Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
File: XO56utwc1TZH4rILdg1aXHqxp8w.mft (raw, json)
Hash identifier: QZHksN4ZNDByK6pnnu1r929O9v9xBMgbFXny++x70b8=
Subject key identifier: 0C:C9:31:71:17:BC:53:91:73:D0:9B:F1:40:23:C2:16:AF:58:92:5F
Authority key identifier: 5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
Certificate issuer: /CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
Certificate serial: 0196BE5CCC19ED7E46719A7D9676EF833D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
Manifest number: 21
Signing time: Sun 11 May 2025 08:01:14 +0000
Manifest this update: Sun 11 May 2025 08:01:14 +0000
Manifest next update: Mon 12 May 2025 08:01:14 +0000
Files and hashes: 1: XO56utwc1TZH4rILdg1aXHqxp8w.crl (hash: ntSYWiRrdhGQ/Xly6EJqPBF35ewl1dWeIyBduyolvLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:cc:19:ed:7e:46:71:9a:7d:96:76:ef:83:3d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc
Validity
Not Before: May 11 08:01:14 2025 GMT
Not After : May 12 08:01:14 2025 GMT
Subject: CN=0cc9317117bc539173d09bf14023c216af58925f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ff:3f:63:ff:28:52:30:f4:dc:66:71:f6:1e:
80:9f:e8:20:ef:d7:f1:90:d5:02:eb:f5:26:ea:cd:
c7:1d:4e:e5:3b:68:ef:f4:48:ba:2e:94:db:73:03:
b3:1b:59:d3:d9:f8:f0:83:10:ca:99:e6:be:88:60:
e4:d9:1f:f1:77:58:5c:c5:03:35:3f:c7:d3:74:b2:
56:53:4b:c9:c2:00:3d:6b:cf:f9:51:91:e9:a4:1f:
d9:9b:90:40:d1:6e:d3:17:9e:22:b5:a9:18:77:c8:
ad:7f:03:e8:4d:74:42:ca:e0:4c:40:56:b3:9c:66:
34:56:16:93:9e:ab:4c:94:89:f9:24:9f:a7:58:78:
d7:09:ce:6d:ec:95:df:f9:6c:94:9b:3e:17:55:5d:
89:1d:be:40:98:64:45:ba:24:4e:16:0f:d7:80:50:
9c:df:93:87:b4:43:d5:44:68:18:9d:f4:0a:be:63:
61:86:66:58:ac:a9:c3:83:4d:25:42:4e:fe:62:98:
97:58:a0:d5:7a:38:36:fd:0a:97:4f:2e:85:0d:16:
c2:c7:86:09:55:eb:2d:01:32:52:b3:72:31:ff:96:
e8:ba:69:76:88:92:4b:99:a5:6f:f4:1d:17:f0:e7:
74:08:3a:82:00:a4:11:d4:54:79:11:dd:a4:85:88:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C9:31:71:17:BC:53:91:73:D0:9B:F1:40:23:C2:16:AF:58:92:5F
X509v3 Authority Key Identifier:
keyid:5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:70:73:57:63:61:be:d2:3c:2c:81:2f:d0:46:a5:39:6d:53:
92:29:03:90:0e:da:ef:99:b1:5a:83:59:1f:bb:c6:43:4e:72:
1e:39:ac:d5:90:da:1d:f1:c6:74:bc:c4:10:b3:f8:a8:f8:fa:
28:f8:91:10:04:ec:ea:92:6f:85:c4:9b:77:0b:b5:0c:ad:d7:
e8:44:88:6b:85:a5:26:b8:46:44:2a:6b:bb:e4:5f:14:58:1a:
7d:52:61:6b:28:cd:94:15:a5:5e:6c:a6:c2:27:46:bf:7c:fa:
23:08:cb:67:9b:44:e2:86:1b:80:96:67:52:09:ec:5d:46:33:
02:a3:90:47:b6:01:77:fa:69:fa:e6:14:6d:d9:90:e7:a6:e1:
ec:cd:0f:74:b5:52:bb:90:bc:60:0e:83:13:0e:2c:b7:64:12:
27:d3:09:82:87:eb:6c:d4:96:bf:fb:01:d1:c4:24:0a:af:bc:
7c:a3:89:7d:0c:b0:bd:b3:15:db:e4:91:34:08:92:e2:3d:4e:
94:b9:52:36:54:3c:67:bf:d4:98:fa:0f:5a:fc:36:15:a1:5c:
6a:b1:79:d7:da:03:6d:b5:23:46:7d:61:9a:b7:11:ef:0b:76:
05:8f:57:57:48:ca:70:e5:e2:68:3e:1c:b5:82:bc:9a:09:56:
a5:43:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:54:33 2025 by rpki-client