Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
File: xlkRwmkydt2NDOt_hKoqtJ79EIk.mft (raw, json)
Hash identifier: A91FCUXzCodmfumtgF/2/2GvtTi0UNBRZbMdewSK3lc=
Subject key identifier: 9F:55:FA:08:0D:7B:4B:1F:83:99:8E:3C:48:89:58:2A:EC:29:2A:B6
Authority key identifier: C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
Certificate issuer: /CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Certificate serial: 0196C427420CB4C0CD7EB699F482485F0430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
Manifest number: 0334
Signing time: Mon 12 May 2025 11:00:29 +0000
Manifest this update: Mon 12 May 2025 11:00:29 +0000
Manifest next update: Tue 13 May 2025 11:00:29 +0000
Files and hashes: 1: xlkRwmkydt2NDOt_hKoqtJ79EIk.crl (hash: CRAU8aSeqEf6H1a5f/c9m6/UDpVk52pT4uTUpZu5/yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:42:0c:b4:c0:cd:7e:b6:99:f4:82:48:5f:04:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Validity
Not Before: May 12 11:00:29 2025 GMT
Not After : May 13 11:00:29 2025 GMT
Subject: CN=9f55fa080d7b4b1f83998e3c4889582aec292ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:87:52:d8:70:85:aa:91:1c:1e:77:0c:35:
cf:e7:85:b4:b5:3f:04:d1:52:d3:19:8f:d7:77:a9:
af:40:cc:fd:97:7f:ba:4c:a8:ea:4b:c1:fe:9b:02:
31:11:a2:f3:f7:04:78:83:77:6a:26:4a:9f:a1:3b:
21:90:70:6c:08:17:51:e8:72:a7:a3:8f:73:7e:f6:
a6:6b:fa:f8:95:29:13:37:94:38:8d:4a:01:8d:40:
be:ff:64:16:5e:d1:13:7c:33:e1:9a:df:9f:41:bc:
cd:e1:5f:52:d9:25:c4:98:80:fb:c3:18:5f:a0:cf:
af:17:2b:a1:a9:2e:0c:1c:7c:41:50:49:25:17:1c:
63:ee:4e:ce:38:40:b4:e6:45:5f:3a:a5:a8:9b:a8:
04:a4:c2:25:a3:0a:f7:0c:bd:8c:b6:3e:47:dc:8a:
69:bc:8b:2b:a8:46:8a:ef:82:8f:5d:55:78:db:09:
9c:96:fb:df:61:45:4b:37:2f:8d:3d:80:94:d3:22:
a5:b1:38:1d:bb:97:54:c9:e4:92:f4:6c:50:0c:d0:
64:e8:81:93:fc:ed:b8:1e:99:3e:0b:c9:07:8c:e9:
89:06:81:e3:75:69:0c:25:3f:2f:21:9b:0b:84:17:
d2:c4:72:30:8f:6c:4e:fe:65:c2:c2:37:08:1b:76:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:55:FA:08:0D:7B:4B:1F:83:99:8E:3C:48:89:58:2A:EC:29:2A:B6
X509v3 Authority Key Identifier:
keyid:C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d3:21:6b:55:02:c1:e6:5c:4a:63:4b:4b:44:13:85:f2:d1:
1f:ca:68:5a:16:19:a9:04:bd:22:ab:e8:65:75:90:55:cf:b3:
dd:41:44:b8:fc:f7:14:82:b8:9e:19:ad:01:a8:b9:d0:be:86:
00:43:70:c1:f0:10:c5:f4:6a:13:a5:b5:81:0f:4e:92:4e:19:
4b:b7:f7:19:27:2d:42:4c:02:5f:9c:45:39:79:9c:44:d6:07:
8c:6d:96:b8:08:14:6d:72:0b:f8:24:c9:a5:e6:6a:19:7e:0a:
af:7f:b2:3c:1d:80:16:63:21:76:a6:49:de:17:2c:8d:74:59:
ac:8b:b2:db:8e:b4:13:73:3a:d3:58:38:a0:04:80:8c:d4:f3:
a6:bb:32:9d:55:05:c8:15:84:d2:60:29:28:3a:44:ff:9c:a4:
33:5e:89:2c:18:e6:d3:c0:f4:3c:cc:d8:2f:fe:c5:78:ab:8e:
7b:c7:2b:38:87:30:6c:87:42:98:1c:4f:95:eb:b7:32:9a:b1:
c0:63:a1:aa:14:c7:ee:b2:51:ba:64:92:d9:65:41:1d:af:8c:
ba:62:6e:b7:79:24:49:13:94:e7:b9:37:fd:d6:26:47:ef:43:
34:6c:47:37:9c:12:a6:70:52:12:6d:24:c7:75:4a:da:c7:62:
ab:15:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:39:32 2025 by rpki-client