Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
File: MptRPmVwb8qlQ6EaDkLSixCd87Y.mft (raw, json)
Hash identifier: wOhexaC+ZpZgpczyZ4N/9plKV9XYThE4WmS9/B/piR8=
Subject key identifier: A6:D0:70:79:A7:E0:8D:B4:C5:F4:1B:1A:D6:95:1A:51:06:FF:D9:8A
Authority key identifier: 32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
Certificate issuer: /CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Certificate serial: 01965191CD9751F986DB5891DE510124D3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
Manifest number: 120A
Signing time: Sun 20 Apr 2025 05:00:31 +0000
Manifest this update: Sun 20 Apr 2025 05:00:31 +0000
Manifest next update: Mon 21 Apr 2025 05:00:31 +0000
Files and hashes: 1: MptRPmVwb8qlQ6EaDkLSixCd87Y.crl (hash: +AJo81iNnkCGS1bDifoc+x8Lb5nxrFblDs9s/RmJ1uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:cd:97:51:f9:86:db:58:91:de:51:01:24:d3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=329b513e65706fcaa543a11a0e42d28b109df3b6
Validity
Not Before: Apr 20 05:00:31 2025 GMT
Not After : Apr 21 05:00:31 2025 GMT
Subject: CN=a6d07079a7e08db4c5f41b1ad6951a5106ffd98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:c8:9f:be:12:91:0e:32:d5:1c:b2:0b:1f:
b3:6d:13:96:a2:b0:60:6f:19:49:77:d1:6a:75:ff:
b1:1f:68:38:cb:d6:68:00:03:9f:32:15:93:84:d4:
22:38:1a:7e:e1:35:e6:c4:57:88:22:e4:51:2c:12:
b1:6a:c5:6f:2e:fb:29:66:98:98:a9:87:45:cb:89:
6f:32:40:23:ef:2a:c6:c8:12:64:9d:3b:09:6c:30:
09:b1:28:ee:69:15:1b:5e:35:b4:d3:33:92:2a:78:
7f:37:76:10:5f:67:41:0c:2c:74:20:2e:58:a4:67:
6b:b8:1a:76:a3:3c:24:ba:9b:ab:53:c0:73:fa:be:
b5:eb:30:40:65:9c:e8:7b:15:b3:d6:cd:0c:2f:22:
07:59:09:70:5e:ea:18:bf:66:50:17:3c:c2:18:ee:
9f:63:43:ee:54:37:ce:b2:85:7a:6a:58:46:95:ad:
07:ea:5d:1d:8f:ed:6e:c9:72:4b:2e:31:88:64:36:
55:6f:dd:00:36:88:28:90:a6:92:7f:c9:68:72:0d:
62:37:1c:e9:d5:9a:67:bc:0e:36:1b:6a:73:eb:d3:
92:88:07:a3:bc:c5:44:c0:f5:c9:ab:81:d8:9b:09:
1e:00:92:70:62:3f:d0:33:6b:46:5b:26:f1:19:a2:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D0:70:79:A7:E0:8D:B4:C5:F4:1B:1A:D6:95:1A:51:06:FF:D9:8A
X509v3 Authority Key Identifier:
keyid:32:9B:51:3E:65:70:6F:CA:A5:43:A1:1A:0E:42:D2:8B:10:9D:F3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MptRPmVwb8qlQ6EaDkLSixCd87Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0adcd8-8a4b-4923-bf36-814a611eca60/1/MptRPmVwb8qlQ6EaDkLSixCd87Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f6:f4:8e:1b:a2:48:b0:38:8d:64:fd:07:47:26:21:2f:90:
51:c9:cf:5c:c4:0a:1a:33:6f:0b:ad:d2:fc:c0:67:fe:a7:eb:
5b:59:da:15:d3:84:0d:13:e6:1e:2f:1d:fa:9e:f7:57:8a:72:
81:2c:7f:bb:4b:d3:44:a0:4c:4e:9b:cc:3f:fb:24:1f:ba:59:
16:b1:2f:56:46:65:cb:d1:f8:eb:7b:bd:77:ee:04:28:d5:93:
ed:93:f0:29:f4:e4:d7:e5:c0:6a:d4:ab:ae:ab:d5:eb:33:98:
52:d3:9b:3a:63:cc:92:47:1d:25:57:33:26:d4:63:4b:17:80:
85:d8:cd:64:09:c8:06:47:9f:59:9f:17:08:60:f0:65:44:1c:
3f:6b:90:50:c1:b9:ad:f3:37:25:12:b4:1f:22:0f:66:69:88:
ff:b2:57:bc:1d:27:6c:b1:6c:76:ab:ef:4d:65:c0:8b:37:c3:
12:7f:86:91:3c:91:fa:a6:d7:93:cf:b1:9b:c0:2f:94:9b:c5:
59:c6:7c:bd:e1:2b:60:92:20:71:fa:40:4a:62:a9:bc:2e:fa:
a9:68:e8:fa:5d:71:c9:db:34:32:4f:8e:05:f2:9e:b7:39:38:
d8:33:5c:1f:54:ed:14:89:f7:f6:fe:bb:16:55:87:78:51:14:
f9:79:57:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:24:36 2025 by rpki-client