Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
File: MdqeNbdw4uaB91bNfSCBKoLhFhE.mft (raw, json)
Hash identifier: SlOmlTaCkqHZij7sijUTiSQJh66fHuXldZ0LnXjOodM=
Subject key identifier: C3:9E:A3:E1:71:5F:89:37:4A:90:CB:47:D0:1A:F8:01:F1:B2:C9:57
Authority key identifier: 31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
Certificate issuer: /CN=31da9e35b770e2e681f756cd7d20812a82e11611
Certificate serial: 01965A95248EA7A4FB001213AB9C80F5476E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 23:00:45 +0000
Manifest this update: Mon 21 Apr 2025 23:00:45 +0000
Manifest next update: Tue 22 Apr 2025 23:00:45 +0000
Files and hashes: 1: 5cSVF2_nio6952U-LXaO6EaByvM.roa (hash: W1RYT1KINzg4/aDaZcRwx3Kyxg4anoPRdOWZGqifkgo=)
2: MdqeNbdw4uaB91bNfSCBKoLhFhE.crl (hash: CYcWwfOHuMYK1qYFK9LmoevWl3i9rDpYBysqFfsKPRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:95:24:8e:a7:a4:fb:00:12:13:ab:9c:80:f5:47:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da9e35b770e2e681f756cd7d20812a82e11611
Validity
Not Before: Apr 21 23:00:45 2025 GMT
Not After : Apr 22 23:00:45 2025 GMT
Subject: CN=c39ea3e1715f89374a90cb47d01af801f1b2c957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0c:2d:a4:c1:34:14:0d:43:d6:6f:25:4e:57:
07:43:c4:3a:b3:e7:08:35:81:e1:bb:39:90:6c:96:
8e:76:0b:d3:d9:34:a6:cc:7b:d0:9f:ee:10:33:76:
c1:6f:fe:f9:a2:a5:8c:ca:6d:9a:b2:41:e2:49:88:
33:d0:ef:9f:b9:28:ef:d6:75:ba:6a:d5:d7:d3:18:
79:65:2d:e2:43:07:eb:94:6a:a8:95:ac:06:e2:aa:
3d:0e:10:04:a3:01:0a:56:13:8a:50:aa:5f:c4:01:
56:af:ea:5e:f8:94:fe:40:3a:5e:22:a3:28:ea:5e:
82:36:1a:d4:82:71:17:d3:fb:12:85:32:b6:e4:e3:
27:0f:ac:d4:3b:e4:dc:14:9d:b9:ae:07:64:5a:66:
a1:6f:71:92:f0:4e:2c:a6:b1:20:d0:62:07:6c:d2:
c1:3c:09:50:91:ea:17:29:ce:37:54:9a:70:eb:92:
24:00:89:2b:71:96:97:75:7e:d0:fb:eb:80:81:80:
a9:38:a8:56:4f:6d:3b:91:39:ec:8b:2a:35:44:9e:
ee:cf:27:28:fe:d7:86:57:9a:39:2f:d5:ae:65:25:
9d:a0:25:a2:fa:b9:3d:d8:79:7f:eb:5a:82:4a:f7:
ba:8a:78:90:25:49:69:25:2f:80:0a:3b:b9:ea:82:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9E:A3:E1:71:5F:89:37:4A:90:CB:47:D0:1A:F8:01:F1:B2:C9:57
X509v3 Authority Key Identifier:
keyid:31:DA:9E:35:B7:70:E2:E6:81:F7:56:CD:7D:20:81:2A:82:E1:16:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqeNbdw4uaB91bNfSCBKoLhFhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b79ee0-d4d1-4869-a62d-fd96ffebcfa1/1/MdqeNbdw4uaB91bNfSCBKoLhFhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d8:9d:e5:aa:ce:6a:a4:ad:45:9a:af:d9:c2:5b:68:f4:d3:
ee:c3:00:e5:69:7c:9f:89:88:8f:7a:1c:ab:a3:a6:65:7f:2a:
01:74:1c:c5:73:1d:a2:7c:49:c0:6a:a6:59:d7:41:9a:8c:5b:
76:da:5c:28:39:d1:4f:f0:97:83:4b:16:93:95:f7:fa:39:2c:
b9:cb:f4:3a:a1:93:a8:a6:6b:01:a9:38:55:f8:41:5a:92:8f:
c8:3a:05:8e:7d:8c:20:70:61:1a:8d:43:4f:8f:1d:b3:97:21:
b5:eb:d7:1a:b0:0d:ab:da:80:52:cf:1c:d4:a9:d3:52:d9:64:
eb:36:3c:dd:88:e2:34:c5:a7:8e:c9:4b:60:b7:07:a0:e5:eb:
96:44:0e:a7:d1:8f:f3:51:9c:7d:a5:34:b4:b6:e8:f8:3f:a5:
d5:a7:8f:eb:66:38:10:d4:df:29:ad:57:ce:84:b7:9b:5b:c2:
d0:ee:ff:41:a8:3f:b8:70:a8:ce:d9:0e:8e:b9:42:4d:31:01:
13:11:d1:b4:38:ff:b5:62:43:ec:d5:9b:9b:ff:54:5e:4d:a0:
38:8a:26:e9:a2:bd:d6:17:3f:32:1f:9f:90:b5:5d:d9:0f:ed:
1d:41:d4:c9:66:2e:29:1c:11:8d:b9:da:50:06:8d:85:93:8b:
cf:df:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:44 2025 by rpki-client