Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: 9KjcNwFqxdiYB2ddysKp1qPhcxDrsm1BBp3T24x+rUg=
Subject key identifier: 27:A0:34:86:58:50:2F:FA:CB:27:F2:15:8B:F4:8F:44:5F:54:8F:27
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 019653B7725F46E673CB87F1DB299CE3CC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 104F
Signing time: Sun 20 Apr 2025 15:00:53 +0000
Manifest this update: Sun 20 Apr 2025 15:00:53 +0000
Manifest next update: Mon 21 Apr 2025 15:00:53 +0000
Files and hashes: 1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=)
2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: SW2w3wUpFrR403TZL0syYdjYm6lyJmFlvjtqQNLrq/w=)
3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:72:5f:46:e6:73:cb:87:f1:db:29:9c:e3:cc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Apr 20 15:00:53 2025 GMT
Not After : Apr 21 15:00:53 2025 GMT
Subject: CN=27a0348658502ffacb27f2158bf48f445f548f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dc:b9:cb:8e:8f:71:ff:3a:a9:c3:45:30:da:
7b:d9:75:0e:b9:f8:fc:97:d7:32:e7:fd:74:0c:4b:
f5:1a:08:63:f7:14:73:f5:a4:16:1c:04:2f:be:ea:
6f:9c:8b:9c:13:1c:13:7d:ad:0d:4e:c6:b9:04:32:
20:4a:68:05:89:11:b4:ef:30:41:b8:a1:41:92:05:
58:0b:b7:4e:4b:c5:3f:2f:3d:31:f3:7b:39:3b:60:
bf:fe:08:93:c8:9c:c0:81:11:ae:e3:b4:73:9f:a6:
57:b1:b6:de:8a:2c:60:21:90:0c:bc:99:b1:4e:74:
e1:1c:9f:9b:f6:57:e4:95:d9:d5:07:bc:79:8c:51:
e3:1f:3e:33:f6:69:a5:2a:f7:e8:8e:07:96:e7:71:
3c:5a:e9:01:a4:a9:94:cb:12:4f:e5:63:e0:76:f5:
f9:a6:ab:38:43:f4:7d:cd:d6:95:b3:3a:6a:98:36:
8e:c2:77:42:54:b5:90:c0:c9:e0:99:db:87:b8:fd:
95:26:08:65:6a:5a:34:1d:b8:13:1b:78:b5:ef:92:
ef:e0:97:09:d7:50:7d:70:29:b6:a7:bc:54:0a:61:
1a:6c:93:d0:44:51:39:b7:55:23:39:e8:7e:88:cf:
e2:08:52:f3:49:39:f4:69:d3:34:6c:22:6c:1c:47:
da:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A0:34:86:58:50:2F:FA:CB:27:F2:15:8B:F4:8F:44:5F:54:8F:27
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:78:17:c7:2f:ff:28:ca:59:97:d8:35:b3:9e:e6:5e:ce:f8:
38:9b:c2:81:cd:e1:bc:cb:77:dd:3b:4a:5b:bd:c6:b4:4c:6a:
ce:12:eb:97:5f:ec:81:0e:02:f6:e4:fa:ec:2c:07:d0:95:94:
37:bd:53:f8:75:ae:8f:c6:b6:26:da:ce:b8:25:5d:59:85:a3:
7c:29:4e:e8:bf:c7:04:5c:1a:46:47:e2:72:d7:32:ff:8e:57:
f9:cc:cd:b4:ab:93:e8:83:55:ab:14:7e:a7:f8:90:2a:27:7a:
1c:45:38:57:1c:1b:fa:4b:6f:15:91:4b:65:f4:99:e4:de:bb:
6b:38:7d:23:e4:1c:74:5a:c3:4a:37:32:d1:4f:d9:f3:8f:6e:
17:20:73:cb:d4:bf:d8:2f:37:40:3e:6c:a1:73:69:73:3f:6d:
14:1d:5d:53:3a:b3:13:d3:94:45:79:55:59:4d:50:78:45:ef:
bc:9b:5b:d2:49:7d:44:d0:3a:75:ad:3d:a6:c6:6c:48:90:ea:
0e:59:4e:b7:c6:bf:22:cc:77:42:04:e2:48:3e:1f:61:d2:e5:
c0:88:5c:a3:85:65:1f:34:e3:1e:47:8c:8b:92:96:90:2a:5b:
e4:c5:d5:35:f3:0d:59:c1:e1:21:1a:da:41:ba:12:99:32:65:
f6:6c:fd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:07 2025 by rpki-client