Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: 53o8JpINBUC+UkkWj7UOe2zekxIjJK614OXaeB2maRc=
Subject key identifier: E0:5C:23:E0:A8:04:75:FB:AF:21:3B:B7:E6:CD:E3:89:B9:52:B3:40
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 0197499F1EA778249EDEF37112D76E576752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 0156
Signing time: Sat 07 Jun 2025 09:00:54 +0000
Manifest this update: Sat 07 Jun 2025 09:00:54 +0000
Manifest next update: Sun 08 Jun 2025 09:00:54 +0000
Files and hashes: 1: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: qyNpzCpZDmzIRHZq5dgIUvgGVOJpuiEvAiqd4mX/Jlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:1e:a7:78:24:9e:de:f3:71:12:d7:6e:57:67:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: Jun 7 09:00:54 2025 GMT
Not After : Jun 8 09:00:54 2025 GMT
Subject: CN=e05c23e0a80475fbaf213bb7e6cde389b952b340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:22:a4:e2:02:1c:b7:34:1b:25:5f:cd:3d:e8:
c8:92:ed:51:0c:56:9e:56:cb:9a:ad:6a:25:09:3c:
0e:85:d5:cf:f2:70:23:c7:ad:a5:9e:32:bf:5d:97:
31:20:0c:63:89:e5:57:b5:85:4a:d2:86:a0:f5:30:
79:ba:8d:84:8f:51:f7:bd:f7:38:0d:cb:c5:75:cd:
07:b5:46:91:90:fd:71:ca:25:ac:12:d0:fb:f9:23:
27:01:2b:c6:49:64:a4:55:23:72:41:4d:34:f5:c7:
3a:7b:6e:49:20:33:8c:0f:72:40:3d:f9:81:95:f5:
b2:fd:5e:e7:78:9f:4f:30:3d:fe:70:5b:5b:8c:3f:
10:04:5d:6b:e3:fa:f1:81:7f:40:33:e1:92:d8:13:
d1:2c:a7:59:5d:0c:1b:0c:a4:62:f7:71:1f:e9:2a:
2f:dc:ff:30:34:ec:2d:84:02:0c:d6:70:8f:19:55:
73:ef:0e:61:29:0d:01:62:c3:25:25:51:fa:52:b2:
3b:6c:67:ae:99:15:2e:bd:93:91:0c:46:e7:2c:03:
6b:c3:b1:72:a1:78:39:28:1b:e1:4c:60:f4:ad:45:
d3:0b:a2:cc:c4:74:c0:9a:3e:9b:40:23:b5:4d:f1:
14:33:29:77:85:e0:34:27:41:20:cd:03:7d:a2:c1:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:23:E0:A8:04:75:FB:AF:21:3B:B7:E6:CD:E3:89:B9:52:B3:40
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b7:7c:ec:c3:78:03:bb:14:0b:dc:b2:9c:97:e9:e5:61:be:
98:03:55:f7:58:67:10:12:a0:12:89:38:4b:9a:6b:05:58:2f:
fe:03:aa:cd:67:95:b2:43:ad:a5:8e:b8:ac:49:0d:2b:aa:8b:
c6:64:52:c3:f6:71:b4:26:ea:c5:5b:3d:86:3e:fc:a7:c2:de:
fc:eb:d7:0e:cc:2d:6b:8d:1a:22:49:15:e7:f1:a4:78:27:4e:
34:04:cf:58:e3:51:43:e1:92:7e:42:1c:d6:ac:8e:b5:43:db:
d2:76:75:37:f6:eb:38:98:c7:a7:5a:68:84:b4:c0:7a:ef:05:
a8:75:37:b3:7a:47:9b:36:42:15:b6:76:3a:3f:6c:e5:00:54:
64:16:de:2d:5c:de:87:84:58:ca:09:e3:d7:16:58:df:46:b8:
ca:d6:5f:b3:4e:1b:e6:5c:c0:be:20:26:64:b0:7a:9c:41:1f:
1e:6e:fc:ef:24:57:4b:cd:81:e3:16:ff:2b:c5:08:19:79:81:
17:68:56:08:c6:5d:74:9d:22:d9:df:a9:bc:1e:03:51:79:d5:
5c:a4:a5:7f:a7:26:93:52:5e:ac:53:4f:ce:7a:3a:db:4e:2c:
de:56:54:7f:3b:f1:68:2a:9b:2b:58:f2:6b:ad:c0:c1:a6:6c:
02:76:79:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:21 2025 by rpki-client