Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier: /ZBx2g4rilGjmTi/LcZojErfVa4y6CN3ZnjYmhBe6U0=
Subject key identifier: F3:60:05:82:E1:A8:E7:FD:1E:52:CA:D9:63:17:F6:61:7E:D2:38:79
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial: 0196C125FB4F710C319AE2884921F0FC0B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number: 08A9
Signing time: Sun 11 May 2025 21:00:13 +0000
Manifest this update: Sun 11 May 2025 21:00:13 +0000
Manifest next update: Mon 12 May 2025 21:00:13 +0000
Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: T6s/Jb4EcbjZxJbIOv8VMYacRo0DntiWMWgWBdVsTQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:25:fb:4f:71:0c:31:9a:e2:88:49:21:f0:fc:0b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Validity
Not Before: May 11 21:00:13 2025 GMT
Not After : May 12 21:00:13 2025 GMT
Subject: CN=f3600582e1a8e7fd1e52cad96317f6617ed23879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:4f:d9:35:75:60:00:aa:fc:e3:7e:cb:58:
01:56:12:e6:52:30:04:03:8f:4f:c6:3f:e9:07:57:
d6:9e:94:43:df:18:20:49:df:d2:7d:f0:31:d1:2e:
9e:b4:b7:0b:80:ed:ed:90:7f:86:2d:fb:86:41:77:
f6:fc:00:89:2d:0a:08:3b:08:c3:4b:47:77:f0:57:
fd:d6:ba:43:37:2c:67:24:51:34:44:5d:12:83:6d:
c4:69:c4:76:ad:c5:43:26:62:80:b1:a9:b1:d0:be:
9d:95:4e:b0:ab:5e:44:fd:88:d1:1e:fe:24:31:52:
26:12:b5:8b:e4:b9:cf:a0:d4:ea:29:a3:42:50:6b:
b3:e9:56:97:f3:32:53:06:28:17:62:1e:cd:89:4e:
7f:5e:fa:ae:ca:e6:f6:e5:e8:a4:b7:fb:f0:ec:8a:
a4:de:c1:18:66:56:60:ea:c5:ca:ed:57:7b:1e:9a:
35:0b:d1:10:71:5c:33:f7:48:85:5c:f1:b8:56:0f:
ba:10:3a:fa:94:65:a1:3b:5d:af:2b:3d:bc:f0:91:
50:f9:ae:97:4c:11:78:1b:18:dd:37:6a:ef:8e:8d:
3c:00:22:75:64:5c:18:56:6b:ad:70:5c:2d:2e:c2:
7c:19:fc:a3:2c:96:05:65:9e:99:12:19:61:04:f5:
6e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:60:05:82:E1:A8:E7:FD:1E:52:CA:D9:63:17:F6:61:7E:D2:38:79
X509v3 Authority Key Identifier:
keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:51:b9:c8:fd:10:f4:f3:18:2b:a5:e6:4a:c9:8a:45:d4:94:
12:ca:35:29:bc:ba:fa:83:f2:4b:5b:4c:a3:da:75:aa:2b:5a:
93:b0:44:d7:37:c1:81:a6:9c:10:0d:65:c6:c4:9c:dd:7f:f9:
ff:1c:9d:94:84:2b:fa:a7:09:c0:f8:9b:46:43:78:14:2e:b2:
ec:49:9a:46:40:5e:9c:9d:d2:0b:db:b0:65:4d:b6:fd:ec:61:
07:17:03:9b:4f:57:f7:74:72:ab:9b:bf:e8:64:43:f6:ce:da:
00:82:88:c9:8d:97:9d:e8:9b:ad:09:9a:25:9c:34:d7:af:be:
9a:5a:3f:2f:ef:48:e3:b0:06:fc:48:a7:6b:f5:8f:85:7e:b7:
93:3e:db:e8:49:8f:2c:90:e9:0c:4d:6e:13:14:fc:85:f6:bd:
e9:51:80:4e:d4:48:ec:05:6e:63:0b:3c:3d:b2:ba:07:f5:ed:
a3:ac:64:b9:6d:98:e3:24:00:fd:5b:b3:28:9a:dd:60:e8:e9:
69:ee:f8:d9:98:19:b2:ed:62:19:23:ff:cf:1b:f5:c5:e7:34:
ae:74:28:7f:7c:ef:87:bc:77:9a:48:4f:1f:57:32:63:31:01:
2d:33:7c:fb:76:a1:62:51:55:87:08:f6:41:cb:6d:3b:9c:a5:
f7:4f:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:18:40 2025 by rpki-client