Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier: iHNcafrUOn4TsxzVHAAV6OJxPjRvX81KF/f9hxTDmqE=
Subject key identifier: 98:4D:EB:82:1E:BE:EC:A2:05:73:8E:EC:C1:06:9A:30:BB:F0:B8:75
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer: /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial: 0196BC6E7DF3921D93D0288216C218EE9806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number: 042D
Signing time: Sat 10 May 2025 23:01:19 +0000
Manifest this update: Sat 10 May 2025 23:01:19 +0000
Manifest next update: Sun 11 May 2025 23:01:19 +0000
Files and hashes: 1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: hCalexqCKO+1VPTOtY97PJ+fOt4KWh9jRGieU9xP9AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:7d:f3:92:1d:93:d0:28:82:16:c2:18:ee:98:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
Validity
Not Before: May 10 23:01:19 2025 GMT
Not After : May 11 23:01:19 2025 GMT
Subject: CN=984deb821ebeeca205738eecc1069a30bbf0b875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:4a:3d:fa:a6:4a:a6:27:21:f3:26:92:af:
9b:b3:16:b2:1b:c8:b2:5e:43:b4:8b:41:dd:d9:e0:
9b:e1:c1:da:ef:e7:ec:d4:77:22:2a:c4:af:39:cc:
15:a0:1f:a2:f5:46:51:ea:2f:ac:ad:bd:c3:63:3c:
ae:14:73:21:a1:3c:6e:0e:7a:3c:92:81:18:08:a1:
0e:90:96:11:27:fb:a5:af:c0:10:ab:8c:c4:4c:f8:
59:44:2b:26:d6:35:36:d1:d7:f7:35:9f:ce:5d:ff:
67:47:c2:f8:82:f9:89:52:19:eb:c8:fb:c4:e6:13:
97:1a:a9:a1:ea:97:b0:08:6f:7b:f4:b1:cc:5c:3f:
a7:75:25:c6:a8:66:88:dd:44:a3:57:cc:c3:b8:ec:
f6:6b:4d:1e:68:1b:01:27:af:64:2b:75:1c:41:9a:
21:9c:0f:b4:97:07:99:4e:8b:15:f3:6b:ef:18:53:
2d:16:5e:06:ad:67:43:6f:c4:e7:ca:c8:31:c8:96:
eb:f9:71:4e:6a:b2:ab:e8:c4:91:f2:4d:b4:05:2a:
c1:a0:75:43:d6:f4:7c:2c:e7:04:7c:d0:50:d8:e8:
a7:9f:1c:6b:7d:83:a7:a4:30:a4:fc:3e:ad:d3:9f:
89:fb:bf:22:c0:ce:80:e2:7a:3f:42:c7:a3:af:93:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:EB:82:1E:BE:EC:A2:05:73:8E:EC:C1:06:9A:30:BB:F0:B8:75
X509v3 Authority Key Identifier:
keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:07:0a:cd:ab:2e:6c:2b:fd:de:37:59:36:87:31:3a:23:87:
fb:4d:44:c1:9c:71:b9:3e:4b:46:93:f3:bb:9d:43:1c:6e:cd:
80:23:04:58:a5:b3:40:db:85:1d:7e:7c:73:19:38:54:15:7d:
77:94:b2:51:ea:c7:10:8c:bb:ae:c7:51:31:54:82:32:5b:f6:
bc:bb:1b:05:8e:35:2d:9f:64:d3:f0:d1:66:cc:08:5a:a3:5c:
34:35:e3:ae:d0:28:f1:28:b1:03:a4:9a:3d:d8:4d:6a:20:62:
5b:4c:fe:a2:56:90:a4:ff:50:dc:cc:f8:40:d1:09:ab:f7:77:
85:cb:cb:c2:ae:d3:8c:93:ab:b5:0f:6d:13:6f:f7:8b:dd:65:
0f:73:2d:3b:1f:aa:a1:4a:2c:b7:42:a9:a1:0b:98:f5:bf:73:
78:27:84:d8:dc:c0:5e:77:3c:52:32:55:00:02:80:5d:56:0a:
0b:82:a5:d9:c0:e1:43:0c:83:1f:35:f4:5a:05:31:d4:8f:d9:
9b:22:fa:fb:a2:f4:73:89:e1:bb:8a:8e:eb:2b:21:0d:37:43:
65:54:38:dc:68:9b:6c:a8:37:7f:04:27:54:a8:be:03:d9:1a:
eb:fc:c4:82:47:d0:d7:74:f3:16:50:3b:65:83:6c:b2:3c:44:
fc:58:0e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:39:48 2025 by rpki-client