Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
File: X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json)
Hash identifier: Z+XdMQxCi9dIx9TKnyjjvPng6WzA10ZZEP3Vs4+TuU8=
Subject key identifier: 0D:47:28:27:18:4A:4D:A0:04:7B:92:62:BA:7F:19:FC:E8:9C:20:8E
Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
Certificate issuer: /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Certificate serial: 0196B4B4BD73D7F0DC4514B105FB81C7A720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
Manifest number: 152C
Signing time: Fri 09 May 2025 11:01:05 +0000
Manifest this update: Fri 09 May 2025 11:01:05 +0000
Manifest next update: Sat 10 May 2025 11:01:05 +0000
Files and hashes: 1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: zE40aksrfHCwDvG2SjmFj5xkrASTFXvpXuT1xxA4Zow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:bd:73:d7:f0:dc:45:14:b1:05:fb:81:c7:a7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Validity
Not Before: May 9 11:01:05 2025 GMT
Not After : May 10 11:01:05 2025 GMT
Subject: CN=0d472827184a4da0047b9262ba7f19fce89c208e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:c5:99:c2:79:01:d8:d4:59:c2:29:c6:83:
e0:31:4a:3e:5e:d2:1b:86:b5:35:77:b0:40:38:85:
a4:cd:c4:f9:4e:56:de:97:87:e3:1d:1c:4a:8d:d5:
f6:96:99:58:44:da:03:81:bb:bc:67:9c:e1:74:33:
20:e4:85:3d:2c:49:9f:5b:93:b6:d1:22:07:fa:88:
27:fd:f9:8f:d3:3f:ce:d5:08:93:6b:f4:97:6b:fe:
3f:81:67:aa:ea:63:4b:ee:45:ab:f0:b4:35:fb:ff:
e9:c9:6e:29:61:90:e9:71:50:61:83:1d:7a:cc:f9:
30:a8:37:74:6e:e3:10:88:a6:1b:e5:c5:be:1f:ee:
00:fc:f7:f0:c3:68:55:82:9f:f5:e9:e6:33:cd:e0:
51:cf:97:0f:09:8a:a7:bd:0a:1d:d3:03:95:9d:94:
04:c2:b8:87:7d:05:60:2a:a1:8a:20:87:4b:45:b3:
40:3b:15:4d:53:a2:48:e8:f7:80:4f:69:28:ba:ad:
8f:8a:ea:f6:b2:44:71:ac:d0:b3:ec:b2:08:a6:30:
72:70:37:94:e2:9f:55:ed:3f:3b:34:6a:1b:d1:87:
5e:cb:e2:5e:f6:95:fc:37:30:ae:e5:18:d6:79:d8:
bb:2a:c8:dc:c9:1c:9e:8e:94:50:98:c4:e4:89:0c:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:47:28:27:18:4A:4D:A0:04:7B:92:62:BA:7F:19:FC:E8:9C:20:8E
X509v3 Authority Key Identifier:
keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e8:9c:93:3c:2b:2a:98:85:a1:a6:d0:57:fa:7e:c1:cb:e1:
ee:8c:5e:31:37:36:28:53:a3:91:89:6e:9f:bf:81:d6:4a:34:
a0:27:42:5f:bb:d3:56:45:a2:4b:33:91:d4:3c:cf:a4:1b:55:
36:45:62:86:cd:84:d8:bb:88:02:14:fb:f0:bb:bb:4d:4c:35:
f3:0b:c9:ee:e1:1f:6a:2a:bf:79:f6:74:6f:20:9a:30:68:bf:
4b:20:95:5b:65:dd:bd:7a:e2:bd:e2:8d:09:02:c9:3f:8a:52:
4d:fa:c3:0c:0a:fa:4a:07:cb:f5:4a:e4:0b:4e:88:77:e8:33:
61:36:2f:3b:68:d6:83:36:ba:3d:d0:ed:3c:5c:fe:db:0f:c2:
8b:88:a5:99:00:a0:36:44:67:bf:1c:5c:55:74:b7:ee:7c:de:
ac:58:3e:17:60:56:4e:17:f3:16:3a:47:68:79:d4:aa:99:28:
7f:0b:c8:e1:0d:55:23:0d:2d:f0:02:09:6b:55:8c:c6:d9:d8:
dc:a7:2a:e6:6f:fd:f8:c0:a1:1b:f8:8a:a1:9e:0b:84:25:10:
05:8e:d4:3f:12:e0:26:ad:20:41:02:ed:5a:22:cf:3b:92:50:
5f:02:6a:ed:16:e5:ea:fe:0f:ff:8c:d4:d7:5c:25:66:e3:5e:
66:72:b0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:34:36 2025 by rpki-client