Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File: MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier: ZYVQQvhLUQqUlD/PqP1r5W5p/nzrXro7FuBQJOhKh58=
Subject key identifier: 2F:FB:83:38:DD:09:61:FB:AC:AA:EB:E5:77:2A:75:6E:0B:C8:F4:77
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer: /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial: 01958F9810075038F533EF73729E59D1325F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number: 02DF
Signing time: Thu 13 Mar 2025 13:01:02 +0000
Manifest this update: Thu 13 Mar 2025 13:01:02 +0000
Manifest next update: Fri 14 Mar 2025 13:01:02 +0000
Files and hashes: 1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: eYKgAvWA0XAf2KDks8Nwx50yvYnSuiCUdy48myS9D80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:10:07:50:38:f5:33:ef:73:72:9e:59:d1:32:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
Validity
Not Before: Mar 13 13:01:02 2025 GMT
Not After : Mar 14 13:01:02 2025 GMT
Subject: CN=2ffb8338dd0961fbacaaebe5772a756e0bc8f477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:d5:b9:88:20:89:2f:54:42:2b:4d:1e:71:
6a:4e:56:24:e8:d3:b8:98:d5:43:7b:ad:0c:48:77:
27:84:cb:b5:92:0a:03:50:ab:ab:fa:21:cf:37:d9:
13:ff:20:60:46:f7:6a:da:f5:e0:68:b4:6e:da:4f:
58:87:4c:48:da:9a:0a:7f:d5:ef:f6:4c:b0:66:44:
a2:74:a2:4e:64:ad:d8:92:27:5b:58:2f:60:da:b6:
11:8b:22:ba:d7:87:bb:aa:db:5a:9b:78:1c:25:b9:
72:5b:e7:ca:fe:a8:62:3b:78:4e:c4:93:af:42:2d:
ae:2a:3b:6d:17:e7:e0:c9:d5:cb:c2:77:a4:9a:91:
1b:73:71:7c:86:38:8c:35:50:5c:13:cd:dd:da:b0:
1b:95:c6:9c:41:8f:e9:03:16:40:9d:68:61:49:cc:
55:e5:e7:57:ae:ec:84:4f:4f:01:0c:48:61:6d:fa:
55:45:0c:48:2b:f1:84:ec:97:11:a3:9d:4c:18:c3:
f1:9b:06:b4:ce:5a:83:72:e8:f2:a7:f5:5a:c9:7f:
d7:55:b5:1c:46:f6:b0:3d:a1:58:67:a0:90:22:b3:
a9:2c:6b:d9:1f:c6:20:c1:20:d8:9f:09:19:02:22:
47:95:89:c2:bf:06:fe:78:24:5b:ee:dc:be:5d:13:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FB:83:38:DD:09:61:FB:AC:AA:EB:E5:77:2A:75:6E:0B:C8:F4:77
X509v3 Authority Key Identifier:
keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:72:f8:9c:f9:be:31:8e:fb:61:a3:77:d3:d2:32:4a:81:e2:
fb:53:05:14:7e:1b:70:a5:68:fe:69:05:91:e8:c4:3c:f9:35:
ff:4e:04:44:96:5d:a8:03:9d:80:89:01:32:54:98:0a:e5:74:
ef:ba:8f:17:78:a1:0a:11:f4:d9:5e:52:b7:cf:67:c7:62:61:
f0:ba:09:e0:22:f0:f5:ab:cd:71:44:e1:e9:a9:cf:03:70:22:
97:e8:df:a7:98:21:33:2e:d5:ae:47:cf:a6:80:23:36:03:3b:
aa:cb:fd:54:2d:3e:ac:4d:c4:f2:4a:5e:3f:df:d0:5a:35:30:
9d:3e:b6:00:22:86:71:17:10:51:5f:03:09:c1:07:28:25:97:
29:c4:39:c8:e3:a5:4b:e4:2d:13:37:72:b5:82:87:4c:67:f8:
ca:b2:1e:30:69:ea:69:56:cc:34:71:89:dc:16:a8:02:ec:0e:
f2:8d:f2:99:02:48:60:3b:1a:b8:92:64:39:f3:43:0c:21:d0:
5f:ff:cf:05:cf:07:b1:d7:97:1f:f1:7a:c5:1a:93:46:ca:52:
8a:62:29:4b:9d:d8:67:32:31:ff:8e:3a:a2:21:a7:1f:b7:a6:
50:f5:e7:83:c7:bd:98:6d:d7:44:46:af:a9:e6:1b:62:ed:0c:
98:65:bc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:53 2025 by rpki-client