Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File: MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier: aNtZ9qtUwurOU9fAi/65kAz6kta6FlHgaRjo88DYIvM=
Subject key identifier: D6:A1:4D:88:E7:5C:7D:39:B7:28:92:D4:C1:49:30:D1:AE:BC:D3:A1
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial: 01967D214614E9789D2F0D677E25A09003BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number: 035A
Signing time: Mon 28 Apr 2025 16:00:54 +0000
Manifest this update: Mon 28 Apr 2025 16:00:54 +0000
Manifest next update: Tue 29 Apr 2025 16:00:54 +0000
Files and hashes: 1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: ziM8NhSnHjq98A+e+O5XG52aTU+7luS7+5Xmt/ggWpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:46:14:e9:78:9d:2f:0d:67:7e:25:a0:90:03:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
Validity
Not Before: Apr 28 16:00:54 2025 GMT
Not After : Apr 29 16:00:54 2025 GMT
Subject: CN=d6a14d88e75c7d39b72892d4c14930d1aebcd3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:95:88:3c:5b:16:91:8a:2c:f5:1c:90:c0:
29:f3:47:db:56:7e:b8:4a:80:23:41:1c:1a:7a:95:
27:62:c7:db:7b:3d:51:cf:7d:a0:2e:c5:f6:c8:bb:
8d:69:39:1a:b2:2f:04:2e:5e:ea:d5:c1:d4:ca:45:
ef:d8:f6:28:c3:bd:a8:25:ec:56:20:49:45:4a:7f:
35:ca:0b:22:9c:eb:25:e2:54:5d:fa:ec:f2:45:83:
3f:0f:cd:8b:f0:50:f0:a5:f6:a8:ce:b8:42:56:16:
96:0b:e0:06:04:29:5e:53:a7:8f:49:ab:27:6a:7d:
07:4f:b5:18:9f:fd:7f:b2:3e:11:a3:08:28:24:9c:
6c:c4:15:9e:31:b0:0b:87:37:53:2b:b7:e0:72:d5:
57:8f:7f:b3:f0:f9:49:12:e0:80:d9:95:c3:fd:43:
f2:8d:ef:d3:36:19:04:de:f9:5a:17:41:3d:65:88:
87:15:eb:6f:cb:ce:f3:79:8f:1d:ba:32:37:ce:93:
ed:29:d0:b4:f5:d3:6c:62:e1:dc:f1:5c:7d:30:d6:
8c:66:c3:04:0f:8b:db:c5:23:a1:ee:c1:f4:9f:b9:
60:b8:88:27:2d:b2:8f:ee:46:6f:56:d3:20:fc:95:
aa:eb:41:bf:bb:f4:92:11:30:a6:79:5c:4e:7b:cc:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A1:4D:88:E7:5C:7D:39:B7:28:92:D4:C1:49:30:D1:AE:BC:D3:A1
X509v3 Authority Key Identifier:
keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5a:59:1a:16:10:6d:16:04:b3:d8:ba:43:75:af:37:4a:bc:
34:da:77:c9:cc:9b:ce:da:35:8c:25:8b:ba:27:b2:c1:d3:ab:
ac:d9:68:ec:10:44:a7:90:7f:07:4b:d4:b9:68:3c:0d:81:5c:
29:e2:20:5f:72:d6:05:5f:93:9e:c0:0d:43:58:21:5c:59:66:
91:95:c0:b6:4d:50:8d:c9:df:6f:8b:2c:df:36:a6:ed:f8:b0:
21:04:8e:70:3e:95:51:54:4f:e7:47:35:8a:56:6e:2a:4a:f5:
2c:b5:ab:1d:68:d9:1b:51:7d:15:41:27:bc:35:22:a3:44:ca:
78:bc:3f:b5:1e:16:fa:af:51:14:c5:ba:e8:8c:4b:f5:ce:98:
bb:bf:5d:9f:28:9b:c3:8b:66:a2:a9:77:45:89:0c:28:4e:9c:
a7:1e:38:17:99:43:bf:05:c2:1b:81:ef:ac:cb:e9:f9:95:16:
bb:7b:50:67:17:0e:60:ba:65:49:15:4d:ca:fc:93:3d:70:f8:
e3:5a:9b:ca:6f:76:38:f4:b7:c1:c9:d2:1e:bd:76:bf:16:66:
db:5d:ec:34:1a:64:c7:29:3f:bc:6a:22:8c:62:8b:19:8d:9f:
6a:31:16:e1:6d:00:59:9b:bb:42:1c:bc:e7:59:1b:4f:3c:e9:
4c:62:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:21:09 2025 by rpki-client