Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft
File: MfimDHg4bJIR08qSHxQ30dHsHQw.mft (raw, json)
Hash identifier: Y8zjUubdsmxiyQ/tfEGUZeXIL1Iq5LZ5rWzRqFuLf9Y=
Subject key identifier: 56:13:A3:F9:FE:8C:94:65:60:87:A6:D0:5F:10:1A:BB:0F:9D:9D:20
Authority key identifier: 31:F8:A6:0C:78:38:6C:92:11:D3:CA:92:1F:14:37:D1:D1:EC:1D:0C
Certificate issuer: /CN=31f8a60c78386c9211d3ca921f1437d1d1ec1d0c
Certificate serial: 019657CB65B51F1DD02AC0ED26A7C5104FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfimDHg4bJIR08qSHxQ30dHsHQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft
Manifest number: 05CE
Signing time: Mon 21 Apr 2025 10:01:09 +0000
Manifest this update: Mon 21 Apr 2025 10:01:09 +0000
Manifest next update: Tue 22 Apr 2025 10:01:09 +0000
Files and hashes: 1: MfimDHg4bJIR08qSHxQ30dHsHQw.crl (hash: 898fjD9hk9Anco2u9Ji10aQyymVQbm7HfasOb51Bf1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfimDHg4bJIR08qSHxQ30dHsHQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:65:b5:1f:1d:d0:2a:c0:ed:26:a7:c5:10:4f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f8a60c78386c9211d3ca921f1437d1d1ec1d0c
Validity
Not Before: Apr 21 10:01:09 2025 GMT
Not After : Apr 22 10:01:09 2025 GMT
Subject: CN=5613a3f9fe8c94656087a6d05f101abb0f9d9d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:ca:2f:52:8e:6b:62:fb:20:12:5f:6b:6d:
79:ab:d2:0b:1a:09:e1:e9:80:1c:30:77:e9:3d:ba:
63:37:c2:54:25:dc:c5:93:73:16:af:e3:81:af:0a:
41:84:67:c8:cb:15:2e:bf:bc:98:15:e6:94:0f:c7:
3a:5f:b5:4c:7f:29:c8:15:08:47:98:75:fc:aa:54:
8f:ef:f9:88:3d:b7:c8:63:2e:c1:ef:c5:18:a6:c8:
50:85:e1:8d:8e:17:92:23:4f:22:68:da:9f:91:f8:
0e:85:90:2e:74:d9:ec:a5:0e:14:b9:f6:ba:09:e4:
c6:80:70:ed:49:38:f4:3f:f7:0d:6e:0d:fb:d1:79:
bc:0b:94:eb:d8:4f:07:32:d8:40:6a:58:c5:78:fb:
dc:43:54:bd:f5:67:68:92:af:96:c7:f0:c6:6f:b2:
5f:f3:0f:0c:c4:f8:75:a5:49:a9:49:10:ce:ea:34:
c5:34:fb:02:e0:6c:ff:ab:5b:90:19:08:a6:46:05:
bc:f7:28:3d:27:bc:52:35:03:ac:d3:37:69:b6:fb:
78:c4:d7:23:70:a8:4c:b3:80:e0:b5:b5:46:14:9d:
13:6f:b2:e6:65:0a:be:02:92:f0:5c:d3:12:52:b5:
6b:4c:10:85:f0:f8:19:78:9a:86:9a:73:83:0c:3f:
e2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:13:A3:F9:FE:8C:94:65:60:87:A6:D0:5F:10:1A:BB:0F:9D:9D:20
X509v3 Authority Key Identifier:
keyid:31:F8:A6:0C:78:38:6C:92:11:D3:CA:92:1F:14:37:D1:D1:EC:1D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfimDHg4bJIR08qSHxQ30dHsHQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b4f818-5e2d-49a5-8072-d842d19a3133/1/MfimDHg4bJIR08qSHxQ30dHsHQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9b:24:fe:dc:e4:39:b2:d2:c4:40:72:eb:02:d3:3d:58:9f:
c0:dd:72:de:ca:41:01:49:4e:97:65:4c:3e:0b:6e:57:7b:02:
86:1e:00:ce:de:4d:cb:96:6b:95:05:dd:44:8e:0f:86:40:02:
c9:89:0d:24:91:b4:4a:13:a6:c4:4b:0e:15:32:f2:0d:7b:f5:
b1:34:46:d9:ef:77:0d:13:d7:f9:89:c7:fd:66:f9:b5:c3:58:
4b:bc:de:a2:4c:29:b3:06:a9:fd:67:71:0f:e1:dd:f7:1a:19:
f9:13:65:09:4b:fe:7a:3f:ca:6e:76:b8:99:31:09:42:8c:52:
45:47:25:63:4d:14:bc:cb:da:e9:e5:a8:41:21:3b:5c:79:25:
2a:a4:97:44:d0:e4:60:4d:fa:4a:2d:7b:9a:50:e9:57:c2:3f:
b0:c4:64:e1:61:3f:f9:64:f2:bd:9d:a7:08:74:d1:b1:2f:7d:
3e:75:0c:d0:92:68:31:e8:95:d6:a6:ed:74:62:c5:4b:25:d6:
6b:e0:2e:0e:56:c6:05:4d:7f:ca:71:56:e4:ef:76:dd:89:97:
7d:01:4f:81:e4:e7:4a:59:a3:fa:4c:0e:63:48:11:86:ee:74:
35:40:4c:f3:51:df:df:52:40:2b:b8:e4:38:0d:0b:05:ff:1a:
37:98:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:04:44 2025 by rpki-client