Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File: XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier: MlAddKniK35t2SzdD7zAV/QKjwtPQ3YFd+lg2mo5X2E=
Subject key identifier: D1:10:B6:75:4D:3B:0D:C8:6C:CC:58:5C:1E:EE:98:78:3E:D3:E0:6D
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 0196B89106B058106D347C6B9CD6039294E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number: 0798
Signing time: Sat 10 May 2025 05:00:34 +0000
Manifest this update: Sat 10 May 2025 05:00:34 +0000
Manifest next update: Sun 11 May 2025 05:00:34 +0000
Files and hashes: 1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: qUIOQzexv5ufmMCEEoUaJTI0ZI4XOPm24yKSahZXXbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:06:b0:58:10:6d:34:7c:6b:9c:d6:03:92:94:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: May 10 05:00:34 2025 GMT
Not After : May 11 05:00:34 2025 GMT
Subject: CN=d110b6754d3b0dc86ccc585c1eee98783ed3e06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:a6:ce:b2:60:af:9e:ed:6f:a9:fb:06:fd:
6e:ae:d3:1b:b8:ab:b3:87:da:fb:65:f5:26:b6:3c:
df:8b:83:77:15:02:e3:30:67:31:e8:0d:15:ee:53:
be:e4:d8:89:a4:4a:42:55:a0:1a:43:63:ee:6a:cc:
b6:97:01:eb:11:6c:b7:bf:4b:a8:c4:de:cf:0b:ec:
10:49:70:a1:5e:29:4c:66:eb:8f:f6:75:7a:36:76:
34:1c:79:1b:1e:eb:4d:a8:8b:fb:eb:48:79:08:16:
ec:82:ef:17:31:22:f6:cb:71:49:ef:cd:15:11:92:
d7:7f:c6:56:57:00:16:16:5d:46:c5:76:06:4b:b7:
95:5f:b8:e1:03:75:b2:21:28:38:23:d7:62:91:21:
93:ec:27:13:46:a4:7b:bf:e7:97:f4:a3:56:2f:8d:
4b:9c:e4:1d:37:58:8f:05:d5:f2:d4:3a:40:0c:11:
dc:02:f4:64:75:7b:1c:74:ba:5e:53:a4:14:9b:a9:
51:63:f8:26:50:be:f6:3f:b7:35:26:25:59:da:4a:
da:21:53:df:2b:0a:6f:fb:32:9e:a2:72:9e:6f:bf:
19:cd:bb:43:d9:22:58:ae:f0:46:63:4c:1f:b2:35:
34:94:18:a1:03:d6:85:29:41:a7:fa:73:15:3c:53:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:10:B6:75:4D:3B:0D:C8:6C:CC:58:5C:1E:EE:98:78:3E:D3:E0:6D
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:44:4d:11:15:38:1d:19:f8:96:c0:d1:d4:ab:51:3b:a4:05:
cb:c4:fd:bf:14:9e:f7:3d:67:64:aa:dc:76:2b:60:5f:6a:90:
4c:b4:bf:5a:7b:63:47:9e:be:51:b5:0e:3a:23:f9:ef:f0:22:
11:be:37:b0:01:b3:0a:50:ab:72:4e:ad:ca:76:41:82:a1:aa:
73:a1:a4:d7:12:51:50:9e:eb:d6:b5:56:fe:ff:71:25:a8:ab:
56:f3:c4:ef:a8:67:39:fc:85:99:62:8d:ca:58:30:44:ff:9d:
5f:44:f3:d4:f6:f0:6c:61:fa:4f:c4:5c:a3:ef:c6:11:72:3e:
8d:8c:97:5d:8a:1c:d0:e2:02:89:8b:a2:29:50:49:17:fd:ae:
51:f4:9b:dd:5f:79:32:82:7f:13:35:da:62:1c:f8:d6:87:63:
db:18:b6:b9:a6:f8:15:10:c7:65:93:ef:f6:13:e6:86:4c:c8:
fb:57:0c:6c:82:a4:4c:2a:f6:bb:4b:d7:7a:e7:ed:60:51:51:
b0:98:e4:c4:8c:c3:9c:ab:16:bf:c8:a6:67:57:3e:01:f8:ef:
1f:43:bd:99:1f:c8:80:38:20:e6:a7:75:34:c4:7e:0d:46:85:
83:e9:f6:3d:6b:31:b7:5a:e3:e5:65:92:c6:cc:97:19:50:16:
8c:76:bb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:57:33 2025 by rpki-client