Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
File: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft (raw, json)
Hash identifier: ph15wEW42M2CkDn0UG78pvT35KlcnCGVOJYynHUgQj4=
Subject key identifier: 6E:73:FC:97:07:1F:2D:83:E2:DB:B0:DA:D5:76:20:E2:D7:44:0D:69
Authority key identifier: 31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
Certificate issuer: /CN=31fd401741e669e920b03c6c76aa3a7871403f54
Certificate serial: 01965500D975D94060395EB9E6BFDCC2A4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
Manifest number: 0365
Signing time: Sun 20 Apr 2025 21:00:40 +0000
Manifest this update: Sun 20 Apr 2025 21:00:40 +0000
Manifest next update: Mon 21 Apr 2025 21:00:40 +0000
Files and hashes: 1: Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl (hash: F9ZeiiTj8LrKpilbO7aEWzkRYYy54XneQ/5o6aY2iE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:d9:75:d9:40:60:39:5e:b9:e6:bf:dc:c2:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31fd401741e669e920b03c6c76aa3a7871403f54
Validity
Not Before: Apr 20 21:00:40 2025 GMT
Not After : Apr 21 21:00:40 2025 GMT
Subject: CN=6e73fc97071f2d83e2dbb0dad57620e2d7440d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:2b:fb:9c:92:46:42:93:3d:d1:a9:32:0c:
0c:58:e6:87:7d:df:a9:d7:00:4c:f3:8a:1c:eb:96:
7b:cf:b1:05:6b:f2:8c:ae:d7:89:56:b8:59:1c:2a:
66:03:42:93:60:89:f2:a1:cc:a7:83:e0:03:ed:8b:
17:b8:1b:e6:22:25:32:7b:54:d8:65:11:91:a3:b8:
2c:83:99:5e:a1:93:9d:08:07:7b:08:97:dc:de:ea:
8a:93:3b:8a:41:bc:8f:65:54:59:6f:2b:21:8c:3f:
8a:ac:9c:7c:db:98:27:b4:29:3f:a2:37:99:df:fa:
70:08:d0:f8:2e:a8:74:2d:a1:87:ee:5d:6a:3b:0d:
a7:dc:ac:10:45:28:0c:6a:dc:7e:15:5a:a3:90:d8:
5f:2d:27:da:6f:6e:2f:12:4a:a2:d5:ae:50:7a:fd:
1a:08:c6:57:81:78:65:66:c5:cc:95:70:ce:40:d1:
87:b9:27:62:d1:03:44:49:08:ed:59:f6:e9:1d:b1:
51:a0:de:5b:24:e9:eb:79:cb:bc:69:fb:41:a2:40:
ab:96:76:20:b5:e6:c0:29:e1:9e:12:67:ef:43:d2:
78:6f:23:2b:30:94:25:28:3d:27:5d:55:ff:2c:e1:
b1:9e:cc:1f:65:86:3d:50:b0:e9:e7:79:a4:7d:5e:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:FC:97:07:1F:2D:83:E2:DB:B0:DA:D5:76:20:E2:D7:44:0D:69
X509v3 Authority Key Identifier:
keyid:31:FD:40:17:41:E6:69:E9:20:B0:3C:6C:76:AA:3A:78:71:40:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ba365b-694b-4fba-8653-de36bf20ba4f/1/Mf1AF0HmaekgsDxsdqo6eHFAP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:78:e1:8f:5d:3b:4c:62:f8:d7:91:41:f1:6a:34:41:19:8a:
1c:bb:33:31:e8:21:49:e4:98:a7:c6:9e:37:28:83:d9:e7:fa:
24:66:61:3e:67:37:51:d8:c7:22:ad:22:c6:77:f0:66:8c:5c:
08:58:cd:65:1d:1b:e7:ce:1a:30:f4:d7:4f:82:0c:8d:d8:4d:
14:bf:1a:5f:80:ca:57:f1:c5:35:7d:bc:95:0c:cb:c1:cb:b4:
5d:40:39:77:16:68:dd:98:5e:a1:7c:81:e7:da:08:cd:be:5d:
de:a3:05:53:57:b4:d0:b0:23:8f:64:f9:ef:7a:ff:61:42:18:
07:8f:08:50:95:71:70:44:52:f0:71:ca:da:5c:87:00:a7:e7:
ff:59:15:47:af:4f:68:0e:94:14:40:1a:94:55:23:35:ba:e7:
4b:67:7a:3e:bd:e9:19:5d:30:d8:ad:6f:b4:b7:7b:47:a7:66:
5b:b8:e1:de:c1:7a:d2:6a:d5:97:a6:0f:54:58:e0:84:ef:ca:
4f:5b:df:22:2f:c3:7b:e5:c9:43:aa:42:a8:bc:9b:d8:e0:7c:
7f:c3:29:fc:00:d8:76:f7:30:28:e7:86:cf:d1:3f:00:16:1b:
ae:d6:dd:5c:33:9f:bf:e6:fe:8e:3e:65:dd:11:c9:0f:2d:0c:
5c:4b:85:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:25 2025 by rpki-client