Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: ssolY15fJR0oUg43ps85vUGmG3t7NVdA/fmmAeWP6wQ=
Subject key identifier: 48:EF:D1:F9:B9:0F:01:D6:77:1E:BB:1A:B5:AA:81:FB:F0:60:B0:5E
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 0196802245201B84D30B81976D213F36E647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 1066
Signing time: Tue 29 Apr 2025 06:00:51 +0000
Manifest this update: Tue 29 Apr 2025 06:00:51 +0000
Manifest next update: Wed 30 Apr 2025 06:00:51 +0000
Files and hashes: 1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=)
2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: fYcQzqTa2dAvg3xcB8bcBvrQ/f6rk28Y29FUU5QIZiQ=)
3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:45:20:1b:84:d3:0b:81:97:6d:21:3f:36:e6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Apr 29 06:00:51 2025 GMT
Not After : Apr 30 06:00:51 2025 GMT
Subject: CN=48efd1f9b90f01d6771ebb1ab5aa81fbf060b05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:54:f1:2a:6b:18:00:da:fa:1e:2c:62:4c:
31:c4:56:08:b3:d6:9d:06:68:bb:7f:79:0b:09:21:
f4:ea:3b:d7:10:82:a4:50:28:37:df:90:26:79:01:
73:e7:04:b3:5b:51:b0:e4:c5:cf:d0:59:98:91:be:
71:fb:02:81:7f:26:ba:2c:41:91:08:1c:92:73:e1:
c0:e3:a1:e8:aa:1a:38:af:b8:d6:e9:57:35:d6:71:
75:a3:8e:95:04:19:41:9d:fd:17:ed:12:16:be:eb:
a5:e2:84:62:b2:24:6a:0d:44:59:fe:d3:10:5a:60:
ac:b8:66:4a:aa:bc:a2:5b:eb:b4:98:03:d8:b1:c2:
51:e6:1c:03:c9:ff:5f:81:d0:61:1f:6a:f0:bd:b9:
c2:45:ba:7b:c5:20:7b:1e:07:b8:e1:1e:33:ce:86:
44:93:99:57:a0:4c:4d:42:14:a9:36:83:6e:da:4c:
27:d4:d3:aa:6f:76:89:af:d4:cb:ff:16:24:29:82:
d9:20:f5:22:60:60:74:bc:c4:6d:ed:3b:b3:6b:c6:
02:8e:eb:8e:e8:b2:b1:44:35:67:73:56:06:dd:28:
6d:e8:18:0b:2a:6d:39:44:48:a7:52:da:75:5e:1e:
47:1e:24:41:e1:9b:0c:2e:67:08:08:3a:a1:d5:b2:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EF:D1:F9:B9:0F:01:D6:77:1E:BB:1A:B5:AA:81:FB:F0:60:B0:5E
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6a:9b:c7:90:7b:76:1b:a9:b2:f9:eb:9d:8c:87:14:89:1a:
81:4b:15:1a:1c:2c:99:74:43:54:90:a9:ea:d0:29:a2:2c:6e:
06:d0:ff:9e:7c:5b:cc:aa:b5:b9:fa:0a:43:8e:4f:91:b2:c9:
58:eb:e5:35:2b:45:0d:79:2f:52:7a:0a:80:ce:65:b6:6b:17:
0e:6a:a2:12:1a:ee:25:34:bf:88:f4:13:fd:e5:79:01:d9:8d:
72:cd:c3:dd:a5:d7:8c:ea:c8:3b:86:05:ac:42:0b:6c:3e:1e:
0e:2a:0d:41:0e:87:d3:02:68:99:5b:ef:b5:02:82:8b:47:10:
01:0e:e5:c2:ce:e3:a7:cc:8f:4d:2d:6f:e5:77:01:27:ba:82:
50:4b:1a:39:f7:7b:a1:5c:23:a8:2c:05:ef:64:75:95:31:a6:
7b:dc:19:1e:71:14:92:6d:15:c2:5e:75:82:86:75:e0:77:43:
27:2a:5d:64:c8:f3:e1:8c:d6:49:8d:d4:06:cb:07:d5:16:f0:
46:5a:a4:28:13:77:2b:03:e4:01:c6:60:83:6d:f0:48:0e:8a:
68:a4:e3:6e:63:dc:e6:41:20:2e:86:f4:3a:c3:c3:68:96:ad:
94:ac:e9:9c:07:51:c5:82:7d:58:c8:26:f3:18:f8:3d:0c:5e:
b2:2a:fc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:29:53 2025 by rpki-client