Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
File: MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft (raw, json)
Hash identifier: w0vRn+LFCSOOh3iOrofVybds8sEamvamhqyxd0PFY6Y=
Subject key identifier: EB:EA:50:CC:9D:4F:D9:EB:13:69:F3:EC:F8:07:15:49:32:5C:65:4C
Authority key identifier: 31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
Certificate issuer: /CN=31db0f883cf94491451e908c6e682ace36b13602
Certificate serial: 0197B77C500DCA90ACB66EFAFA095E44CA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
Manifest number: 07C5
Signing time: Sat 28 Jun 2025 17:01:06 +0000
Manifest this update: Sat 28 Jun 2025 17:01:06 +0000
Manifest next update: Sun 29 Jun 2025 17:01:06 +0000
Files and hashes: 1: MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl (hash: sNIttXiEZx927QPdf/Dx+sFSF2mIwzcu0XMkUrfKF7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:50:0d:ca:90:ac:b6:6e:fa:fa:09:5e:44:ca:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db0f883cf94491451e908c6e682ace36b13602
Validity
Not Before: Jun 28 17:01:06 2025 GMT
Not After : Jun 29 17:01:06 2025 GMT
Subject: CN=ebea50cc9d4fd9eb1369f3ecf8071549325c654c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7b:b3:fd:06:16:40:a4:95:08:5c:94:0f:90:
5b:68:cc:bf:0c:fb:d3:07:86:6f:69:f5:78:a4:4b:
7f:d8:dc:c6:e3:5c:f9:e0:06:52:d4:61:79:60:e4:
51:e3:0a:06:65:c3:c0:75:d8:37:d3:dd:68:3f:50:
2a:56:d5:98:3a:1f:da:f8:41:1f:14:55:2f:23:a4:
22:fb:19:09:cb:97:97:d1:6b:a0:5a:05:10:7d:00:
5b:1c:7d:49:15:69:98:54:b7:cc:83:8b:0c:9f:fd:
46:a8:66:ae:f1:be:9b:c2:79:8a:d9:37:91:aa:20:
cf:73:03:35:43:1f:fe:54:5f:34:26:61:d1:69:cd:
7f:78:2d:cd:34:86:c6:4d:65:7d:3c:13:f7:ec:fa:
fe:57:e6:b4:55:9b:1c:ce:46:6b:40:b6:64:59:b1:
3d:f8:b4:28:a0:36:b2:05:1c:bb:0f:5f:9a:77:b9:
20:0c:b1:03:a7:af:24:15:23:1e:3e:db:de:33:92:
34:3e:9d:83:50:9a:c0:a4:32:72:dd:15:de:f6:46:
fd:a3:e9:50:43:7f:61:36:e9:d4:f4:d6:68:d8:1d:
f4:ae:bc:ea:14:13:b8:29:fe:1b:80:3b:92:e5:cf:
79:65:88:f1:7d:12:82:5f:cb:f2:a7:af:33:b5:98:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EA:50:CC:9D:4F:D9:EB:13:69:F3:EC:F8:07:15:49:32:5C:65:4C
X509v3 Authority Key Identifier:
keyid:31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:fd:de:58:be:f8:ef:da:54:6b:e9:47:6a:d4:bd:f2:ae:a1:
32:f2:87:24:0d:ab:0c:b6:ec:35:38:30:40:28:25:31:44:57:
ea:55:67:38:85:b7:47:a8:1e:a7:ab:0b:25:c1:29:f2:ef:ee:
99:c5:3f:e1:1e:7d:3a:57:7b:f5:9c:80:ba:2d:64:eb:e7:a9:
75:d5:75:02:f9:d5:ea:cf:48:4c:7e:3f:e1:e7:66:09:c4:36:
2b:76:25:0c:55:6e:c9:02:8f:e5:3f:7d:f6:92:c7:00:e5:89:
b3:4d:e3:46:b9:f5:4e:0f:f3:25:2e:69:50:d6:4e:b6:7b:92:
ce:07:03:a9:d1:f1:08:15:6b:a2:f6:61:11:54:b3:03:06:cf:
f4:91:d1:b6:47:d9:01:9f:4d:94:1f:c5:aa:13:4d:da:3e:b2:
98:eb:48:df:9e:a3:ff:74:a8:b7:0a:96:39:4a:cd:83:7f:f1:
87:83:f2:4c:5e:2a:7a:93:00:df:d8:b8:b3:e1:99:a9:c5:cd:
c8:85:88:53:28:c7:b2:74:46:93:6e:d2:0a:79:0c:ca:94:74:
0e:1a:59:bc:57:70:cc:3b:6c:1f:92:b1:b0:9f:c1:b9:7a:c3:
00:e8:e5:4e:8a:55:b7:0e:67:93:02:cd:a8:6c:64:af:3e:c4:
79:b3:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:24:11 2025 by rpki-client