Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: 2PSQpyaQwdzqf0Lo+KD+p6tJ6fed6Kx5lpWJOsWXcDw=
Subject key identifier: C7:A0:A7:87:D2:B3:5F:2D:A9:AF:59:33:9B:E1:DC:D1:24:5D:FB:7A
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 019875D1B5FC74D9ED747BB8630A05B36F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 0813
Signing time: Mon 04 Aug 2025 16:02:14 +0000
Manifest this update: Mon 04 Aug 2025 16:02:14 +0000
Manifest next update: Tue 05 Aug 2025 16:02:14 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: Q12Go1SPBae2mBu4UzZSP59o1qHw64Dwn789BgwG2ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:b5:fc:74:d9:ed:74:7b:b8:63:0a:05:b3:6f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Aug 4 16:02:14 2025 GMT
Not After : Aug 5 16:02:14 2025 GMT
Subject: CN=c7a0a787d2b35f2da9af59339be1dcd1245dfb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:11:71:04:ed:77:8b:bc:28:4d:6f:1c:79:
c4:89:86:8c:6c:88:df:e9:53:5c:26:5c:db:5c:7f:
e3:22:ac:8e:ae:2c:04:91:5f:1c:15:ae:54:ba:6f:
ef:86:ea:5e:b2:ba:d7:ec:59:3e:46:3c:cd:2e:f9:
6c:b5:7b:fd:ba:59:e1:7d:98:7c:b5:14:05:28:76:
3a:1f:ad:89:cb:c9:56:fb:d5:71:3c:58:0b:ca:f6:
77:c8:32:26:9b:9b:16:1d:54:87:24:64:19:8b:83:
69:d7:72:2c:aa:f1:4a:28:d8:2a:87:96:71:69:35:
fe:4d:c1:34:72:73:15:7c:69:d8:42:22:39:4b:52:
95:d4:78:0a:c5:d4:f2:cc:a1:4a:f7:ba:c4:c6:c2:
5c:dd:be:5c:5e:bd:7d:ca:e5:e9:cb:6c:00:50:f6:
eb:d4:e6:24:c4:1b:ea:89:82:06:66:d2:6a:39:89:
39:a9:04:e5:4c:08:f4:85:0d:2e:22:71:84:2b:e7:
40:0a:a1:a3:cc:6b:68:57:d2:83:5a:dd:bb:3c:93:
6f:de:0c:2e:4b:89:5f:01:89:18:38:7c:22:19:e9:
cb:31:b3:e2:ef:c3:6c:83:fb:ca:c0:2a:a1:9f:2a:
05:8f:0e:3c:98:c7:65:ef:cf:10:ad:fd:6d:d5:4a:
d2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A0:A7:87:D2:B3:5F:2D:A9:AF:59:33:9B:E1:DC:D1:24:5D:FB:7A
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3b:c1:f2:e9:85:06:dd:44:74:18:f7:e6:b9:58:77:3f:28:
76:82:a8:a7:d8:80:51:8c:d0:81:a1:9e:4c:e5:f8:3e:48:95:
12:86:0e:0a:fb:db:92:50:3d:9d:8a:6e:78:f8:af:f0:d5:1b:
ef:aa:eb:80:6d:36:57:7c:9e:20:c2:a2:ee:bb:a0:49:57:68:
29:88:c3:84:c7:95:2e:59:03:2b:3b:8a:cc:a4:41:f1:25:a9:
10:15:84:f1:58:93:0d:30:8e:e6:73:e1:51:c0:98:fa:ba:b8:
c8:d0:72:13:10:45:67:b2:6a:53:e6:db:7a:f1:cf:be:16:db:
ae:9a:84:77:bb:83:ad:f3:27:29:32:9f:dd:9a:30:ca:d2:eb:
66:51:1e:02:31:40:f0:c7:11:5d:27:e9:36:54:4f:6c:c2:4e:
e3:5c:59:57:13:8f:2d:5c:5a:5c:f2:ee:08:8d:13:27:7f:d3:
be:74:26:03:df:75:af:c8:80:f1:de:ac:0c:8d:7e:3e:53:17:
d7:64:9c:25:0c:c8:6c:fe:c3:4b:3f:2d:a0:d3:72:be:f0:4b:
11:94:61:b5:ef:b0:d8:93:ce:5e:d0:45:38:80:29:c0:7c:2f:
02:76:60:12:fb:0e:7d:c4:9d:66:f8:5b:6c:71:2e:a2:b7:43:
0f:20:9e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:21:43 2025 by rpki-client