Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
File: mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft (raw, json)
Hash identifier: vWR311/1YSXdLCPZaodWQu0n920l2SglR28DB6Ef82g=
Subject key identifier: 7A:9D:FB:6B:CC:AE:10:2E:77:1C:D5:02:07:A5:F1:FD:5A:49:30:A2
Authority key identifier: 99:DA:45:25:E8:D3:14:D5:AA:79:A4:0D:2E:22:7E:E5:56:B0:F5:9E
Certificate issuer: /CN=99da4525e8d314d5aa79a40d2e227ee556b0f59e
Certificate serial: 01964F6C6B911737F6DD5EB18F09081A6A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 19:00:27 +0000
Manifest this update: Sat 19 Apr 2025 19:00:27 +0000
Manifest next update: Sun 20 Apr 2025 19:00:27 +0000
Files and hashes: 1: mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl (hash: SnzvXny284t3NoUd0YPaoI5i3yAnoQwJcqBBRMvShDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:6b:91:17:37:f6:dd:5e:b1:8f:09:08:1a:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99da4525e8d314d5aa79a40d2e227ee556b0f59e
Validity
Not Before: Apr 19 19:00:27 2025 GMT
Not After : Apr 20 19:00:27 2025 GMT
Subject: CN=7a9dfb6bccae102e771cd50207a5f1fd5a4930a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c2:6d:df:f2:96:fc:6b:bd:c1:06:c8:01:5e:
89:8d:df:b3:aa:9d:45:51:2a:de:38:55:a1:ce:34:
37:9c:30:d0:55:13:ba:de:4c:81:00:ac:69:a7:11:
bf:ed:68:c8:50:a7:49:51:cd:41:91:9e:1b:f7:eb:
0d:ab:9b:a2:23:30:45:44:f3:3c:e9:e6:81:97:66:
d7:18:46:9e:73:fc:99:14:c6:54:6e:d1:f3:94:50:
d7:f0:c6:12:08:c7:44:95:89:44:5a:45:d4:f3:5f:
ad:c7:6e:46:93:35:3f:aa:07:05:fb:bd:ee:dc:cc:
d4:fa:4a:48:2d:36:a2:a0:09:52:16:81:e8:16:a3:
50:55:79:bf:79:fb:b0:43:8d:35:69:b9:31:a5:b5:
8c:b2:2f:df:5a:be:57:dd:f4:08:d3:1a:86:5f:02:
56:ff:f6:1d:ac:43:5b:b5:51:40:07:79:b8:33:4e:
b6:07:d5:ce:0d:af:6e:5a:1c:8f:ae:a0:f5:84:f7:
1c:a8:1c:91:fe:08:f9:a6:38:bc:52:5d:44:b2:4a:
f6:e0:47:11:27:68:68:97:16:77:b5:1f:92:da:ab:
21:70:d9:35:51:7f:bd:b3:0e:f5:52:22:b1:14:52:
e0:70:56:46:57:c7:54:64:ed:7a:48:59:d4:36:c9:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9D:FB:6B:CC:AE:10:2E:77:1C:D5:02:07:A5:F1:FD:5A:49:30:A2
X509v3 Authority Key Identifier:
keyid:99:DA:45:25:E8:D3:14:D5:AA:79:A4:0D:2E:22:7E:E5:56:B0:F5:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0b4903-7be5-4489-8cfa-69813c2d8ccd/1/mdpFJejTFNWqeaQNLiJ-5Vaw9Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d9:ab:2e:1c:5a:25:8d:cc:3d:74:a0:ae:6a:f7:47:df:f7:
9f:8c:9a:8c:da:c6:88:4b:24:59:89:4d:48:13:38:6b:6b:ca:
3d:b6:9f:bc:df:19:1a:8e:88:fd:33:3d:ce:26:89:d5:49:d8:
3a:52:83:a2:23:ae:b1:ca:88:3f:26:dc:cc:83:51:2f:6a:a8:
38:ab:e4:dc:b0:37:a9:7f:8a:2f:10:3b:0c:aa:71:2b:48:83:
12:e4:22:70:bd:3c:c4:fc:de:44:18:88:97:d8:2b:3c:50:93:
02:73:57:20:a0:c2:13:6a:39:57:c8:70:cc:9f:34:29:a2:ec:
65:b3:ec:1e:65:b9:ea:25:5a:4f:1f:7c:3d:1d:2e:bf:26:be:
1c:8a:89:40:ed:00:07:0f:92:87:39:1c:3e:b6:c5:af:db:68:
ef:81:d6:eb:8b:e6:6a:7f:aa:9f:69:a0:3e:0c:41:6f:3e:0b:
da:3d:0f:58:58:a0:c6:75:1c:35:e0:a2:9a:84:5b:71:2d:97:
4d:30:73:ac:5b:c7:49:b0:56:d8:1c:f1:90:7c:d5:6f:08:a0:
96:58:f5:7d:30:a4:c2:ed:9c:3d:42:62:29:80:e0:69:0e:88:
cd:63:4b:ad:c0:a4:45:27:17:9f:2f:4b:7a:b8:de:87:eb:fa:
12:1e:2c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:14:58 2025 by rpki-client