Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
File: MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft (raw, json)
Hash identifier: HYJNQO3ILwfKNbwCJI1JpQPhJ9EkbQL0EHweLNf57P0=
Subject key identifier: 8B:15:B9:F0:9E:C1:D7:72:1F:D1:A8:05:72:4A:6F:50:6C:2F:F9:CA
Authority key identifier: 31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
Certificate issuer: /CN=31db0f883cf94491451e908c6e682ace36b13602
Certificate serial: 0196C8047B0BC4DAD482D75A67DB5C477232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
Manifest number: 0749
Signing time: Tue 13 May 2025 05:00:58 +0000
Manifest this update: Tue 13 May 2025 05:00:58 +0000
Manifest next update: Wed 14 May 2025 05:00:58 +0000
Files and hashes: 1: MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl (hash: VinA7JHNKHFm65uLdq2pRA4PkPuzJEZsem7RoDYqquk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:04:7b:0b:c4:da:d4:82:d7:5a:67:db:5c:47:72:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db0f883cf94491451e908c6e682ace36b13602
Validity
Not Before: May 13 05:00:58 2025 GMT
Not After : May 14 05:00:58 2025 GMT
Subject: CN=8b15b9f09ec1d7721fd1a805724a6f506c2ff9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:e8:d1:78:bb:20:05:0f:ac:5e:d8:6f:c3:
ee:1e:62:66:c9:ee:fa:c2:1d:00:d7:00:1c:39:64:
af:dd:c5:be:18:5b:12:c0:c3:49:50:10:f3:3d:4f:
d1:b0:12:38:a5:1a:cf:66:db:f5:5f:f4:1b:54:ff:
95:79:59:32:47:04:bf:57:03:7d:d3:68:5b:ca:fa:
6c:03:d4:1a:c2:a2:0b:42:bb:3d:92:5d:e9:e7:b9:
c7:4a:d8:a6:16:53:8a:dc:2c:f8:3b:90:13:03:f3:
c7:fc:d3:5a:aa:d1:24:68:f3:3c:fe:9b:24:0e:0b:
60:e9:3b:11:96:86:bd:d6:b2:4b:59:27:60:47:72:
ab:4c:8c:d6:8b:b4:77:ff:6b:98:9e:21:03:cd:57:
fe:01:af:3a:fc:71:88:12:3a:1f:8f:59:a1:53:fd:
40:4e:80:7b:6b:16:f2:40:ca:df:98:f3:5a:ff:21:
82:53:db:25:54:00:e1:ac:d9:54:62:56:26:94:f3:
8b:f3:13:56:52:9f:6d:c4:dc:99:4c:bb:0b:fe:6c:
86:b9:50:01:b4:07:57:cd:79:72:65:0e:73:e0:53:
b7:42:bb:1e:00:86:05:6b:94:00:c4:b4:62:99:2b:
d9:4d:fd:1f:8a:00:49:f3:cd:d5:01:05:50:56:50:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:15:B9:F0:9E:C1:D7:72:1F:D1:A8:05:72:4A:6F:50:6C:2F:F9:CA
X509v3 Authority Key Identifier:
keyid:31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:87:eb:a1:2c:b4:c2:f4:5f:8a:94:f6:1d:fe:ed:07:e2:e0:
24:e5:8b:2b:e5:15:2e:e8:cc:4c:ce:71:d0:f3:e5:a8:50:08:
89:f5:ea:6e:b5:f7:8e:c8:c4:81:bd:3c:a0:b0:cb:46:7b:02:
6b:1f:c3:2d:5f:85:43:20:47:cc:ec:56:8d:3d:4a:ac:22:2b:
62:6f:e7:7a:6d:46:9f:66:4f:f2:62:2e:2f:31:e0:a3:e5:48:
d7:c0:bd:58:4f:89:b5:5d:0f:fe:1e:df:f3:16:41:f7:c4:08:
56:4f:45:0a:be:71:9e:44:fe:03:7d:7d:5c:b8:ad:7b:9a:d7:
74:85:01:a4:08:89:4f:7e:84:95:05:6b:62:0f:56:a7:2a:ad:
db:b1:bf:cf:7c:36:97:56:bf:38:0b:1f:c1:27:91:30:9e:6d:
b1:ea:6e:5d:d8:73:66:5b:c7:b8:e9:16:f7:37:5a:75:80:92:
23:92:75:42:0e:ba:4f:bf:b1:11:a5:06:05:b7:1d:96:b6:c6:
e0:83:24:0b:55:80:0b:b1:cb:45:14:f2:20:76:59:dd:93:19:
ba:fd:bc:62:aa:57:1d:03:74:9b:66:29:59:2c:88:b1:f9:01:
06:09:4b:0f:f8:02:c1:4c:fb:7d:99:71:13:b1:a1:63:ca:23:
c6:3e:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:18:30 2025 by rpki-client