Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
File: rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft (raw, json)
Hash identifier: YWXdd+zKm9bx5Myd/epQ2HBCIKdcE3ho3hILHbx0uTU=
Subject key identifier: 56:4F:08:27:0D:CF:06:56:29:35:F5:3C:92:C1:C2:CD:64:8D:E5:2F
Authority key identifier: AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9
Certificate issuer: /CN=aec5c7ab5b72181e4e4211322215e9776b4900f9
Certificate serial: 0196CB05D625212996D0518484C968B90A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
Manifest number: 0A38
Signing time: Tue 13 May 2025 19:01:19 +0000
Manifest this update: Tue 13 May 2025 19:01:19 +0000
Manifest next update: Wed 14 May 2025 19:01:19 +0000
Files and hashes: 1: rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl (hash: 6E+qEKrPX+hcMnyVDA46glnHEUtevaJPaLwymnJx8Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:d6:25:21:29:96:d0:51:84:84:c9:68:b9:0a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec5c7ab5b72181e4e4211322215e9776b4900f9
Validity
Not Before: May 13 19:01:19 2025 GMT
Not After : May 14 19:01:19 2025 GMT
Subject: CN=564f08270dcf06562935f53c92c1c2cd648de52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:ec:ec:1c:6f:af:94:da:ef:20:ef:de:13:
27:c4:0e:53:61:44:21:82:ac:d8:65:43:2f:c0:19:
b6:a5:ed:36:de:db:59:0c:db:6c:da:f8:34:24:1f:
a4:fa:3c:30:9a:3e:ae:6e:4b:35:d4:56:70:66:86:
e5:80:ba:6c:d5:46:e4:4b:d0:83:f0:bd:77:95:66:
2d:91:57:11:a4:39:5c:08:1a:90:93:62:7a:31:14:
45:e7:6c:ab:41:0c:c7:3b:26:09:2c:59:66:48:5c:
01:57:c7:cf:4a:27:cf:4b:e4:49:df:5c:2d:22:b2:
c5:9a:a4:7a:3b:9b:d2:8f:fc:96:e7:c5:bd:4c:43:
90:be:ef:e0:f2:cd:6e:69:de:00:76:c9:7c:5a:76:
38:f8:29:91:10:70:dd:ab:14:26:15:86:15:ea:1c:
aa:3d:f8:1c:81:75:3c:7f:46:35:ba:3d:7d:a5:b5:
c4:a6:a0:62:19:50:1c:e7:3a:0f:64:e4:ee:f6:ba:
c1:87:3c:95:da:4d:c8:2a:c4:2d:52:5f:0c:c6:0a:
54:75:87:f8:b6:03:1f:c1:d1:e9:76:3d:59:db:43:
3e:a2:3c:04:51:29:63:d2:4a:06:db:aa:c0:fe:f9:
89:92:fa:64:9f:36:3d:1a:8e:77:36:09:0d:38:3b:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4F:08:27:0D:CF:06:56:29:35:F5:3C:92:C1:C2:CD:64:8D:E5:2F
X509v3 Authority Key Identifier:
keyid:AE:C5:C7:AB:5B:72:18:1E:4E:42:11:32:22:15:E9:77:6B:49:00:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsXHq1tyGB5OQhEyIhXpd2tJAPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/98818d-f8b3-4645-86a8-302d92224cb2/1/rsXHq1tyGB5OQhEyIhXpd2tJAPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:99:21:e9:83:c7:e6:20:c4:e4:79:6f:66:95:fb:a1:94:ce:
2e:dd:33:e2:73:87:3f:4f:be:99:07:29:d6:08:7f:a1:e5:d7:
ce:d6:f6:ed:f8:42:0d:f4:95:05:5f:6b:f5:81:3e:85:26:ee:
b0:77:2f:3a:42:0c:38:5c:c0:8e:1a:5c:ac:83:5c:8e:55:9b:
e6:df:be:7b:09:13:ca:45:ad:e6:ca:de:0e:20:01:e3:61:93:
b0:dd:41:9f:42:5f:a7:d5:45:4e:21:9a:5e:2f:54:71:db:05:
0d:d4:e3:bc:31:0e:54:b5:75:d2:ff:42:14:d6:dd:2b:d7:f4:
ad:70:05:73:8a:f9:f0:46:92:4a:d9:a7:1d:b9:b7:65:9b:44:
5f:f4:12:86:41:0b:ff:24:fb:4e:87:4d:6a:51:58:fe:84:09:
c2:7c:a8:af:d2:fd:82:2d:d6:8c:60:df:9d:a6:5a:a6:8b:d7:
5e:31:ae:c4:d7:0d:32:a5:55:b7:32:53:10:01:96:65:29:e6:
df:b5:9d:d9:6d:1a:e7:3d:17:c0:62:04:b5:84:c1:89:5f:76:
a7:58:bc:15:10:37:62:fa:7a:0e:5d:a3:6c:a9:5a:15:a3:71:
5a:24:e1:d9:95:7b:88:02:44:10:71:fd:49:41:d2:81:e8:82:
78:62:19:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:20:24 2025 by rpki-client