Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: e6hQ8u1vaOFt97J9VmtNZJJTWIV+HCKujJV179nnPWA=
Subject key identifier: 7D:AA:7F:46:24:0E:7B:BD:17:4D:F0:C7:C2:4B:84:FF:0F:11:38:CB
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 01968F951B495C77BE18C8ED04D55BA8A86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 012A
Signing time: Fri 02 May 2025 06:00:35 +0000
Manifest this update: Fri 02 May 2025 06:00:35 +0000
Manifest next update: Sat 03 May 2025 06:00:35 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: KiEG+8smwjeIPvHNdUkKkef+zGvKAaMBFi+7a2HaW70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:1b:49:5c:77:be:18:c8:ed:04:d5:5b:a8:a8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: May 2 06:00:35 2025 GMT
Not After : May 3 06:00:35 2025 GMT
Subject: CN=7daa7f46240e7bbd174df0c7c24b84ff0f1138cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:36:9c:f6:cc:5e:f0:a2:83:83:86:58:a0:
e8:da:e8:ae:9f:08:8c:7e:e7:7e:5b:78:81:56:72:
cb:64:91:37:09:b1:50:51:56:c4:09:09:af:b3:52:
f9:f5:e4:b3:bc:0f:bf:d5:dd:ed:1e:3e:73:74:58:
b9:0a:65:49:9a:de:a5:c7:73:a7:6d:24:d8:ba:84:
31:1e:6c:da:18:08:13:4e:d8:88:36:06:94:ec:9d:
ae:7e:21:c3:d7:c3:02:ef:80:9f:72:b9:4f:a4:9c:
d1:8b:b3:ce:5f:c5:77:23:5c:b5:71:76:ed:3b:f9:
a5:db:a0:ab:2b:6c:9c:a2:97:42:63:07:86:e9:d4:
a0:bd:83:da:67:6b:42:8b:1f:ab:8e:d2:3f:27:9b:
ca:f7:4c:98:34:12:e5:69:1f:63:76:40:5e:f0:d2:
19:a1:17:c5:ed:fd:b2:52:b8:2f:e1:a1:cb:68:b8:
f0:23:90:ba:3c:e3:ed:32:dd:31:10:ef:2a:7e:50:
6e:2f:36:18:e1:8b:6f:e4:9a:ed:ac:f1:43:58:dc:
6c:87:48:09:05:8c:88:24:71:d5:ce:d6:29:da:be:
0f:9d:ab:af:3f:e4:60:8b:6e:9d:73:19:50:98:6d:
68:19:82:58:6c:a9:d4:f5:9b:ee:52:59:eb:14:fd:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AA:7F:46:24:0E:7B:BD:17:4D:F0:C7:C2:4B:84:FF:0F:11:38:CB
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:29:e0:98:f3:e3:f9:f5:bc:8d:7a:9d:0c:8a:be:c8:bd:fb:
93:d3:a9:35:32:af:08:aa:8f:bf:9b:98:be:7b:54:3a:ef:1a:
98:7f:42:ce:8a:8f:11:20:65:0f:f9:3a:45:67:41:10:fd:48:
03:ef:03:a2:b6:e1:22:e9:05:47:1b:49:a4:ac:5b:4d:43:9b:
3e:ad:9d:7a:3a:8e:03:34:c4:61:33:fa:a7:71:6f:f8:dc:7e:
6c:17:5e:bd:9e:93:0b:c6:2e:68:d7:89:50:71:ed:cd:2b:41:
86:31:0b:8b:e6:9c:8b:7e:59:ca:fa:1b:b8:f9:79:39:7f:c5:
9e:ef:06:7d:92:b3:29:66:92:b4:1e:4c:78:14:f0:4c:ea:88:
1e:26:ec:da:23:f2:08:d1:ce:5d:98:30:a4:35:6d:50:09:74:
5b:43:47:e4:aa:3d:c9:22:3b:f1:6e:0c:ec:b9:fe:5e:af:63:
ac:6e:fb:02:01:34:45:ce:fc:87:ad:ba:72:b5:87:a7:29:f9:
b0:a6:21:b0:b1:0e:55:25:ee:34:4e:71:8e:07:bc:1b:ff:49:
79:0c:ca:7b:23:8f:04:4a:45:0e:53:c3:b6:f2:a6:be:64:a3:
63:74:ef:df:b8:c9:9f:b2:14:71:95:72:a7:14:d5:ea:73:56:
87:aa:fc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:00:05 2025 by rpki-client