Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: CdiTMZ4uDY9UXL+FNsufyYAXd8pxbRugIEuU7wiYU/8=
Subject key identifier: CD:98:43:E0:78:2A:29:2D:2E:DD:03:FB:F2:87:53:8D:F4:0F:DE:C6
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 019510C7582A8129DF155EB0CCE779C3243D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 0651
Signing time: Sun 16 Feb 2025 22:00:54 +0000
Manifest this update: Sun 16 Feb 2025 22:00:54 +0000
Manifest next update: Mon 17 Feb 2025 22:00:54 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: Cs41oVx5g2zZrmdfr987aX+Dq69LHg3xKKEuTf3d6xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:58:2a:81:29:df:15:5e:b0:cc:e7:79:c3:24:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Feb 16 22:00:54 2025 GMT
Not After : Feb 17 22:00:54 2025 GMT
Subject: CN=cd9843e0782a292d2edd03fbf287538df40fdec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:10:35:03:ca:14:d3:c7:d6:2d:bb:93:1c:
8a:6b:73:a6:1d:48:f4:58:17:c6:0b:80:c6:5c:22:
52:4a:24:f7:54:5b:f6:61:33:15:55:c2:f9:55:4b:
ec:56:92:0e:06:21:2c:a5:19:3e:2d:5d:d7:93:62:
6a:e3:09:43:6c:a9:ff:8a:73:4a:56:9b:a4:36:d5:
10:83:71:e3:31:b7:67:b8:f2:e5:e0:0a:98:60:21:
d1:81:0d:c5:63:60:d0:3c:cc:58:52:2e:89:0c:99:
8a:43:b7:98:da:fc:0a:19:52:49:42:6f:4e:78:e1:
ef:32:7c:c8:a1:62:4c:3d:df:47:d7:09:fb:34:3a:
88:0e:85:f3:50:09:0b:7c:5c:46:07:9f:66:46:86:
98:b5:dc:02:ee:4e:a4:6b:82:bf:a3:e9:3c:73:c4:
15:e4:86:ff:60:e4:96:f5:be:9d:a5:7c:d5:85:14:
51:ad:77:4d:11:72:e4:ee:7c:8c:68:09:3d:0b:76:
c1:0a:b3:cd:22:c6:aa:7a:96:7a:af:62:1e:52:49:
c3:ed:6b:af:ee:24:d2:82:fc:aa:35:a7:df:a8:fd:
80:42:3d:2c:1f:90:26:eb:48:f8:bf:66:4d:8e:be:
76:d7:4f:ef:4d:ed:58:b5:5e:11:20:b3:c4:9a:60:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:43:E0:78:2A:29:2D:2E:DD:03:FB:F2:87:53:8D:F4:0F:DE:C6
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2e:ee:95:fb:9c:77:d6:38:63:06:a2:e2:13:cb:7a:77:dd:
eb:b8:73:8b:fa:55:c0:b2:8a:75:ca:a6:67:37:a8:ff:85:b9:
5c:f1:01:05:f7:b3:93:e5:58:7d:a2:5c:dd:b1:24:d6:69:fd:
d2:a8:cc:aa:bf:79:64:80:92:c8:f0:6d:bc:c4:99:91:06:ae:
e0:7d:7d:21:e5:9a:b9:08:b5:39:fa:b5:51:8e:02:6d:52:a3:
f2:e3:a2:29:ee:80:d4:02:35:fd:23:a2:13:fd:c9:78:98:a6:
4d:f4:0f:0c:03:8e:7f:17:30:dd:cb:66:63:e4:36:c7:04:31:
7b:57:42:b9:f1:41:65:4a:4c:6f:f2:e8:5b:e7:65:07:e0:a2:
d4:a3:77:25:38:79:19:92:04:0b:80:1f:0c:85:1c:d0:41:53:
64:82:3b:68:ad:d1:b8:bb:e7:82:26:a6:ca:c6:3f:d8:eb:44:
17:ac:41:03:e2:c9:9b:1d:e7:56:79:1a:98:9f:75:32:5f:aa:
c3:38:e0:67:26:6c:9a:d5:91:b9:ad:7d:fb:cf:c5:c0:a4:a5:
f7:06:1d:65:db:f1:d2:a2:4e:52:c2:57:80:f3:8e:2a:17:a2:
61:ed:e7:4a:2d:f0:2e:a0:0c:5c:a2:ea:68:ab:25:38:88:14:
a8:03:ca:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:53 2025 by rpki-client