Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: moOz8nAWaNza5bOQRU9R96i2lS45q5BG7CkxGXlfnTw=
Subject key identifier: 0B:B3:76:5E:EF:02:9B:B9:A0:48:38:18:44:DC:2A:5E:38:3C:83:7A
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 01967BD771B66AA4F0E5D5B521583A77D8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 070D
Signing time: Mon 28 Apr 2025 10:00:38 +0000
Manifest this update: Mon 28 Apr 2025 10:00:38 +0000
Manifest next update: Tue 29 Apr 2025 10:00:38 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: kTe612ZGmkqGOBNklujWrY5BgCuDu8iiKrl95zF2kJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:71:b6:6a:a4:f0:e5:d5:b5:21:58:3a:77:d8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Apr 28 10:00:38 2025 GMT
Not After : Apr 29 10:00:38 2025 GMT
Subject: CN=0bb3765eef029bb9a048381844dc2a5e383c837a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fa:3b:fe:28:59:24:90:bf:1c:82:36:ad:e8:
98:3e:a9:b5:39:9a:ce:60:33:67:f6:81:03:1c:c3:
3c:a8:1a:82:99:49:1d:d2:1f:5d:2f:08:da:27:b4:
f4:c8:72:89:ab:f0:2b:2c:23:37:1e:1e:6c:75:d3:
0e:73:a7:04:87:25:93:6a:c6:7f:4f:ab:57:20:e5:
74:a6:0b:e8:cd:c1:29:1b:03:6c:e1:ae:43:55:ea:
cd:b5:fe:a8:b6:9c:b8:d6:41:b5:7f:c2:bd:e3:73:
c6:d4:22:be:bf:8f:36:51:0c:b0:2e:93:a2:df:f6:
af:0a:7e:b4:85:b7:8b:c7:04:08:c2:86:f8:d4:74:
51:e0:c7:94:57:04:77:5f:c5:47:08:36:bb:2b:10:
a3:9b:28:f7:eb:5a:d9:54:7c:d7:6f:81:ba:e8:70:
e1:61:a8:9a:bd:be:8a:3e:bb:84:a7:71:80:c2:9f:
57:a7:2a:c8:5e:c2:1d:aa:7b:a2:c2:bc:06:c8:71:
21:36:77:86:5d:b3:4f:e0:6e:3a:e7:4f:23:c8:c3:
3a:57:4e:43:20:68:b4:71:e4:1a:a6:6c:e2:73:05:
84:dc:27:16:ff:1e:a6:27:be:c2:d4:a7:f9:92:27:
6f:b7:2d:ed:d2:a0:1c:86:28:b8:00:7a:f0:e2:6f:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B3:76:5E:EF:02:9B:B9:A0:48:38:18:44:DC:2A:5E:38:3C:83:7A
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fe:0b:66:8c:d6:88:22:7a:54:73:bb:5f:10:57:54:1a:4c:
9a:0a:db:5f:ad:37:5d:fb:5a:77:e9:b7:fa:74:58:48:2c:13:
63:91:bc:96:b7:80:16:0e:57:c6:6c:fe:f8:87:14:64:99:3e:
36:68:58:57:4c:82:cb:1e:8f:41:d4:b8:b6:08:34:83:b8:89:
77:aa:36:27:72:e0:2d:37:db:7c:e5:b9:86:31:8e:bf:a7:95:
5f:d8:5d:3b:39:8f:1c:dd:fe:4f:fb:d2:ec:99:85:4a:e5:f1:
c1:f1:9a:05:0d:12:b0:8a:dd:1d:84:7e:10:a0:d6:88:67:1d:
91:39:42:05:a0:d3:f4:cf:cd:39:3c:a3:ff:d0:90:26:4c:a9:
6f:e4:2b:a9:a5:a5:ac:a1:1d:b2:4c:01:c0:f0:91:bc:17:51:
ed:b9:82:e5:dd:2d:18:b3:81:3e:54:f5:0e:3d:6b:af:f7:da:
90:ea:b1:55:64:1a:71:e7:86:47:ca:c9:41:5b:3a:80:7d:56:
7c:b9:c5:03:aa:d7:3f:11:c1:d6:1d:62:0e:b5:cc:50:5a:4b:
a3:ed:f1:7f:e4:8c:d7:d7:fa:eb:a4:3a:99:33:56:a8:5b:dd:
8d:ef:e0:51:ef:b2:92:10:f2:40:ef:28:cb:dc:8a:5e:37:43:
06:ba:f5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:18:10 2025 by rpki-client