Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
File: Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json)
Hash identifier: 3N7dhSBejV/UBAf4ZvIKrZEmXKa9tIEyB+x4cJ1CA6g=
Subject key identifier: 23:3E:EF:58:35:15:BD:82:A4:5A:36:66:11:50:CA:26:D8:F4:7A:FF
Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
Certificate issuer: /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Certificate serial: 0196D4AD3B68714F8BEA507AC4827760D496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
Manifest number: 0141
Signing time: Thu 15 May 2025 16:00:44 +0000
Manifest this update: Thu 15 May 2025 16:00:44 +0000
Manifest next update: Fri 16 May 2025 16:00:44 +0000
Files and hashes: 1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: M5qAe5RiZjAJ/CFKf+9oOVp2+JQi7OKcbSLLRsfVIqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:ad:3b:68:71:4f:8b:ea:50:7a:c4:82:77:60:d4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Validity
Not Before: May 15 16:00:44 2025 GMT
Not After : May 16 16:00:44 2025 GMT
Subject: CN=233eef583515bd82a45a36661150ca26d8f47aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:ca:c1:2b:a3:ac:16:2e:ba:9b:c7:ba:44:
25:a4:7b:ff:75:02:d0:f9:2f:35:b8:7f:6a:91:88:
82:18:4e:24:e7:2e:2d:86:01:ca:4a:a0:89:11:09:
a2:5d:c3:05:73:1f:92:ed:ad:ca:5a:d8:c9:51:ff:
a2:52:69:5f:83:37:ea:97:1a:ab:8b:54:90:40:68:
a8:8f:56:83:07:47:2b:74:38:18:44:66:75:21:b6:
66:cd:27:80:51:1b:5e:8f:b7:b4:64:5e:e9:61:7d:
dd:8f:60:88:1a:22:bb:25:95:ea:46:e6:b1:68:9e:
b9:45:fa:53:b1:f2:e2:6a:d3:2e:6f:41:a5:50:ae:
36:9d:db:dc:c8:d0:56:27:b7:4e:e6:8b:95:4c:79:
4b:5f:8f:bc:d1:cf:78:ab:fd:d6:13:f7:c1:c6:55:
f4:a6:2e:ec:56:54:2e:7b:be:a1:91:5b:68:74:79:
5e:b0:a6:01:14:a5:f9:4b:d3:9f:d3:63:4b:9c:32:
a5:b8:4f:4e:17:a8:c3:3c:e1:25:e3:b8:96:08:74:
46:1d:4a:4d:df:08:6d:3f:17:06:5e:9b:cd:ac:de:
b6:f5:90:a5:bf:3f:c9:56:b9:c5:f4:45:84:5f:75:
3c:fb:a9:b1:ac:c7:e3:fa:da:e7:1f:86:7a:b5:60:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3E:EF:58:35:15:BD:82:A4:5A:36:66:11:50:CA:26:D8:F4:7A:FF
X509v3 Authority Key Identifier:
keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1c:52:95:84:1e:e4:2f:84:a9:2b:a3:bd:73:fa:54:b8:05:
7b:23:a0:1b:f1:a4:92:b6:a1:28:68:dc:d8:89:ea:65:b0:17:
fe:07:9f:e9:a9:0e:7c:5f:bd:42:fe:88:ef:f5:fc:1e:ad:7a:
f2:68:42:b0:42:0c:81:c8:49:e8:72:1e:af:7e:34:be:b7:1a:
37:88:a8:4e:a5:0f:c6:02:d0:61:53:cf:94:ad:dc:06:14:63:
3b:d8:31:c1:af:bd:03:10:bd:28:9b:01:fc:16:ec:b9:3e:a8:
58:66:f3:a8:50:2b:cb:88:f0:51:e6:f1:12:ac:11:a0:18:a3:
ea:cf:d9:73:bc:a3:48:01:b5:14:f0:34:3d:b3:10:20:7c:5d:
4a:4c:19:9f:27:76:ad:c9:af:57:71:d3:b9:ea:f5:6b:24:b9:
05:b2:4a:4c:30:4b:68:6c:49:ec:ec:da:cb:22:51:ee:96:1d:
86:95:52:91:59:92:35:9c:aa:b9:aa:ad:a9:77:f5:35:2e:f8:
ec:62:7e:97:8f:94:a0:fc:13:d6:fa:c7:73:7d:9e:f8:5b:c2:
d6:b8:99:a3:a9:ad:01:a0:ef:96:c9:1b:59:81:0a:bc:09:dc:
fa:2f:77:f9:3b:f6:0a:04:1b:db:34:da:d5:7b:7c:1d:22:a3:
0c:90:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:33:15 2025 by rpki-client