Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
File: xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json)
Hash identifier: 2nz3k7kwApesP8Dlvh0Ht0/fuwV3Q+kpweIhtCFlE90=
Subject key identifier: 7D:06:58:35:1C:CB:A5:6E:83:95:7A:6C:D9:80:F2:CA:01:56:8D:EC
Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
Certificate issuer: /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Certificate serial: 0196C426F91D963E34B854B8DC824686A274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
Manifest number: 0212
Signing time: Mon 12 May 2025 11:00:10 +0000
Manifest this update: Mon 12 May 2025 11:00:10 +0000
Manifest next update: Tue 13 May 2025 11:00:10 +0000
Files and hashes: 1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: Aorzynu4VASI00giu/6YZ/NYmR7uYW6nAzj6PmeTiIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:26:f9:1d:96:3e:34:b8:54:b8:dc:82:46:86:a2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97
Validity
Not Before: May 12 11:00:10 2025 GMT
Not After : May 13 11:00:10 2025 GMT
Subject: CN=7d0658351ccba56e83957a6cd980f2ca01568dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:39:f7:6f:cc:0c:fc:50:60:de:e7:fb:4a:
3b:c9:63:9b:f9:3c:57:21:07:53:56:18:9b:be:33:
fe:f5:a4:05:99:b7:31:5d:30:cb:5b:21:4f:ae:b2:
c0:23:2b:06:a4:cc:f9:ca:72:09:6a:4b:14:a2:a6:
3f:43:45:cd:90:b0:6b:32:e7:97:5a:d0:09:35:b3:
7d:00:e5:26:be:99:d7:8e:7c:bd:7e:22:85:c9:93:
b6:d2:38:af:40:6e:e6:f9:2a:e8:25:2e:2c:5e:1f:
a3:36:0c:6f:6c:cf:d6:95:2d:fb:95:41:03:18:c0:
31:d9:8f:67:fd:40:04:09:e4:1a:a8:97:ee:38:9c:
17:4b:c5:86:b1:47:be:49:45:77:cc:f7:8a:fc:ac:
96:77:87:bc:ef:78:84:aa:47:75:4e:48:41:94:ac:
ae:e4:ab:04:5d:01:ad:37:77:fd:20:b5:4d:d2:11:
b7:9c:01:1e:f1:c8:55:c3:24:cd:3f:39:b4:87:e2:
c8:83:d8:12:bf:13:6b:c5:17:52:c4:cf:f1:35:a3:
a7:ce:f1:3a:09:c6:aa:8b:30:41:67:eb:86:49:4e:
5c:f2:78:3d:10:7c:da:bf:63:12:9e:ab:c9:a3:0a:
15:47:c9:0e:06:27:23:47:f2:b0:33:09:a2:10:64:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:06:58:35:1C:CB:A5:6E:83:95:7A:6C:D9:80:F2:CA:01:56:8D:EC
X509v3 Authority Key Identifier:
keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b9:41:3a:18:6c:9d:f7:b1:b7:44:1f:cd:51:81:ae:e4:36:
c9:cd:41:77:e0:1a:70:23:92:15:ab:1c:de:68:88:df:58:d8:
30:a8:3a:b4:eb:8a:93:a6:6d:dd:06:5c:4d:7f:ab:0c:74:8e:
35:af:27:3d:a6:dd:36:1d:d2:8c:d2:66:22:f9:8f:30:3a:71:
da:fa:40:48:ab:1b:80:4d:88:a6:bc:79:74:2c:51:f3:6b:61:
cf:a8:36:7e:07:d8:b1:10:06:d2:a7:05:98:d2:dc:75:fe:df:
59:7a:58:1b:a0:be:4d:ce:c9:f0:2f:72:84:2b:a7:02:84:b2:
6a:07:6e:8d:9f:2c:8c:8c:1f:d2:ca:42:d4:ac:44:eb:f9:0f:
ab:39:da:93:a4:be:b7:53:02:a0:c9:9c:10:ae:bb:da:2e:0a:
6d:67:5e:b1:a0:26:76:d7:b9:93:f9:38:43:bf:1f:65:1f:fa:
5f:27:4f:27:bf:f2:a5:36:7d:12:57:fb:86:d6:b3:d8:0a:82:
6c:4a:54:09:8f:1d:0c:5f:63:4a:d3:c8:e3:3f:72:a4:a3:75:
e5:0c:28:c7:de:d5:25:d6:2b:9c:55:06:79:4b:f8:42:df:6c:
4b:21:ea:2d:27:59:ec:2b:65:0c:32:f7:91:1a:4c:4b:d3:67:
fa:75:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:49:39 2025 by rpki-client