Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
File: MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft (raw, json)
Hash identifier: jG7ExmirbWvuuEtRBCzmMdiau+w33IIdIsoSYJRTDMs=
Subject key identifier: 27:D6:60:0A:FE:A7:89:6C:FF:FC:C8:CF:11:29:E8:C7:2A:C0:9A:45
Authority key identifier: 31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
Certificate issuer: /CN=31db0f883cf94491451e908c6e682ace36b13602
Certificate serial: 019916F5E26F04F9A5AD2AF63FAB9656FAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
Manifest number: 087B
Signing time: Thu 04 Sep 2025 23:00:37 +0000
Manifest this update: Thu 04 Sep 2025 23:00:37 +0000
Manifest next update: Fri 05 Sep 2025 23:00:37 +0000
Files and hashes: 1: MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl (hash: hivfclGut9J8XO8mnXqHZcp8wUSTtV54E9tB/0ledrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:e2:6f:04:f9:a5:ad:2a:f6:3f:ab:96:56:fa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31db0f883cf94491451e908c6e682ace36b13602
Validity
Not Before: Sep 4 23:00:37 2025 GMT
Not After : Sep 5 23:00:37 2025 GMT
Subject: CN=27d6600afea7896cfffcc8cf1129e8c72ac09a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:91:b3:f8:7a:39:8c:a6:2b:56:d4:74:55:
b2:d6:05:fa:94:10:89:ea:56:39:a9:0f:18:a5:13:
a6:6a:60:e3:8d:ca:80:17:fe:7c:58:b7:a9:c3:1b:
24:09:c7:8e:4d:b4:3d:59:b5:13:23:15:93:5d:47:
e9:80:89:e1:c3:ab:a7:ae:b9:6c:fb:bd:5b:b9:9a:
54:47:3f:ed:2e:48:75:bf:d3:f6:f7:c7:ba:05:40:
23:34:b4:eb:59:cb:57:cb:86:fd:a3:e1:36:65:2d:
ef:eb:a6:b0:af:8c:02:07:6c:07:7c:aa:6b:d7:8e:
c7:7d:be:14:e4:52:d2:89:4d:cb:f2:66:89:c0:bd:
ba:b9:f6:88:6c:96:31:6b:61:40:03:22:3a:b9:a0:
8c:b0:6a:24:07:a7:52:c2:0e:da:97:34:a4:dd:50:
d1:f0:bb:c8:c7:fc:1f:51:a5:2e:ba:88:5d:92:8e:
6a:3f:ae:00:2a:99:cd:63:dd:dd:91:79:4f:da:7f:
8b:91:f8:77:fa:a3:24:6c:a5:bc:ae:52:11:e6:ce:
b8:f6:c4:9f:0a:88:10:28:3b:66:85:aa:e4:a1:5c:
95:28:98:2d:bc:b1:b0:3a:38:44:a2:0b:9f:4d:69:
fd:16:e5:4a:d9:1d:9c:b1:c5:96:6a:4e:2a:d0:6d:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:60:0A:FE:A7:89:6C:FF:FC:C8:CF:11:29:E8:C7:2A:C0:9A:45
X509v3 Authority Key Identifier:
keyid:31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:75:3c:d9:18:b3:42:a8:9a:70:67:61:43:77:46:e8:eb:eb:
b4:c5:76:ce:bc:e5:d2:8a:3d:7c:b6:d0:80:45:2a:c4:19:3c:
1d:d2:d2:58:b3:a0:cd:30:92:6a:fb:7f:61:9c:0d:52:e2:4c:
00:48:50:5d:41:58:c4:38:b6:f4:24:17:fb:56:8f:6a:f4:bb:
3b:f5:cf:fb:ee:ac:68:cb:63:d2:86:da:7e:87:61:70:8b:82:
e6:b0:30:98:ab:16:cd:f7:c0:4d:8b:28:0e:52:62:a8:77:f0:
bc:7a:d1:d5:75:65:2a:0d:05:cf:e1:6a:ee:e0:e9:f7:6f:74:
7c:ca:f1:33:d4:05:29:e9:47:0f:76:b5:d9:65:f8:dc:cc:30:
bf:30:00:18:d0:c3:40:c0:c9:59:24:ce:cc:80:d6:57:a5:b4:
75:85:47:6b:e2:95:0c:45:05:3f:b5:77:7d:35:b5:19:b1:aa:
ab:db:2e:d6:75:e7:27:8a:57:97:cb:9d:0d:6e:67:73:47:1a:
d8:a2:a0:52:43:44:0f:35:6a:85:e6:0e:4f:5b:81:9b:08:fe:
95:d8:97:c8:a4:4c:1d:fc:b7:29:63:88:e1:b4:a2:d9:5b:12:
fa:4c:13:79:e9:c6:10:c3:06:3d:cb:f1:4a:3b:12:88:92:2c:
4b:ab:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:24 2025 by rpki-client