Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File: XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier: MrH89RODsrEJCyc7O4iL4B+B4QqaMlknCaW9O4Tsu8A=
Subject key identifier: 9A:48:7B:8D:17:3C:F6:84:DF:8A:FF:F2:60:D2:36:49:70:A8:A2:08
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer: /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial: 0196B82383DE546343914D2ED1E6C75ED86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 03:00:57 +0000
Manifest this update: Sat 10 May 2025 03:00:57 +0000
Manifest next update: Sun 11 May 2025 03:00:57 +0000
Files and hashes: 1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: iH/bP/QpGPeYGXovm4OmcQXIeVKivkzOGTXBlFVo9cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:83:de:54:63:43:91:4d:2e:d1:e6:c7:5e:d8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Validity
Not Before: May 10 03:00:57 2025 GMT
Not After : May 11 03:00:57 2025 GMT
Subject: CN=9a487b8d173cf684df8afff260d2364970a8a208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:27:80:e9:21:30:60:3b:36:57:fb:8a:aa:
cc:bb:58:0d:0e:16:4d:5f:ea:56:8d:9c:2d:4d:88:
29:35:c8:eb:4c:03:23:af:00:8c:45:40:20:69:6d:
25:38:40:8d:9f:fe:63:42:6b:2f:f0:d4:c3:32:99:
68:03:3b:dc:9d:99:79:06:d6:53:04:49:f5:74:f0:
54:b2:01:17:d0:15:93:02:2b:4f:ee:bd:85:fb:83:
f3:b2:a1:c6:c2:1e:18:05:a9:f0:01:f8:ee:d4:6f:
0f:4c:3b:78:e4:60:6d:d5:f6:7b:f7:c3:01:fe:4c:
62:c9:cb:5e:3c:7a:cf:91:a4:e6:a4:d2:0d:44:da:
d8:51:32:9e:25:f7:df:95:d7:62:65:72:ff:fa:c6:
53:b6:e6:26:16:07:9a:1c:ef:9e:fb:d7:86:f5:fe:
c9:73:e3:f8:b8:71:78:17:8f:d1:42:33:62:e2:b3:
92:f0:26:93:a9:8d:3e:90:4e:52:86:c3:8c:31:c8:
a8:b5:c8:af:a9:a9:07:41:92:e4:ae:00:00:c1:fe:
7e:cb:79:58:e4:2d:ba:99:15:8c:89:d1:33:c3:89:
6b:dc:79:81:3c:20:7e:54:cc:17:d1:36:03:b2:45:
66:64:dc:c6:76:65:b0:0f:1c:e1:ec:ec:e1:3f:e5:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:48:7B:8D:17:3C:F6:84:DF:8A:FF:F2:60:D2:36:49:70:A8:A2:08
X509v3 Authority Key Identifier:
keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:64:2e:0c:5f:bd:ba:07:07:37:f1:9a:d7:73:14:82:40:2a:
ac:82:d4:66:44:88:ba:1b:23:8d:99:f6:e1:00:13:a1:e5:65:
d8:05:91:7e:34:bb:82:be:57:a5:b4:08:ef:e4:ca:7a:aa:2b:
9a:a2:7e:c9:db:07:3a:0a:a8:af:51:56:73:c7:6d:69:98:18:
a8:9b:b2:54:1f:45:af:6d:f5:ee:dd:1a:d9:0d:b9:2d:85:37:
e9:fb:c9:da:52:50:1f:db:9b:bb:90:fc:6a:69:e1:d2:5f:e6:
70:76:c4:62:63:55:19:9b:fc:1c:0e:35:3e:80:c6:0a:ff:c2:
b8:4f:57:58:14:c4:1f:15:30:71:78:6a:10:f8:d4:ed:d7:b6:
bd:b8:60:57:a7:1e:a4:8c:f8:51:d8:7e:ef:15:cf:06:28:07:
dc:54:52:a2:1f:5e:e0:7f:a4:c8:d8:f4:c5:aa:a2:ac:93:5d:
fd:8d:de:0d:41:21:99:ef:49:64:e6:ba:f7:13:20:14:44:31:
2e:dd:13:b0:87:08:d6:a0:4b:9e:b3:dc:f7:f2:1f:7a:7b:0d:
4d:3f:7d:9c:bd:8e:0f:87:3d:39:e8:9f:b3:a7:20:e2:6d:1e:
9c:71:cb:0f:8b:f4:09:87:bf:81:a3:ed:2a:bd:1b:68:b8:c0:
a2:d2:46:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:36:28 2025 by rpki-client