Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
File: MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft (raw, json)
Hash identifier: 3ZrCSekB0Rsc98oHZ+TkCvJO9y6R0GXc84KBzntrxUw=
Subject key identifier: AC:DB:38:BE:5D:DE:81:CA:70:80:2D:EF:3C:3F:E7:0A:EC:B8:94:30
Authority key identifier: 30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58
Certificate issuer: /CN=30aab02b654e915cadca339292e28c15c47df858
Certificate serial: 0196B47D8A0705217A0533145D4A79E29EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
Manifest number: 0391
Signing time: Fri 09 May 2025 10:00:48 +0000
Manifest this update: Fri 09 May 2025 10:00:48 +0000
Manifest next update: Sat 10 May 2025 10:00:48 +0000
Files and hashes: 1: MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl (hash: YdBIrP+4+TuxrEVc+zyfqJ42w+yD/xvGxX8xL4y9E2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:8a:07:05:21:7a:05:33:14:5d:4a:79:e2:9e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aab02b654e915cadca339292e28c15c47df858
Validity
Not Before: May 9 10:00:48 2025 GMT
Not After : May 10 10:00:48 2025 GMT
Subject: CN=acdb38be5dde81ca70802def3c3fe70aecb89430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:e5:b9:d9:f2:b8:24:9b:45:92:31:66:b5:
a0:fd:06:df:6a:85:b3:cf:e6:4c:96:4f:67:1f:4f:
e4:da:4e:f1:d5:e6:ab:d8:7c:73:fb:54:fd:50:41:
06:96:41:30:22:2e:e6:0a:b7:43:0c:2d:4e:73:9e:
60:3d:ad:92:a1:8f:06:dd:29:76:1e:f7:fa:eb:1f:
52:77:24:62:54:ba:37:30:0a:ac:25:c8:63:b0:58:
91:49:61:be:e1:de:12:1d:01:61:ad:a3:fd:d3:10:
05:09:9e:48:3f:d6:5e:e8:ee:bc:9a:36:cb:b4:28:
43:67:d0:e4:b7:55:4b:98:a7:83:aa:c1:c1:c1:7b:
e2:f2:6a:b3:cb:66:b6:11:d4:ca:d5:41:18:c9:20:
9f:05:e7:56:e2:b0:c6:19:f2:30:bb:39:25:69:4e:
fa:c9:6d:b5:d8:b8:b0:53:7f:cf:ad:ed:93:bf:13:
fb:d7:e1:4f:2b:8c:e1:24:bc:e9:1e:11:7d:c0:fc:
0b:6e:97:0e:5a:91:28:54:31:dd:99:3b:8a:38:21:
61:d6:ad:39:e6:8b:e5:c2:ee:9b:47:4d:25:ca:d9:
8e:6b:48:d7:a4:75:b6:1e:b0:cc:ab:e7:9a:1d:4d:
89:01:0d:93:fc:8b:8f:dd:5a:89:c0:18:8b:53:2a:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DB:38:BE:5D:DE:81:CA:70:80:2D:EF:3C:3F:E7:0A:EC:B8:94:30
X509v3 Authority Key Identifier:
keyid:30:AA:B0:2B:65:4E:91:5C:AD:CA:33:92:92:E2:8C:15:C4:7D:F8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKqwK2VOkVytyjOSkuKMFcR9-Fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9aff54-5971-402f-ab69-a419670d17e1/1/MKqwK2VOkVytyjOSkuKMFcR9-Fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bc:be:65:df:c3:6a:a2:d5:31:a3:9d:4e:78:50:fe:51:ab:
01:e3:c7:03:26:47:27:01:06:08:c2:16:2e:b3:7f:6e:82:5a:
cc:e1:c4:ab:8d:42:f5:fc:00:0f:f0:74:05:2e:8d:24:6e:fc:
98:4f:34:4b:83:51:1e:2f:ff:21:2b:d7:a3:25:c5:77:98:48:
e7:68:f2:09:cc:24:32:9f:0b:8c:ae:47:cc:70:1b:76:04:7d:
a8:3e:b3:c9:6b:02:bc:6b:e0:e9:46:ec:cd:40:f2:ba:69:ba:
b3:02:2d:6f:05:7e:c4:81:8b:cb:23:03:61:3b:c0:b7:86:be:
50:4f:a1:f9:e3:b1:b5:48:d8:8b:a5:ab:96:47:c0:b4:c2:2c:
f8:e3:05:f2:d5:f0:48:2a:02:39:e3:3a:95:ed:9d:8e:9b:66:
de:30:4d:b8:ef:40:96:3c:ac:5d:f0:c2:aa:fd:4f:22:19:ed:
e9:0d:19:5d:3f:b0:a4:91:e8:45:cf:c8:ec:1a:c4:02:37:56:
43:26:1f:a4:6b:0d:c8:99:eb:a8:68:6d:64:d1:6d:30:31:f9:
3c:fc:d3:d6:ac:2a:f1:21:ce:b4:83:4e:38:85:63:22:2f:8d:
5f:b5:e2:1d:27:6c:49:05:2a:ab:57:38:6f:31:68:5a:0f:b8:
27:cb:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:00:57 2025 by rpki-client