Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: NmH84NRhkOj4VQQjvEzUtyraROB31CYZDVzTEikxLag=
Subject key identifier: 57:E7:6C:C9:CE:EE:49:36:34:62:E8:A7:88:C0:8C:A9:58:0E:F2:35
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 0196D3D1934DE8729788C03ACD9903D92674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 0119
Signing time: Thu 15 May 2025 12:00:49 +0000
Manifest this update: Thu 15 May 2025 12:00:49 +0000
Manifest next update: Fri 16 May 2025 12:00:49 +0000
Files and hashes: 1: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: NPr4aeaLe/jj96OUPVjxaOVOTdd73DwWHWU2boxm99E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:d1:93:4d:e8:72:97:88:c0:3a:cd:99:03:d9:26:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: May 15 12:00:49 2025 GMT
Not After : May 16 12:00:49 2025 GMT
Subject: CN=57e76cc9ceee49363462e8a788c08ca9580ef235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:38:ba:92:64:e7:2c:bc:fd:36:31:9c:8d:
d2:12:dd:65:31:48:25:94:42:aa:48:f7:c7:48:e1:
dd:6e:61:10:59:f5:52:28:e7:65:96:7f:9d:91:9d:
00:21:db:92:cf:41:b9:00:b3:90:84:49:c0:09:2b:
14:1f:d2:0d:15:b2:e5:68:98:bb:7d:91:2b:7f:e0:
38:98:17:58:bb:56:de:15:98:28:dc:f2:8d:49:e6:
e1:09:87:a4:30:e5:b6:06:43:1f:77:9d:d8:64:c7:
4e:24:3c:55:19:17:fa:e0:61:5a:11:f0:ab:28:dc:
5f:71:9a:7e:81:1a:a3:38:22:f8:7b:bf:f3:a3:8e:
50:55:dc:3a:85:03:8e:c2:9a:cf:c0:7a:f4:77:b6:
c8:18:1a:e3:e1:b5:28:c8:9a:28:0e:0f:20:90:69:
b3:2c:01:dc:b1:23:a1:a5:52:60:5d:43:b4:a8:75:
58:50:f5:41:53:24:0c:d8:c3:a9:08:79:0b:f3:22:
6a:2f:8a:86:b4:a4:e2:6d:98:5f:05:9d:c8:1e:5a:
d8:b3:d5:91:e1:b7:27:00:13:7c:08:47:e3:99:60:
93:c5:5d:f3:a4:ad:75:8c:4c:a3:09:a5:e7:12:54:
7c:12:70:a6:8d:ad:43:64:9c:4b:1c:41:6a:6a:7f:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E7:6C:C9:CE:EE:49:36:34:62:E8:A7:88:C0:8C:A9:58:0E:F2:35
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9b:a8:a0:95:f8:47:61:fe:80:bc:6c:3c:24:85:87:83:bf:
cb:e3:c5:2e:75:08:61:b0:a1:41:13:f3:57:79:03:b1:c1:bd:
89:32:ec:98:12:31:00:0f:91:7b:67:fd:fb:20:5a:2d:56:02:
b9:a3:4d:6b:78:be:8a:7d:04:2f:9d:e5:b1:4a:91:bd:43:2e:
26:10:79:ff:3d:c8:79:17:e4:eb:b4:27:73:c7:58:34:2e:6a:
19:69:f3:de:e7:d6:71:d9:b3:9b:ff:26:50:5d:c7:7d:f7:26:
33:40:ec:1f:66:b0:34:4e:ed:3f:ee:19:9d:54:28:1b:6a:9a:
2e:78:77:80:0f:21:e4:80:6a:56:0e:49:71:3d:ca:4e:b2:fd:
fa:5b:85:19:ba:3f:71:9a:90:7a:16:75:ff:d6:bb:b6:f9:d8:
ad:ed:48:2a:09:fc:a1:e6:df:37:f2:d8:80:8a:18:60:ac:4e:
73:b8:ba:74:6a:19:25:b6:da:94:f8:11:6f:55:e9:5a:76:9a:
2b:97:12:7e:36:d1:1b:d7:b5:03:90:c5:57:34:61:ba:bb:c5:
38:9f:5a:cb:ae:d6:ab:d9:97:e0:c0:09:4b:72:22:26:3d:f9:
d6:29:dd:0e:b9:ec:df:8a:12:70:89:6a:a6:0c:c4:77:dd:5f:
b4:1b:54:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbT0ZNN6HKXiMA6zZkD2SZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDdkOWQyOWNlY2Y4ZTU5MTIyMjMzZDcxNmU2YjA1MGU3
MTg0NzgwHhcNMjUwNTE1MTIwMDQ5WhcNMjUwNTE2MTIwMDQ5WjAzMTEwLwYDVQQD
Eyg1N2U3NmNjOWNlZWU0OTM2MzQ2MmU4YTc4OGMwOGNhOTU4MGVmMjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryU4upJk5yy8/TYxnI3SEt1lMUgl
lEKqSPfHSOHdbmEQWfVSKOdlln+dkZ0AIduSz0G5ALOQhEnACSsUH9INFbLlaJi7
fZErf+A4mBdYu1beFZgo3PKNSebhCYekMOW2BkMfd53YZMdOJDxVGRf64GFaEfCr
KNxfcZp+gRqjOCL4e7/zo45QVdw6hQOOwprPwHr0d7bIGBrj4bUoyJooDg8gkGmz
LAHcsSOhpVJgXUO0qHVYUPVBUyQM2MOpCHkL8yJqL4qGtKTibZhfBZ3IHlrYs9WR
4bcnABN8CEfjmWCTxV3zpK11jEyjCaXnElR8EnCmja1DZJxLHEFqan8WDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfnbMnO7kk2NGLop4jAjKlYDvI1MB8GA1UdIwQY
MBaAFDHX2dKc7PjlkSIjPXFuawUOcYR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYt
NDBmNGM2OGU5YTMxLzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYtNDBmNGM2OGU5YTMx
LzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpuooJX4
R2H+gLxsPCSFh4O/y+PFLnUIYbChQRPzV3kDscG9iTLsmBIxAA+Re2f9+yBaLVYC
uaNNa3i+in0EL53lsUqRvUMuJhB5/z3IeRfk67Qnc8dYNC5qGWnz3ufWcdmzm/8m
UF3HffcmM0DsH2awNE7tP+4ZnVQoG2qaLnh3gA8h5IBqVg5JcT3KTrL9+luFGbo/
cZqQehZ1/9a7tvnYre1IKgn8oebfN/LYgIoYYKxOc7i6dGoZJbbalPgRb1XpWnaa
K5cSfjbRG9e1A5DFVzRhurvFOJ9ay67Wq9mX4MAJS3IiJj351indDrns34oScIlq
pgzEd91ftBtUBQ==
-----END CERTIFICATE-----
Generated at Thu May 15 17:05:40 2025 by rpki-client