
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
File: MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft (raw, json)
Hash identifier: LkoXOMKDYH5yakemdPBTcKeFp16azMFwNnkeCVsZ8pw=
Subject key identifier: D6:1C:AD:3E:22:61:F6:85:F1:8C:F1:5D:D5:F6:E3:A4:3E:C8:46:85
Authority key identifier: 31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
Certificate issuer: /CN=31da920321c6c82cee6929e798fc9372baccb925
Certificate serial: 01974A7B25010F5F30A46EC48BF5A0A6BC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
Manifest number: 0778
Signing time: Sat 07 Jun 2025 13:01:13 +0000
Manifest this update: Sat 07 Jun 2025 13:01:13 +0000
Manifest next update: Sun 08 Jun 2025 13:01:13 +0000
Files and hashes: 1: MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl (hash: A7oYRWJZPuhcIMxLYwsXG5UmFiqlNmWeYGsDQxYVYTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:25:01:0f:5f:30:a4:6e:c4:8b:f5:a0:a6:bc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31da920321c6c82cee6929e798fc9372baccb925
Validity
Not Before: Jun 7 13:01:13 2025 GMT
Not After : Jun 8 13:01:13 2025 GMT
Subject: CN=d61cad3e2261f685f18cf15dd5f6e3a43ec84685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:92:87:67:42:23:7b:33:bc:e2:ab:c5:54:
45:1e:c0:1e:19:6b:bd:67:11:f0:03:e1:70:79:0d:
19:03:5a:21:3e:b4:28:46:db:4a:82:c7:f5:e8:74:
49:bd:6d:04:de:20:56:b5:e2:c8:03:a3:48:ff:ee:
88:33:84:d3:2a:92:79:91:05:08:f5:91:b8:20:5d:
ab:7b:15:83:b5:be:c0:42:a1:fb:87:02:01:a7:86:
20:b4:b3:22:43:f7:6b:2f:d1:e8:fc:af:c6:79:34:
7e:5d:af:9e:d5:75:70:24:51:97:bb:61:9a:1f:5b:
3e:96:56:bf:ea:bf:bd:96:3a:4a:17:93:5e:46:cc:
da:61:54:82:29:48:18:d2:b0:52:6b:f9:ee:c7:fb:
7b:88:e4:ae:4d:27:5b:f6:fb:8b:69:a7:fb:55:42:
db:df:7f:49:06:e9:a2:bf:49:44:0a:9f:58:3f:f4:
08:df:bd:fa:ce:e8:d1:f7:26:f9:23:62:8f:2b:04:
b0:5f:f3:b9:ec:b4:a9:b4:d8:65:67:2e:54:45:6c:
74:9b:bb:22:56:13:67:ad:c0:3b:0c:e6:32:f0:2d:
5a:05:b4:ff:8c:01:47:8f:9c:ea:ad:9d:a7:1a:cb:
24:01:01:ac:ae:a4:d5:d8:8a:22:5a:27:f0:0c:12:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1C:AD:3E:22:61:F6:85:F1:8C:F1:5D:D5:F6:E3:A4:3E:C8:46:85
X509v3 Authority Key Identifier:
keyid:31:DA:92:03:21:C6:C8:2C:EE:69:29:E7:98:FC:93:72:BA:CC:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdqSAyHGyCzuaSnnmPyTcrrMuSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/491c92-8967-473e-9ea7-a589787bff90/1/MdqSAyHGyCzuaSnnmPyTcrrMuSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:54:0b:fd:e0:69:0a:8d:30:25:40:3e:77:a8:00:9b:47:0b:
72:84:28:1e:7b:fe:d8:c2:51:cb:8a:f5:bb:42:78:21:d4:9d:
c2:f0:a9:bb:ac:80:b0:d6:2a:a4:44:34:44:d9:45:ed:9b:72:
f8:4b:aa:b1:ca:8b:cd:6a:48:ff:18:4c:47:4c:cb:2a:55:17:
05:db:af:c5:15:ee:b5:ab:34:6d:dd:aa:5b:0f:39:81:1b:db:
5a:5a:3d:0d:bc:01:df:a9:22:d7:87:3a:94:4c:07:38:f9:45:
14:9d:bd:8d:64:86:52:db:8a:17:13:1c:3f:31:43:6b:bb:b7:
83:6d:de:07:33:e9:8f:91:fb:07:66:10:f5:fe:3f:c0:e0:29:
3b:61:eb:0b:75:eb:c2:00:cf:cb:4d:3d:69:2e:ae:01:37:7a:
87:43:f2:93:0e:b2:cd:28:a1:7f:7b:0f:4a:16:0f:19:89:55:
3f:30:ef:df:84:87:38:a3:55:9d:e7:44:6e:fc:80:8f:3e:2d:
cb:e3:d2:5d:de:9b:4b:3b:eb:55:19:b2:1f:3a:50:2f:a0:79:
34:7e:85:0a:3d:74:07:fb:a1:2a:19:19:03:13:b3:53:e4:d0:
7b:37:51:e2:3f:8f:0b:bc:77:02:d5:ed:df:23:b6:24:e0:f3:
34:98:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:53:15 2025 by rpki-client