Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: n7snsNWFjrrV1BX9aCZJ0jcelRU7zzNItIpYwSKvPrU=
Subject key identifier: 13:A3:6F:28:7A:E2:29:C8:CC:DA:80:E4:D3:70:0C:D0:FD:3B:DD:E0
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 0196C3B9D2A69E1817CD163AC3C175121F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 1471
Signing time: Mon 12 May 2025 09:00:57 +0000
Manifest this update: Mon 12 May 2025 09:00:57 +0000
Manifest next update: Tue 13 May 2025 09:00:57 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: 3/iAetkcogiX4FRfLf7Fs5wBTozmwaXQM2FjKrsGYvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:d2:a6:9e:18:17:cd:16:3a:c3:c1:75:12:1f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: May 12 09:00:57 2025 GMT
Not After : May 13 09:00:57 2025 GMT
Subject: CN=13a36f287ae229c8ccda80e4d3700cd0fd3bdde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:94:8f:9d:cb:76:6c:05:02:1f:8c:03:8d:1d:
c0:ce:c6:44:49:76:c9:96:ee:ea:83:53:b0:56:05:
16:d8:4b:62:8a:d6:65:78:2c:42:d9:1c:2b:cd:1a:
15:85:62:a7:0e:83:ae:d4:4e:09:40:a2:53:3b:b4:
ce:b8:50:bb:a1:7c:f9:18:7b:ac:ed:f5:60:8b:2c:
d7:0e:c2:b9:53:15:de:01:49:10:af:e9:87:ed:34:
53:3e:86:98:86:15:ac:e3:5b:9a:e6:95:1f:a1:b5:
a0:d5:c4:20:45:13:d6:87:88:d1:e8:a3:7c:72:c8:
5d:88:6e:3b:7b:99:cd:9a:7c:70:cb:d7:11:81:df:
43:26:20:d1:36:b2:b9:f0:dd:69:36:93:f0:42:a1:
80:ff:9c:fc:0c:0d:47:62:85:aa:c9:20:9d:5e:b1:
6e:b6:c6:f9:38:6e:aa:ea:23:52:79:e9:fe:47:6e:
c9:d9:a9:bc:d8:de:7e:58:c5:be:22:3d:67:fb:fc:
77:b5:70:73:f6:05:72:26:bf:b1:e8:f4:ef:46:dd:
0b:1a:2e:e5:db:74:d4:0c:d7:86:c1:5a:51:3b:37:
9d:02:06:78:9a:40:fd:90:8e:a9:bb:ff:a8:25:3c:
85:42:c6:e6:2e:45:89:9f:78:3e:78:ce:7f:c0:60:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A3:6F:28:7A:E2:29:C8:CC:DA:80:E4:D3:70:0C:D0:FD:3B:DD:E0
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:31:77:49:77:1f:44:e6:ca:ca:5e:3b:f8:4d:f9:12:69:17:
2b:40:19:88:15:64:fb:2d:81:10:d7:3d:e2:23:27:22:c1:0b:
eb:53:6e:50:8e:8c:b6:e9:e9:fe:f6:9d:08:60:e1:9a:a9:44:
66:7d:d8:98:3a:1a:bf:22:0c:f5:f2:fe:78:50:90:d7:ec:bb:
5d:b0:7c:c9:d3:ef:0d:9d:81:88:1d:41:1e:6e:53:2a:97:0a:
9b:ed:00:20:5a:73:fa:9f:28:2b:7f:cf:d5:48:41:d1:2b:dc:
75:56:07:25:ff:49:b3:f0:3e:46:2d:0d:43:13:c5:a4:95:a3:
c0:47:3b:15:14:a2:d2:d7:0d:7b:90:fd:2d:50:39:b6:7d:f4:
05:25:bc:99:65:34:a8:99:7a:de:f7:61:4c:26:f0:47:e0:cd:
a2:77:83:46:27:2f:a3:a5:6b:01:87:7c:50:5b:dc:8b:a0:97:
36:3e:75:c3:ad:c5:01:c9:08:01:cb:c8:6c:5a:73:f5:34:7f:
8a:c7:f5:6f:b9:4f:26:b7:ec:47:7c:d0:9a:d5:80:96:99:0e:
7c:e6:2b:8e:b3:3f:95:f5:01:65:18:42:33:fa:40:8f:82:b2:
6d:22:dc:de:17:33:ee:06:56:67:ba:9f:4c:f4:e6:62:78:eb:
d2:05:61:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:06:30 2025 by rpki-client