Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: Ss1b2JCoycv3IXKKXke5TLVBQw8IHxdfVaj8gFIDWlI=
Subject key identifier: 1C:23:4D:45:3B:D0:6F:DB:38:90:08:50:16:05:25:3C:53:ED:BA:1E
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 0196507EFDACA7F841CE861B4B05153E7F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: D5
Signing time: Sun 20 Apr 2025 00:00:21 +0000
Manifest this update: Sun 20 Apr 2025 00:00:21 +0000
Manifest next update: Mon 21 Apr 2025 00:00:21 +0000
Files and hashes: 1: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: yvECPhuJFnBnAAfJG3QZZwXN3USeamq+CfFJUKJ5gpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7e:fd:ac:a7:f8:41:ce:86:1b:4b:05:15:3e:7f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: Apr 20 00:00:21 2025 GMT
Not After : Apr 21 00:00:21 2025 GMT
Subject: CN=1c234d453bd06fdb389008501605253c53edba1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:16:c5:34:8f:19:bc:2b:ab:63:85:15:c2:
bf:a0:85:b4:e9:c2:dc:b6:dd:a1:1f:58:cb:aa:35:
aa:da:12:32:99:1b:c7:e2:f8:34:6b:5f:c1:3d:11:
d7:73:28:58:65:be:47:fa:0f:94:2d:04:9f:66:73:
95:d9:a9:8e:1b:4d:72:bd:7f:f0:4a:b2:ee:b7:82:
f6:88:c6:7c:7a:8e:b5:4b:f6:7f:6d:1c:78:59:9d:
dc:8d:65:18:79:80:34:37:33:ba:d2:e2:19:1e:3d:
9d:89:29:fd:96:35:0b:05:3f:2a:f5:34:ed:60:c2:
e0:77:6c:00:af:a2:0f:a8:d2:65:2a:91:36:c3:45:
1a:e2:b6:01:94:5f:90:55:9c:00:80:72:32:db:78:
2b:42:5a:6b:f8:52:b5:35:18:ed:66:3e:d0:46:23:
04:73:f1:ad:b0:de:56:1d:64:b9:5e:12:b5:f2:db:
fc:51:1b:b1:13:8f:83:81:25:00:6d:14:91:e8:2d:
13:c5:14:60:23:24:3a:81:c0:2b:6c:84:65:c8:a3:
06:58:15:d6:d5:65:8a:50:8a:c8:03:21:71:36:09:
5c:24:c9:74:14:c2:78:66:f0:07:e6:8b:90:17:f5:
4c:8e:cc:15:56:63:2b:27:dc:50:4a:9d:db:f7:bb:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:23:4D:45:3B:D0:6F:DB:38:90:08:50:16:05:25:3C:53:ED:BA:1E
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a3:fc:c7:05:5a:53:be:ce:5f:be:c6:7c:39:8d:a5:61:f9:
b9:7a:2e:62:53:78:b5:2c:98:10:31:bf:0a:79:d4:c8:68:0f:
91:f6:27:63:43:05:1a:2b:3f:af:08:12:06:1b:ea:85:aa:22:
e5:df:e5:d4:2f:b1:0e:30:96:ab:78:16:0c:7e:43:6f:87:9d:
91:41:2a:71:d6:26:fa:7b:f4:0c:c3:c0:ee:89:5d:5d:b3:41:
31:46:dc:31:88:7c:b4:13:1b:8a:d0:13:2f:dd:d9:0f:55:a0:
06:6c:6b:c4:c9:92:85:fa:25:16:4b:a2:6a:a6:62:00:48:be:
1b:be:4b:ac:f7:17:12:69:68:d6:0f:ab:68:44:a3:e6:00:fb:
4d:7e:31:57:49:d8:5e:95:da:2e:2d:b8:e5:b2:20:a0:ee:35:
e9:f0:a6:23:a9:f3:8c:41:26:e2:f4:e6:7c:10:a9:80:8d:4e:
b3:2d:f3:72:81:35:27:2c:6b:30:ac:79:bf:0c:40:e7:e5:07:
5e:e6:96:cb:d5:48:68:bc:95:73:0f:cb:12:e9:21:0b:2b:25:
81:c4:07:84:c3:80:b1:13:ee:d0:6d:78:93:7e:2f:0b:98:2a:
1f:c3:12:90:3c:00:de:a0:20:04:b4:56:df:8f:28:40:eb:13:
d0:11:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:38 2025 by rpki-client