Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: Gvy5j6NeUvdNmE2weSAEw+AsoUTz21l4RHd9fJ9e9uQ=
Subject key identifier: 14:DB:7D:56:37:E6:A4:B4:46:A4:2F:D9:F2:2B:51:1A:8F:6C:2A:69
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 0196C1CB02CD7F104D6B39284A01BF3B305B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 0FFB
Signing time: Mon 12 May 2025 00:00:29 +0000
Manifest this update: Mon 12 May 2025 00:00:29 +0000
Manifest next update: Tue 13 May 2025 00:00:29 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: 3gjSahHvhbSb4A/TNX5iVu0iv4PCG91EnDYssfGvcBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:02:cd:7f:10:4d:6b:39:28:4a:01:bf:3b:30:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: May 12 00:00:29 2025 GMT
Not After : May 13 00:00:29 2025 GMT
Subject: CN=14db7d5637e6a4b446a42fd9f22b511a8f6c2a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:1e:e0:77:7e:ed:99:02:d9:aa:54:7f:e2:
41:1e:a3:a9:e6:98:db:fe:b6:f3:c7:0e:f9:90:1d:
80:ae:c7:07:da:2b:2e:77:95:c4:bc:ba:e9:99:dd:
89:19:ca:2d:99:98:43:c3:ca:56:6d:43:b8:14:d7:
b2:73:a1:cc:d3:3b:10:69:f6:56:2b:8e:dd:70:87:
7d:48:67:ed:3b:72:06:c7:22:c5:c6:59:1e:da:db:
0d:bf:d4:bb:24:1b:8a:cd:28:a8:27:a6:d2:21:c5:
a2:e8:14:d0:05:01:07:87:a1:f1:29:96:05:da:e3:
5f:ac:21:c5:5c:0f:0b:3d:aa:48:70:c0:53:40:96:
f6:95:55:72:be:2e:ab:ec:84:52:76:4e:09:8c:52:
94:d1:3f:1a:53:42:a9:ce:61:dd:cf:6f:74:34:e7:
1c:8f:82:64:ef:24:f2:75:4f:04:b0:a7:9a:59:d0:
8d:2f:d7:d4:08:3c:22:22:18:06:30:4d:b3:46:05:
a3:a1:15:71:be:70:94:88:2b:f8:0c:fc:c2:ee:77:
6e:f5:f0:18:5e:f8:40:91:df:90:b1:31:90:0d:03:
42:46:12:4e:f8:c5:fc:0b:bb:34:05:a2:6f:31:85:
5c:36:25:d7:40:d7:ac:90:ae:dd:21:17:0d:97:64:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:7D:56:37:E6:A4:B4:46:A4:2F:D9:F2:2B:51:1A:8F:6C:2A:69
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8e:6b:5c:17:1b:82:3a:9d:9f:79:b6:4b:74:72:9d:d1:1f:
8b:2c:e4:2f:af:3f:89:5f:4b:58:a1:80:95:5e:90:73:d8:70:
3d:42:95:20:af:8a:50:ec:5d:de:87:16:3a:ed:ba:a6:00:67:
65:96:09:b3:a4:1c:3a:61:c3:49:db:c7:55:f3:9d:d2:76:1a:
f5:b7:04:3c:1c:d9:bb:56:f4:56:2e:e2:5b:15:64:a9:23:67:
62:af:59:c3:4b:f0:d1:5a:fc:cb:86:78:3d:ad:e0:c1:8a:08:
78:3b:9e:ce:5e:55:8e:c3:fb:e9:be:40:40:56:7f:d8:f1:80:
7e:f2:67:2e:8e:7c:cd:99:75:70:25:46:d0:31:d6:d7:ed:08:
cc:f6:ca:58:bd:b8:b5:6f:de:bc:e0:cd:d6:87:9b:44:25:b7:
3c:90:5a:18:3c:64:df:91:f0:65:d9:7e:6f:43:dc:d4:6c:4e:
de:db:ec:65:eb:10:a6:9b:82:78:89:65:ce:a8:b1:24:97:ab:
96:13:d3:0f:1d:04:0b:55:00:9a:bb:5d:f3:12:c6:2a:09:df:
0a:1a:57:fb:dc:ba:4a:93:36:e8:89:8f:f3:ef:32:ff:59:4a:
dc:dd:58:37:c2:5e:28:c8:f5:7b:ec:3c:0e:43:68:17:aa:7d:
71:b2:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:44:56 2025 by rpki-client