd:05:51:71:0f:5b:8b:a2:e3:53:0f:e1:cd:
27:7f:40:5a:bc:ef:68:6a:c2:4d:f7:2b:98:95:b1:
46:f9:dc:4f:c6:c7:c6:2a:55:f9:cf:31:3d:b6:a4:
4a:2b:20:40:f0:ff:fb:3c:26:f7:20:b9:02:10:30:
83:ed:df:0a:98:0b:6a:a4:87:8d:7e:67:86:51:08:
8f:1e:5f:8d:1a:9e:9e:85:31:47:5c:71:22:6a:9b:
e6:14:a4:58:af:8f:a8:87:45:b4:06:87:fb:26:50:
e7:d3:d2:2f:61:e5:08:0e:31:05:36:22:90:0c:88:
73:14:58:b3:7e:99:80:de:65:46:8b:00:c9:bf:95:
6c:01:06:9c:22:1e:08:8d:93:57:86:0d:ee:52:db:
27:fe:f2:6b:10:bb:5d:d7:8d:90:1c:a1:18:86:bf:
33:7c:a4:03:27:a3:e3:97:04:6e:0d:21:22:f6:4a:
00:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0B:29:F0:AA:8B:95:8E:50:EF:31:E2:DE:49:63:74:65:9C:C6:05
X509v3 Authority Key Identifier:
keyid:31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3f:6a:50:e6:36:a2:42:44:ed:48:8a:c3:f0:0c:79:38:4f:
75:d8:ef:f0:74:bb:9c:31:4d:b3:93:cc:4a:2b:de:88:7b:12:
25:ba:dd:04:cc:47:0e:f8:6b:c7:fd:8e:af:62:9e:a5:7a:a4:
9c:6f:84:97:60:76:e7:9c:f9:98:20:08:27:4f:d5:9b:8a:1b:
3a:d4:03:49:87:1b:d7:f4:f4:02:4d:98:d7:e3:cf:ab:ac:ca:
91:09:48:ec:43:7d:9a:f4:df:37:b0:b9:54:cb:a5:30:0d:da:
5d:a7:67:98:73:fe:a1:a1:3d:5f:36:3d:b4:4c:1d:60:80:5c:
ae:ae:56:06:f5:d1:8a:89:51:13:45:d8:db:23:c7:f4:97:0a:
21:7f:69:ba:38:8d:6e:4f:a6:04:6c:dd:ce:75:34:f7:35:7c:
50:75:64:c9:5a:47:66:e6:33:46:81:98:bb:72:98:e6:e1:e3:
0e:67:94:76:78:37:27:2c:93:b3:77:98:d6:98:9e:a6:d2:ab:
77:98:be:53:1a:df:59:ab:8c:ee:c3:f7:e1:93:84:42:55:a7:
0a:4b:16:56:ed:e1:2c:f8:fd:7a:7c:11:95:66:12:ec:1c:53:
ba:0b:26:8e:d1:a0:28:d8:53:98:04:76:37:2a:b8:b9:d0:90:
cf:ff:fe:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:52:31 2025 by rpki-client