Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft (raw, json)
Hash identifier: a3/XaBhZpt3N6DnzGJPNYBUxVg8lSz4vai8nb5auqvI=
Subject key identifier: FE:86:52:DE:57:B6:2F:52:0E:A2:37:D7:47:BF:39:59:8B:96:84:94
Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478
Certificate serial: 0194C49A423923E90DF97FA31981DC08723A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
Manifest number: 08
Signing time: Sun 02 Feb 2025 03:00:31 +0000
Manifest this update: Sun 02 Feb 2025 03:00:31 +0000
Manifest next update: Mon 03 Feb 2025 03:00:31 +0000
Files and hashes: 1: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl (hash: jfpfC1O0hLj1K1c7XIfnTsPomoBRv/ZlNGXmF4Jfapo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:42:39:23:e9:0d:f9:7f:a3:19:81:dc:08:72:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Validity
Not Before: Feb 2 03:00:31 2025 GMT
Not After : Feb 3 03:00:31 2025 GMT
Subject: CN=fe8652de57b62f520ea237d747bf39598b968494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:60:9b:99:98:f1:18:69:9d:80:c7:85:e1:
f7:f7:67:04:9b:36:c0:0f:42:c8:3c:20:5e:32:92:
b7:69:71:50:e8:52:1e:de:86:df:8d:cd:de:c6:ab:
7d:f4:aa:e5:ae:a7:f2:e4:f8:fe:5f:4d:0a:2e:80:
ed:1e:64:2f:c6:90:f2:fe:a5:47:a1:65:95:99:3e:
72:34:98:e0:bb:15:41:cb:5e:d4:76:95:89:ed:5d:
50:04:9f:e9:59:52:07:e2:4c:90:77:dd:f8:8c:9e:
e0:f4:d2:c0:7b:70:79:a3:e8:72:47:b1:0a:ea:9f:
cd:23:42:22:3c:2b:79:f4:99:de:13:04:e8:0c:d4:
4b:90:da:d0:52:1d:50:00:59:c4:72:78:09:07:2b:
53:f0:9c:b6:e1:1b:21:f5:61:de:0a:6b:d3:35:a1:
58:7c:90:64:94:c9:cc:49:f3:d5:af:b3:c5:9d:0a:
21:8d:28:e3:b1:96:f8:fc:89:cb:d2:24:80:b5:64:
0f:6b:cb:67:57:8d:fc:50:64:5b:37:bc:34:02:7f:
0c:16:83:4b:5c:eb:dd:f5:27:04:34:73:9f:42:ca:
fb:8c:df:b7:47:c2:34:33:fd:a0:ee:04:e0:10:26:
82:74:01:82:ff:ba:57:64:32:ce:e4:d8:bc:41:25:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:86:52:DE:57:B6:2F:52:0E:A2:37:D7:47:BF:39:59:8B:96:84:94
X509v3 Authority Key Identifier:
keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:17:89:09:c8:91:df:39:e8:da:ac:c9:80:aa:07:13:c2:9b:
ac:56:cc:67:8d:d7:fa:6e:92:20:2c:3b:9c:a9:7f:59:85:06:
c1:f5:49:df:1f:70:23:41:c3:ce:21:88:04:aa:85:53:85:8e:
58:a8:a0:43:8b:6d:90:d3:4c:c4:8f:9c:6d:db:a9:ac:5b:6d:
e4:f1:65:20:cd:0a:af:33:5d:6f:30:55:ad:ee:cd:83:70:96:
54:bb:73:cf:e8:b6:7e:5f:f6:4b:a4:7b:8e:bb:f6:cf:35:01:
7d:d4:05:c0:88:86:de:7c:fa:41:f2:a9:e7:be:4a:46:11:a1:
2b:fa:a8:8d:73:68:ad:2b:7a:e4:88:09:77:f2:7f:8a:ab:9d:
ca:b9:dc:e8:08:bd:a8:ba:b5:4e:e9:7c:52:c6:02:dd:48:4f:
ec:e0:80:e7:92:41:93:7c:c8:ff:7d:b6:6e:03:96:69:9c:e8:
8e:ea:11:9b:d2:31:93:c4:5d:26:74:ee:72:f4:7e:30:50:9f:
d7:87:8f:f7:76:18:6c:12:2e:3d:e7:c1:4e:b4:32:6f:14:ac:
b0:15:b9:58:d3:e4:77:79:ee:38:d4:b3:1f:9a:c8:8a:ae:45:
67:60:a8:27:0a:87:0b:4a:c9:ec:4e:c2:79:84:ba:85:56:23:
79:ef:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:54 2025 by rpki-client