Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
File: xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft (raw, json)
Hash identifier: y+TLsi5iivBSgj3ZPtWFXzbFWy5utyg/HcG12FeeKC0=
Subject key identifier: F4:0B:B5:F2:BC:EE:A9:96:DF:A2:32:99:81:14:1C:4F:7C:37:C4:FE
Authority key identifier: C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
Certificate issuer: /CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Certificate serial: 0196DC6695018D29DFEAB7216ACAB649651C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
Manifest number: 0CA2
Signing time: Sat 17 May 2025 04:00:32 +0000
Manifest this update: Sat 17 May 2025 04:00:32 +0000
Manifest next update: Sun 18 May 2025 04:00:32 +0000
Files and hashes: 1: xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl (hash: F4/Q09ZqyUKlS8v2REDHsnyaW321R7FLC8vWpFpwjis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:66:95:01:8d:29:df:ea:b7:21:6a:ca:b6:49:65:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a
Validity
Not Before: May 17 04:00:32 2025 GMT
Not After : May 18 04:00:32 2025 GMT
Subject: CN=f40bb5f2bceea996dfa2329981141c4f7c37c4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:2a:91:a4:36:a6:34:7e:f5:06:b0:b3:f2:
fa:8c:df:c3:24:04:e0:db:ad:e4:d3:88:f7:6d:8a:
10:8e:a3:43:a6:f2:53:1b:ed:4a:01:f3:87:9e:22:
40:0e:17:72:fa:a1:e0:cf:7d:61:07:7d:0a:8a:40:
87:8c:b0:35:07:8c:55:47:af:83:c0:2a:f9:58:b5:
e3:ef:2e:8a:d1:26:8d:e5:c3:92:49:5f:71:42:b9:
e9:50:e1:f7:e9:b9:c6:78:ea:d1:58:39:09:96:96:
55:0d:27:2e:ca:9d:18:3d:c2:b4:f3:77:8b:39:44:
cd:e1:6f:6d:0c:47:5b:6e:49:15:78:17:54:cb:97:
61:06:0c:8e:86:6a:d9:e1:21:ce:4c:1d:71:64:8b:
2e:2f:14:e6:f3:58:8e:24:58:9e:c5:d0:16:16:0d:
2e:d6:18:e6:e8:56:33:d3:d1:af:2b:ca:95:cb:16:
6c:f6:75:cc:aa:3d:f0:9a:21:e8:82:11:34:2b:58:
be:48:2d:a8:66:fb:fc:03:95:f6:3b:3a:f5:0b:ea:
cf:cc:73:97:b6:23:4c:3e:d8:86:57:46:d0:0a:32:
bb:61:3d:20:d5:9a:78:d7:61:55:55:ca:f1:51:ee:
b6:03:ef:7a:26:f5:d1:21:c6:64:96:08:2c:e4:e6:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0B:B5:F2:BC:EE:A9:96:DF:A2:32:99:81:14:1C:4F:7C:37:C4:FE
X509v3 Authority Key Identifier:
keyid:C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3a:c5:b6:3a:14:e3:c9:49:97:c5:59:a4:2c:4c:51:b7:52:
b3:67:c4:e2:2b:cd:cf:0f:1e:15:a5:d1:14:0a:0f:68:32:3b:
34:15:63:f4:7f:f3:2f:e4:29:01:e0:3b:a3:0c:f4:e1:a2:12:
32:55:da:49:6a:42:6a:53:44:81:fc:20:6f:cf:34:19:af:d5:
d6:9f:b7:b3:b6:b0:47:22:dc:65:34:c6:f1:8a:90:29:13:44:
df:0d:f4:da:80:24:37:e7:52:31:9c:7f:4c:54:ad:c3:95:97:
83:d4:b2:6c:3f:9e:ca:86:ef:cb:5d:de:d1:fe:43:21:51:71:
4d:3d:e7:34:33:8a:15:ed:30:51:c0:3e:13:82:ce:46:f6:4c:
7c:08:63:4f:8e:f8:3d:a6:1b:b0:d3:f3:11:26:5a:52:b0:2b:
de:95:dd:ec:b4:68:54:0d:98:ad:f0:42:8a:95:79:b1:94:29:
e9:26:79:db:71:16:47:41:b5:06:09:3b:74:ad:8a:66:45:92:
11:3d:06:3f:9a:d7:aa:c8:d2:59:63:18:59:09:80:d8:8a:36:
dd:95:4d:88:26:ff:66:06:a3:ec:7d:e0:02:7c:e8:7d:cb:ce:
a0:70:a6:b5:98:bf:fa:85:86:f4:7b:39:1a:2d:64:a0:c6:f0:
86:23:54:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:34:03 2025 by rpki-client