Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
File: mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft (raw, json)
Hash identifier: UHyAGD92FeZ/URoDFfcmqwNpDbQ16WqEdRfEKBklT+s=
Subject key identifier: EB:D4:8A:2C:A5:DA:19:F3:6E:4E:CE:1A:99:EC:C7:7D:56:BB:A8:C0
Authority key identifier: 99:DA:45:25:E8:D3:14:D5:AA:79:A4:0D:2E:22:7E:E5:56:B0:F5:9E
Certificate issuer: /CN=99da4525e8d314d5aa79a40d2e227ee556b0f59e
Certificate serial: 0194C3887AAC63960CF2A271C0260DBB8C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
Manifest number: 142C
Signing time: Sat 01 Feb 2025 22:01:28 +0000
Manifest this update: Sat 01 Feb 2025 22:01:28 +0000
Manifest next update: Sun 02 Feb 2025 22:01:28 +0000
Files and hashes: 1: mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl (hash: 6p2j/wHTEWuyDF+RGu6W41ma9LbO3ubV90WjKg/iNAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:7a:ac:63:96:0c:f2:a2:71:c0:26:0d:bb:8c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99da4525e8d314d5aa79a40d2e227ee556b0f59e
Validity
Not Before: Feb 1 22:01:28 2025 GMT
Not After : Feb 2 22:01:28 2025 GMT
Subject: CN=ebd48a2ca5da19f36e4ece1a99ecc77d56bba8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:db:94:aa:d1:e8:c5:59:2f:21:d8:ad:97:
a7:ee:42:1e:7e:a6:2e:07:5f:1b:ed:78:04:f3:f1:
63:7d:ff:99:a0:5b:9f:87:bc:1e:b3:2e:d5:dd:e7:
c4:01:90:3a:13:83:ee:d3:0b:0e:12:1a:bc:72:06:
b8:0f:86:75:3f:b4:2f:1f:59:ac:5e:bb:19:ba:5a:
3b:9e:ce:92:f2:fc:f2:56:c1:10:41:1f:6b:51:66:
7f:91:a0:31:6c:74:fa:ed:fb:67:9c:69:ff:08:ff:
1f:fc:44:21:dc:2e:70:6d:08:5b:9d:c3:24:db:6a:
8a:72:10:44:96:54:17:93:d4:5a:72:67:75:97:9a:
2d:91:d0:0b:fa:6d:49:74:92:8a:25:14:79:9d:a7:
44:f1:96:8a:82:e7:cc:2e:03:ff:23:45:4a:4e:02:
8e:1b:aa:a9:8e:81:e5:10:81:39:e2:74:8b:a4:da:
b9:54:56:2e:9e:df:f6:36:4c:01:db:37:24:8c:3e:
03:fa:73:c3:4d:35:4b:88:03:3e:f1:d9:9f:f2:7c:
90:12:6c:26:f2:13:db:3a:20:f3:29:28:5d:db:1c:
64:b7:bf:bc:42:e6:9c:11:06:34:de:81:40:d4:70:
5b:49:65:fc:52:ee:dc:b9:c5:b2:b8:56:93:91:fe:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D4:8A:2C:A5:DA:19:F3:6E:4E:CE:1A:99:EC:C7:7D:56:BB:A8:C0
X509v3 Authority Key Identifier:
keyid:99:DA:45:25:E8:D3:14:D5:AA:79:A4:0D:2E:22:7E:E5:56:B0:F5:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bf:ac:ea:56:71:bc:fb:e9:36:c2:c2:22:0f:73:34:7a:24:
49:76:49:88:44:00:71:53:8c:c6:e9:a1:d5:3c:44:8c:a1:96:
45:d3:f8:21:79:0d:4a:8e:4d:c5:cb:27:32:fe:73:11:1e:07:
37:97:16:d0:4b:bd:2d:a4:c1:a0:12:2d:d5:9f:a8:2c:97:69:
19:12:e6:9c:fd:33:6c:bc:42:40:28:ff:22:fd:3d:48:c7:6d:
1a:a5:33:d6:83:24:f0:91:e0:a8:d0:6b:35:ef:34:56:df:dd:
c6:01:b8:ec:f3:c4:15:3f:c3:3e:22:d6:8c:ef:a0:89:ff:bd:
89:97:12:58:3d:ca:d9:1b:3f:e4:39:41:2b:18:08:e7:54:12:
2c:49:45:ce:4b:d9:9d:71:2d:a5:c5:1d:c8:a6:fc:e9:96:d0:
cb:6b:2b:0a:94:ca:cc:c9:30:78:e5:8c:d3:e9:4c:eb:38:58:
71:f4:ad:91:af:35:f1:b3:69:23:20:9a:4c:71:76:83:bd:8a:
cd:b3:e6:92:4e:59:72:d9:25:92:23:a9:79:ae:28:04:a2:fe:
e6:0d:42:79:7c:2b:c4:8b:7d:ed:0e:53:30:55:58:40:1c:f5:
3c:77:cc:9e:94:db:a9:2f:52:75:56:7a:2c:42:57:c2:08:8f:
65:7c:96:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:57:17 2025 by rpki-client