Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
File: MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft (raw, json)
Hash identifier: YBZ5Zw8q16gPtmQ7ODFryKEboQXYvxpvDOXJyvxlKMI=
Subject key identifier: 0C:DA:21:C9:6B:17:49:CB:2F:65:78:35:2F:92:9A:34:F2:A0:DE:92
Authority key identifier: 31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
Certificate issuer: /CN=31db0f883cf94491451e908c6e682ace36b13602
Certificate serial: 01988DD95D16D69346BD357EF7FFCE4E22DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
Manifest number: 0834
Signing time: Sat 09 Aug 2025 08:01:29 +0000
Manifest this update: Sat 09 Aug 2025 08:01:29 +0000
Manifest next update: Sun 10 Aug 2025 08:01:29 +0000
Files and hashes: 1: MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl (hash: 9af6LPyCNQLDLDpZp1Y2puXOyu/96XoeujyhjGR5jOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:5d:16:d6:93:46:bd:35:7e:f7:ff:ce:4e:22:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db0f883cf94491451e908c6e682ace36b13602
Validity
Not Before: Aug 9 08:01:29 2025 GMT
Not After : Aug 10 08:01:29 2025 GMT
Subject: CN=0cda21c96b1749cb2f6578352f929a34f2a0de92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:6a:42:4a:b0:47:b3:26:60:48:64:a2:78:
99:c3:36:c6:05:28:3b:db:66:a5:4e:8f:82:25:bb:
43:dd:25:60:e6:1d:2f:32:b6:e2:df:5a:24:db:19:
fd:21:a9:00:65:18:97:7a:46:df:d6:94:67:20:2e:
d3:18:55:45:23:52:f2:53:19:c1:14:79:d4:d2:54:
2e:17:c0:c5:4a:9e:51:72:8e:da:df:0e:be:92:d3:
c6:91:56:bd:7a:73:29:0f:ae:1e:db:89:77:ab:93:
8e:ea:e2:af:2c:6f:10:88:b4:2c:b0:8f:6a:50:ae:
e4:9d:9a:a8:57:16:0d:14:ad:d8:19:a2:d5:cb:29:
45:14:64:62:ca:42:b4:ac:96:ff:da:b0:4f:b0:5d:
36:e7:11:56:26:0d:9a:82:00:74:a1:6f:4e:17:13:
2b:f6:f9:5d:95:95:4d:61:34:8f:ec:37:2e:05:a5:
1c:1c:08:7f:db:9d:bf:b7:65:89:d0:0f:da:e0:48:
dc:2b:3e:c4:a2:22:0a:57:08:50:b7:1b:28:f4:cd:
e2:ec:c5:49:2d:05:8c:7e:1d:23:44:15:ae:38:54:
16:1c:0d:a6:a2:96:2d:14:d3:0b:8f:b5:c1:34:6d:
62:b1:dc:87:21:32:76:e6:ed:99:51:b6:be:bd:ef:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DA:21:C9:6B:17:49:CB:2F:65:78:35:2F:92:9A:34:F2:A0:DE:92
X509v3 Authority Key Identifier:
keyid:31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:92:07:3a:19:74:8f:6e:7d:5d:e5:01:42:f9:72:ab:fa:ee:
8c:d0:90:2c:eb:d7:ad:4a:3f:1d:a0:aa:70:b6:a2:7d:4b:e9:
56:2b:50:2c:ea:0b:11:94:c3:4a:55:85:bf:3b:98:41:44:b6:
64:00:8f:2b:0e:89:6d:40:b1:78:a4:dc:c6:5f:0a:16:cd:94:
b0:f6:28:4f:18:85:e9:9c:82:f2:17:f2:c8:06:98:13:f3:06:
eb:20:ce:98:30:28:eb:c5:5b:1d:f5:9b:53:dc:de:55:f1:76:
20:b4:41:c7:5b:10:d7:d9:11:a6:30:be:cf:19:42:67:10:f6:
e1:ba:5e:99:d5:34:7e:00:9d:9c:94:16:1d:51:34:dd:0c:c9:
87:e8:90:05:9a:c4:14:12:3b:3c:f2:5c:ec:69:aa:7a:db:3c:
ab:3f:ba:69:b2:84:8e:a2:50:45:37:02:ae:9f:84:82:42:5d:
85:a2:14:cc:4b:40:fb:a0:72:0e:f0:f9:46:e1:73:db:1d:16:
c4:b8:3d:a8:1d:e2:91:98:77:3e:c4:ee:16:88:4b:27:91:45:
68:b6:e8:c5:6d:8c:37:eb:65:75:83:f2:74:d3:7d:ac:74:10:
94:a7:dc:67:d9:d6:ae:47:87:c8:09:83:5c:15:48:8b:b4:54:
b3:13:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:54 2025 by rpki-client