Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json)
Hash identifier: 1fu17ZDA1U4Mo+U7Pcy82QbDhz9G9ZLSeCvY4Q4pCJw=
Subject key identifier: C0:08:A1:85:89:66:37:5D:F9:C5:8F:DA:63:73:72:C6:35:34:00:10
Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Certificate serial: 0196A2E4B9E93DCAF064A655A4343A175198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
Manifest number: 0240
Signing time: Tue 06 May 2025 00:00:20 +0000
Manifest this update: Tue 06 May 2025 00:00:20 +0000
Manifest next update: Wed 07 May 2025 00:00:20 +0000
Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: ZN1iMk6bp4yADSdJl0+N4tv867S/04UQiqV/Vg0a3dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:b9:e9:3d:ca:f0:64:a6:55:a4:34:3a:17:51:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Validity
Not Before: May 6 00:00:20 2025 GMT
Not After : May 7 00:00:20 2025 GMT
Subject: CN=c008a1858966375df9c58fda637372c635340010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:57:b5:d9:a6:a6:fd:65:81:9d:65:b6:10:
52:bf:ed:61:52:fc:23:a7:8e:b6:0b:1c:73:4d:00:
5e:54:40:09:05:05:ed:82:25:11:71:e9:a1:47:bc:
fa:f0:8c:0f:8f:72:cc:e9:f1:0b:e3:d4:4f:c5:a0:
4b:3e:71:28:0a:96:3d:81:72:6f:de:c1:94:2b:0e:
e8:ca:8a:67:e9:40:38:7f:e0:f9:f4:80:3f:84:e5:
e6:70:65:40:86:84:fd:e7:07:6f:95:18:6e:b6:87:
04:c5:f6:d9:24:b4:d3:db:e9:db:03:e9:c4:0f:7c:
91:77:7a:54:9c:55:69:74:4e:55:6e:27:9f:c3:51:
a1:bb:8f:73:90:81:b6:66:08:9f:f0:59:f0:06:85:
1b:cd:ee:d0:f3:84:69:22:1f:ea:7c:d5:f6:0e:5c:
0e:11:b3:93:52:5d:4d:8a:07:33:f3:ba:4e:05:87:
fd:47:d2:9d:f9:bc:bf:a6:1a:0a:dc:d4:79:10:1b:
68:a0:6b:b1:0e:88:2e:25:0a:8b:bb:bb:53:7d:c6:
b8:18:f7:1f:59:f8:ce:17:f9:f3:0e:c1:cc:f7:01:
95:95:2a:16:58:2b:3f:9b:da:f9:66:92:77:76:10:
91:71:7a:2f:69:dc:2a:6b:ca:09:e9:5d:76:11:8b:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:08:A1:85:89:66:37:5D:F9:C5:8F:DA:63:73:72:C6:35:34:00:10
X509v3 Authority Key Identifier:
keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:73:22:f5:cc:75:d6:c9:68:e6:48:a9:30:1a:a6:bb:23:46:
9a:99:ef:3e:fa:f7:94:48:76:f4:4f:e7:92:18:ad:01:dc:6b:
62:ab:db:8b:94:38:87:6b:03:c7:2a:6c:df:32:7f:55:47:2b:
24:2d:d6:e9:25:94:4f:eb:38:a4:fd:33:45:b2:d4:75:43:65:
a2:35:74:be:1d:54:17:a9:d1:b9:b5:23:f2:0e:f5:c4:03:83:
90:b6:5b:1b:ab:9b:de:6a:fe:3c:1c:22:45:16:b9:c2:35:1c:
51:4b:5e:24:2e:13:a6:59:92:c0:b0:c0:bb:c1:dc:aa:01:6a:
81:23:b8:ad:be:8f:b2:b8:b2:1a:5d:ad:23:ed:9d:ce:47:b0:
a9:8d:18:b6:9e:aa:e3:c4:47:4f:37:19:20:d9:88:37:8a:55:
a6:50:ed:20:f7:73:d5:c3:96:69:49:ac:ef:d4:b6:70:13:9c:
ac:18:65:92:3e:0b:47:eb:54:ed:66:88:50:c3:c4:49:fc:2c:
83:9d:5a:e6:66:fd:c3:f5:a5:4e:c2:8d:63:c2:71:92:e2:63:
d8:65:10:c9:8e:9d:25:fe:e1:bc:9e:2f:a4:54:e0:bd:c3:a1:
c4:13:3f:cc:07:3e:d6:24:a2:83:50:8a:e6:09:ee:f2:41:69:
01:ae:e0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:34:00 2025 by rpki-client