Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json)
Hash identifier: HBELjjdvbP2dkve6RtdWZMN915AY+91pG2B9JnB3EWc=
Subject key identifier: DC:0D:4E:7C:55:8E:9C:72:49:B0:3A:7F:2A:D4:E0:12:83:0C:34:C1
Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1
Certificate serial: 0196DAE638FA199561731A2B95F4A47A557B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
Manifest number: 0D6D
Signing time: Fri 16 May 2025 21:00:43 +0000
Manifest this update: Fri 16 May 2025 21:00:43 +0000
Manifest next update: Sat 17 May 2025 21:00:43 +0000
Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: RPzjrRzEkXoBhCubHtBapdCABnQLPyR0Z/Z3ye7hrh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:e6:38:fa:19:95:61:73:1a:2b:95:f4:a4:7a:55:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1
Validity
Not Before: May 16 21:00:43 2025 GMT
Not After : May 17 21:00:43 2025 GMT
Subject: CN=dc0d4e7c558e9c7249b03a7f2ad4e012830c34c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:f2:c9:56:a3:2a:3b:3b:47:9b:04:ff:f1:
86:dd:f9:77:82:ca:bc:41:9f:8d:ea:d4:4d:f0:f9:
94:d6:f9:07:03:ee:02:03:86:de:74:1c:d1:d5:f0:
5c:00:86:81:1d:84:07:c2:54:df:fd:f7:29:cf:b1:
18:ef:36:bc:97:60:15:f4:b2:92:e9:c0:0b:64:18:
4a:c4:6e:f1:bb:fe:12:c0:67:0d:5e:f7:15:a5:9c:
bf:40:f1:8e:af:4c:df:f4:0d:cf:86:83:c3:68:f4:
0c:34:30:3f:58:09:08:0b:02:aa:1c:5e:dd:89:f9:
13:21:33:6a:a3:2e:0f:2d:f8:aa:52:05:64:80:37:
c0:88:75:ff:7a:25:28:07:43:6a:ab:9d:68:7b:c3:
e6:8c:c4:74:82:57:59:6e:d8:c7:b1:52:db:ea:68:
58:bd:84:27:05:8d:da:58:fa:03:d5:70:bd:bd:bb:
ae:9d:bc:12:48:af:95:4b:1d:71:9f:d0:31:a4:61:
fb:80:04:78:a2:7c:e2:9c:fb:88:f4:bb:7e:be:95:
49:c2:a4:34:2c:65:17:0f:3a:97:8e:1f:39:4c:61:
d0:15:10:84:77:6d:78:79:a1:6c:81:9b:89:c4:2e:
fd:68:da:e4:86:0b:e2:a3:01:4e:cc:37:4c:2c:83:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0D:4E:7C:55:8E:9C:72:49:B0:3A:7F:2A:D4:E0:12:83:0C:34:C1
X509v3 Authority Key Identifier:
keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:37:5f:58:27:7f:5c:7d:08:2c:03:47:fd:88:0c:82:d4:e4:
d2:bf:5e:1a:63:1b:9a:15:26:ee:45:e9:c9:2b:f5:4c:f4:11:
86:27:c2:a4:a5:e3:a5:a3:20:f4:1f:67:6d:1e:f3:81:d8:46:
02:fa:04:4e:97:8d:49:5e:9c:1e:cb:72:f9:09:a0:13:03:63:
26:2f:4b:15:8a:9b:4f:59:80:51:05:0f:5d:1e:d2:37:e7:1e:
9a:64:b4:01:18:c8:a0:3d:eb:b9:34:a0:ad:9f:c6:32:bd:00:
ce:1d:66:2c:36:e3:67:e4:74:4b:67:7d:90:da:fe:38:1c:50:
20:5c:6b:32:2d:88:25:92:cd:9a:f1:26:2c:b6:c1:bb:2a:eb:
20:12:79:fd:75:8f:53:d1:0f:48:d3:a0:41:9a:be:60:9d:4f:
04:35:03:e4:74:d6:6b:f1:00:36:8a:ab:7a:e9:55:f2:c7:2f:
19:8b:c3:97:d7:ca:c9:73:b8:44:d1:22:98:8f:c5:39:d2:3f:
b7:63:9c:15:8e:66:3b:4d:76:14:47:6f:78:fa:1d:a6:9d:27:
62:1e:2e:f1:82:d4:5f:2e:3c:3e:b0:73:2f:0e:b9:56:5c:d9:
01:9a:65:fc:a7:27:db:51:ed:90:82:d3:82:a5:96:bb:70:5e:
54:39:b2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:10:29 2025 by rpki-client