Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
File: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft (raw, json)
Hash identifier: ltGvQv06YFqTraa0kRRGsBM8d8cSTfFlZ6VH0CYiBuM=
Subject key identifier: 42:AE:03:A7:3B:5D:23:6A:05:F8:B4:0B:95:F0:BE:B1:60:02:61:9F
Authority key identifier: C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
Certificate issuer: /CN=c68106f44957d194020335b0bfd6077ccbcdc878
Certificate serial: 0196A1D23607986E3F97DEFED7E0DD4EB4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 19:00:30 +0000
Manifest this update: Mon 05 May 2025 19:00:30 +0000
Manifest next update: Tue 06 May 2025 19:00:30 +0000
Files and hashes: 1: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl (hash: Ut/YFx8kqiACkd/MDvNKlKFlM1jKVNdxjbn0u17T/Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:36:07:98:6e:3f:97:de:fe:d7:e0:dd:4e:b4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68106f44957d194020335b0bfd6077ccbcdc878
Validity
Not Before: May 5 19:00:30 2025 GMT
Not After : May 6 19:00:30 2025 GMT
Subject: CN=42ae03a73b5d236a05f8b40b95f0beb16002619f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:bb:27:8e:37:3a:b5:51:cd:1f:5a:38:36:
0e:93:37:15:a1:bd:86:fb:37:e2:67:d1:e5:f1:5b:
1d:a6:11:73:17:82:24:a0:8a:b6:57:f1:6f:6c:c0:
d1:c7:08:86:4a:21:5c:14:ed:07:18:5d:3c:3f:a3:
64:58:7c:20:44:ec:20:67:1a:d3:f2:0b:ff:d9:a5:
a6:2d:09:39:b3:d6:35:12:9c:fb:09:9b:5e:69:14:
57:2a:f7:9f:8d:9c:ce:e8:6d:a6:9b:37:dc:fc:26:
5d:b0:a3:5e:d0:82:85:1d:d5:c5:c8:7d:83:04:a5:
84:7c:d0:5b:af:f9:3e:06:78:be:5d:50:80:0e:c5:
23:6a:3f:4c:37:ef:60:d4:89:9e:33:f5:57:a9:2a:
7d:6b:d4:e5:19:09:8b:c1:7a:f4:3a:2c:88:fc:b4:
a9:27:77:86:28:71:8d:99:4a:17:73:62:00:79:c6:
81:46:8d:ae:e5:51:cd:97:02:88:39:75:88:46:7d:
46:60:38:d2:60:3e:33:ba:03:b2:a5:4d:88:f2:fb:
f1:86:20:ad:78:69:ac:6c:60:36:32:d0:a9:dd:b7:
aa:9d:74:55:34:a0:d8:6a:f2:f2:da:33:d1:6e:cf:
33:66:9a:d7:6b:32:b8:7a:ff:30:3b:70:89:bb:4a:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AE:03:A7:3B:5D:23:6A:05:F8:B4:0B:95:F0:BE:B1:60:02:61:9F
X509v3 Authority Key Identifier:
keyid:C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f0:7e:89:da:12:bf:9e:8e:9f:ea:01:ec:1e:02:f5:7c:49:
70:a1:38:28:c0:08:ce:6c:31:4a:95:77:94:c3:c0:78:5a:13:
40:7e:93:7b:ad:27:26:f6:34:af:12:f8:d3:33:13:7c:f1:c6:
fa:1b:07:61:f0:be:ee:a8:fb:b7:a5:e0:f2:98:0e:ad:92:12:
50:dc:78:bd:e9:35:e0:0a:74:00:c7:cf:8d:a7:8c:6b:80:a2:
d6:53:e7:a2:14:a8:0c:8d:ab:92:b8:d1:61:b7:ae:dc:1c:bc:
24:72:30:f5:24:00:1f:35:dc:df:b9:50:3c:89:fe:91:76:b0:
d6:70:f8:9f:21:0a:fa:2f:a8:df:3e:71:c1:7e:7f:47:a0:d3:
f3:fb:74:90:24:4a:11:41:3d:89:45:05:f5:65:5b:0b:3b:74:
b4:c8:84:56:70:4a:81:f1:22:58:fc:19:bd:71:4a:04:32:76:
1c:9e:92:d8:13:71:32:a8:0b:28:f2:27:bc:e8:8a:1e:44:bc:
89:24:a1:e8:35:aa:85:b1:f4:4c:c7:be:b2:cd:59:36:f5:7a:
8a:18:30:ca:00:12:bd:1e:2c:bb:e7:dd:c4:5a:92:b8:cb:98:
41:71:12:df:04:c2:dc:36:f3:e5:1a:92:38:fc:a6:51:d2:3f:
c1:2f:9b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:59:58 2025 by rpki-client