Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: 9cDxD/3d5jrOxMEzcWcU+TgxbHgozCZH/SNUF5GATPQ=
Subject key identifier: 63:F8:9C:6F:D7:16:E7:CA:7A:42:95:67:7B:19:8A:42:44:13:9E:74
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 0196C0141DD850F0FCA2482AE4D188AF9364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 0947
Signing time: Sun 11 May 2025 16:01:05 +0000
Manifest this update: Sun 11 May 2025 16:01:05 +0000
Manifest next update: Mon 12 May 2025 16:01:05 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: DDgeZayo3XgKaROxrqcEUKzXvfVhzLlf9xQTh9B3WwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:1d:d8:50:f0:fc:a2:48:2a:e4:d1:88:af:93:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: May 11 16:01:05 2025 GMT
Not After : May 12 16:01:05 2025 GMT
Subject: CN=63f89c6fd716e7ca7a4295677b198a4244139e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:fe:41:2b:28:b7:c9:83:d1:2b:08:e1:aa:
b8:84:2a:dd:4a:51:39:1a:3b:45:55:93:07:d3:21:
29:6e:91:69:fe:ab:6c:26:4c:f0:c3:06:06:dc:ba:
99:a1:2e:f0:d2:fd:8e:62:67:91:7c:20:b5:6f:7b:
c5:52:02:9e:51:96:7c:1c:54:4c:3c:de:18:e8:c7:
89:7f:9a:f6:c9:1d:44:53:94:50:9f:68:a2:cf:f1:
71:94:73:38:72:62:0a:b7:17:b5:4c:af:a2:0c:c7:
42:72:e7:90:d6:99:60:36:fc:f2:4e:e6:97:2c:b8:
ad:bc:08:7c:3a:46:7c:b5:dc:c1:a7:e7:11:99:2c:
85:f0:db:6e:31:60:ba:fc:cd:d5:cc:93:1a:b3:58:
b4:8d:25:ee:3f:63:6f:5f:41:e5:a5:e8:29:4f:9b:
28:d2:ed:90:d7:f0:a6:f9:73:2a:0c:9b:62:43:f6:
bb:a2:51:28:ce:bc:26:fb:86:99:21:60:2e:40:65:
c5:a0:64:cd:e6:d3:d8:a0:a4:2f:fd:6f:aa:db:2b:
b6:39:29:27:31:7d:e5:b6:fa:45:f6:d1:9a:0d:e1:
ed:e8:71:72:3d:b3:1a:ac:ea:4b:c4:91:34:67:ba:
dd:04:31:01:8d:5c:8f:f3:e7:5d:3f:13:f1:f7:e6:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F8:9C:6F:D7:16:E7:CA:7A:42:95:67:7B:19:8A:42:44:13:9E:74
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:03:93:9e:5e:78:63:62:aa:ad:8a:ba:75:1d:25:40:00:7d:
6f:0c:06:b6:2a:df:0d:5b:c6:06:1b:e8:f4:c2:4e:fb:7e:85:
be:b3:bf:5c:9e:9c:35:0a:71:dc:c4:c5:96:9f:59:e7:c2:96:
07:cc:ec:93:f1:18:0b:b6:f9:90:ac:3c:8c:0f:1c:8f:d4:6d:
0a:a0:c0:8a:48:f5:93:4f:45:5c:bf:81:8f:60:83:85:a4:73:
11:8c:a0:ce:05:e9:7b:6e:b2:4b:7e:15:5f:0c:63:eb:d5:42:
d3:3c:5e:4a:76:f1:50:99:45:34:63:fd:22:99:83:62:97:2e:
3f:85:af:4f:b0:dc:ec:a2:ea:db:0b:61:2d:0e:34:af:aa:a5:
01:94:ec:6f:0c:e3:19:f0:96:30:4c:2c:70:d6:26:d0:68:7c:
13:92:95:e4:76:06:46:a1:ee:b7:a2:b4:9b:6d:47:56:50:f1:
e0:da:a1:ba:0e:d8:71:0e:fb:62:b0:45:79:e6:46:70:c7:4e:
aa:94:6f:c0:26:4d:2c:80:71:c8:84:97:53:9e:83:17:ec:dd:
76:f2:e1:c5:09:40:29:e3:bf:fa:73:fb:71:76:ed:b8:48:84:
ed:ad:7c:41:a7:f0:0c:4e:b0:11:49:46:76:f2:f7:ec:50:97:
a9:41:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:57:14 2025 by rpki-client