Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File: xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier: R0iqfpKx/DJEXANnmLw2RguyoPMRozv6F0qSgzXYZJE=
Subject key identifier: FE:F3:97:C9:E1:77:94:01:F3:00:54:C0:FB:34:88:A3:99:D3:0B:F7
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer: /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial: 0196C7CD23C38B52433C18512D267C1D5B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number: 0533
Signing time: Tue 13 May 2025 04:00:31 +0000
Manifest this update: Tue 13 May 2025 04:00:31 +0000
Manifest next update: Wed 14 May 2025 04:00:31 +0000
Files and hashes: 1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: X88HbCF1VmZ+w9mE0MMAnBzV7WdfH4Ny+49tfcErvH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:23:c3:8b:52:43:3c:18:51:2d:26:7c:1d:5b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
Validity
Not Before: May 13 04:00:31 2025 GMT
Not After : May 14 04:00:31 2025 GMT
Subject: CN=fef397c9e1779401f30054c0fb3488a399d30bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e1:4d:68:fb:d8:2e:00:cd:cb:52:e9:4d:2f:
f5:54:c3:6a:b4:90:f2:69:91:bb:19:bb:60:7a:35:
22:d5:42:08:24:f4:5f:df:4b:2a:38:12:22:4b:85:
46:57:07:23:f0:e4:d7:fd:59:8d:72:f3:6d:3f:e0:
95:d7:33:89:00:61:ec:d6:7d:36:11:a6:ee:39:f0:
23:c3:3b:c8:e1:6c:6f:00:f1:36:f0:8f:5d:30:8b:
cd:ae:3b:93:b6:cc:bc:04:a1:09:23:61:0c:0b:e8:
ce:c8:bf:c6:cd:40:14:19:6e:da:31:70:95:b9:4f:
7a:73:c9:4b:e3:ea:4e:c7:d2:13:4b:a4:ba:2c:2f:
52:4a:ab:2f:79:91:28:d7:88:3a:a0:bb:51:14:5c:
2f:d9:ed:60:d4:e5:68:d3:2c:45:1c:ad:ad:04:9a:
39:ff:79:64:5f:81:99:66:38:4f:a0:17:9b:e0:78:
36:4a:70:e2:e9:7c:05:10:2b:9f:08:c1:aa:34:8c:
ce:aa:4d:f5:b8:d5:69:52:d8:d3:ae:91:38:d0:d2:
04:4b:5c:d3:ce:2e:b3:b4:b7:cf:f7:30:28:3a:df:
ab:b6:d9:ec:25:3e:58:6a:35:29:5b:65:b8:7e:1b:
9d:43:c5:19:97:cf:84:2f:e9:e8:35:5d:a0:f8:90:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F3:97:C9:E1:77:94:01:F3:00:54:C0:FB:34:88:A3:99:D3:0B:F7
X509v3 Authority Key Identifier:
keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6e:e5:91:f0:e9:ca:39:2f:89:fb:8f:e7:f6:32:ec:85:20:
5e:cd:b4:64:da:4c:37:76:66:a4:fd:76:fe:38:d2:9c:d3:ef:
6b:1b:6d:c7:d6:4d:4b:b3:7c:ac:92:74:3c:e8:e5:8a:45:a6:
45:e9:28:92:e2:f8:70:ff:3c:cb:ce:09:00:7e:0e:a4:44:94:
5e:8b:15:b3:e6:4c:35:02:22:14:4f:36:17:ee:ae:b2:b8:9f:
92:7e:75:a2:57:25:e3:5f:3e:a3:f2:77:3a:61:70:42:85:45:
d8:2f:85:3c:07:78:34:30:5c:a5:a3:cb:e6:63:34:32:50:1b:
05:6a:ff:bb:fd:21:3f:47:5d:f9:14:48:41:b1:55:21:ef:37:
4d:60:08:93:d2:91:4a:1b:4b:0a:dd:5e:80:95:25:6e:36:96:
4a:60:b7:22:30:34:37:c1:51:7d:9f:9c:b4:bc:c9:cd:96:f1:
fc:0c:22:48:0d:69:67:df:e0:da:c4:01:1f:64:59:b0:7e:42:
8a:d3:ab:0f:10:d7:d9:09:22:0d:0b:e5:03:8d:91:8d:fa:8e:
7b:cb:0f:bf:5e:c1:81:f8:22:fc:20:15:56:79:14:87:75:99:
b9:6d:81:10:9b:dd:34:ed:64:0d:9c:ee:3d:f6:11:f4:f1:48:
d9:cd:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:41:46 2025 by rpki-client