Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
File: x0oNp1cJLW7M99lO3idYdToc14Q.mft (raw, json)
Hash identifier: +15bxD2uKjNj4x056IXZYegpoq8WkJOwhRxt878k+Hc=
Subject key identifier: 0E:D7:D1:A8:E3:62:AD:14:9F:53:24:CB:A5:E7:CE:8D:0F:95:0A:E7
Authority key identifier: C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
Certificate issuer: /CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Certificate serial: 0196C3B963E3B64575C298351F6E60F4DEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
Manifest number: 142F
Signing time: Mon 12 May 2025 09:00:28 +0000
Manifest this update: Mon 12 May 2025 09:00:28 +0000
Manifest next update: Tue 13 May 2025 09:00:28 +0000
Files and hashes: 1: x0oNp1cJLW7M99lO3idYdToc14Q.crl (hash: SJU+JSkxnLcnFAH97NWeo1ZgT7FvVr+HMOGCsc8eGB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:63:e3:b6:45:75:c2:98:35:1f:6e:60:f4:de:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Validity
Not Before: May 12 09:00:28 2025 GMT
Not After : May 13 09:00:28 2025 GMT
Subject: CN=0ed7d1a8e362ad149f5324cba5e7ce8d0f950ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:5a:e1:e7:fe:1c:85:e1:92:1b:b6:28:50:
25:ce:29:c1:8c:53:9c:e1:a6:3a:34:e0:c3:6f:85:
9b:4f:14:af:97:ea:cc:b0:88:09:14:59:70:07:d4:
07:d2:b6:01:b7:cf:f8:80:13:cf:5b:ac:d1:c1:3f:
0b:b6:b7:31:3c:fe:ab:53:cb:86:43:30:23:15:4c:
21:af:cb:56:de:4e:d0:8a:ad:63:e9:2d:15:42:b6:
d8:f8:33:0e:e1:51:15:fa:03:20:33:94:72:5b:07:
e7:ec:b5:75:eb:d2:41:f0:42:35:05:b3:d4:b7:42:
f2:65:74:7e:c5:fc:22:98:56:27:43:af:57:b6:5d:
d5:0f:fd:61:5c:a0:60:35:8e:c5:f0:64:e1:b3:57:
02:02:de:77:03:46:85:b3:15:06:20:20:0e:19:78:
90:7f:5e:a0:be:05:15:13:62:d5:55:49:44:7b:cc:
d8:31:a9:1d:19:dc:50:d3:88:1a:07:60:ff:e3:1d:
b0:36:81:13:3b:c7:6a:23:32:65:be:45:77:a4:ca:
11:d4:6f:49:4b:b9:63:4c:9b:c7:c0:29:74:86:18:
3b:46:00:53:5e:3e:8f:a1:38:47:60:f2:ab:26:5d:
d6:58:ff:ee:a1:8d:f5:77:8e:be:75:2f:02:7e:c9:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D7:D1:A8:E3:62:AD:14:9F:53:24:CB:A5:E7:CE:8D:0F:95:0A:E7
X509v3 Authority Key Identifier:
keyid:C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5e:c6:de:f5:f8:98:d2:bf:8f:ff:e5:bf:8c:b6:86:17:78:
1b:29:70:e8:67:f8:ae:56:c7:79:eb:af:99:4e:25:31:5d:c8:
41:ee:14:53:64:c4:dc:21:5d:f3:b8:e5:45:56:2a:be:52:8a:
04:0e:99:ed:67:fc:46:50:25:a8:5b:40:23:df:32:7c:75:8d:
fb:91:27:f5:2d:22:7c:23:63:d1:56:54:02:d4:90:9a:bc:89:
99:c4:c1:e9:20:08:df:df:3f:57:11:58:19:18:f3:4a:ad:e5:
77:f2:a0:c9:bb:ee:42:22:42:bb:cc:a1:98:eb:aa:7d:ae:e1:
a7:c5:ca:0f:fa:be:a0:86:97:35:a8:3a:46:da:a1:29:09:b9:
de:f1:81:3f:da:b1:1f:e3:31:b2:c9:a0:f9:5c:f4:18:37:be:
0c:be:1a:fa:51:e1:2c:0d:23:7b:0c:b1:9b:9d:c0:56:9d:23:
1a:af:1b:50:bb:dc:f4:3f:10:93:a0:e3:78:18:3c:d1:65:27:
85:d5:a9:2a:9e:4d:31:f5:17:5d:c1:16:dd:c1:8b:82:30:84:
e0:32:c4:dd:06:9e:e8:ec:c9:22:c1:2d:aa:cd:8e:a4:d5:bf:
53:78:24:98:51:66:aa:a6:15:31:88:22:8a:fc:4e:1f:cd:bc:
4e:2e:2c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:30:10 2025 by rpki-client