Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
File: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft (raw, json)
Hash identifier: 8ZGor9lxPDw5MQXwliv/yLoDOkl5JWX+jV0vsJCbwEw=
Subject key identifier: A9:F7:3A:4C:1F:11:F8:90:06:AB:52:18:41:D8:D9:B0:B7:64:A9:48
Authority key identifier: 5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
Certificate issuer: /CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Certificate serial: 0196B6A2CC4C5D3BD3AC87E97F0E5E8DB3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
Manifest number: 093D
Signing time: Fri 09 May 2025 20:00:44 +0000
Manifest this update: Fri 09 May 2025 20:00:44 +0000
Manifest next update: Sat 10 May 2025 20:00:44 +0000
Files and hashes: 1: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl (hash: CTu9rKgYdYtlUnbA6OEMkbeOtDF/PKPVhdcNkQtYPKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:cc:4c:5d:3b:d3:ac:87:e9:7f:0e:5e:8d:b3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Validity
Not Before: May 9 20:00:44 2025 GMT
Not After : May 10 20:00:44 2025 GMT
Subject: CN=a9f73a4c1f11f89006ab521841d8d9b0b764a948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e6:5c:b7:f3:7e:10:c1:94:fb:46:c0:24:bd:
56:0e:03:4a:50:2e:c9:dc:d7:f8:b5:1b:81:9d:d5:
ae:c2:ad:9a:46:c8:f8:68:ed:b3:ec:35:e1:b7:ce:
be:31:a5:09:32:ec:ca:22:36:c7:11:49:6c:fc:c0:
40:a5:22:0b:03:e5:85:25:9d:a0:c5:7d:66:e5:5d:
f4:7a:cd:79:ea:b4:cf:a8:ac:9d:ea:dc:4d:aa:b8:
77:e0:6f:8c:5b:5c:d1:aa:83:f8:a8:84:65:7b:bf:
e8:2f:55:08:8a:f5:69:4e:c2:cc:eb:2b:a3:d3:be:
ba:84:f1:ef:d2:ac:45:62:1e:27:94:ba:fa:56:cb:
ac:cd:96:af:c3:9c:35:19:f7:b8:aa:37:62:f7:7e:
e1:61:19:8a:64:91:4e:12:52:90:61:60:8b:5a:bf:
a1:a3:c1:e8:e9:f9:6d:a4:45:c0:06:f2:2e:c9:f6:
41:93:a8:7f:cb:ce:76:e0:27:c3:b1:04:cc:c5:46:
6c:bb:e0:79:ed:61:7a:c0:33:8b:0c:75:78:78:10:
da:12:19:7c:b2:ad:b1:7a:ab:fb:b4:f4:c3:ef:dc:
62:af:53:d4:ce:ab:73:03:37:45:28:31:61:60:9e:
23:b8:61:83:8e:ee:c3:79:c5:65:a7:19:ee:91:eb:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F7:3A:4C:1F:11:F8:90:06:AB:52:18:41:D8:D9:B0:B7:64:A9:48
X509v3 Authority Key Identifier:
keyid:5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b9:02:d8:21:7d:53:ae:c3:99:2b:e2:2d:de:63:3a:9e:70:
86:71:ad:76:45:17:49:34:90:80:0d:6e:30:82:45:ad:5f:d2:
6d:ef:be:13:8a:a1:99:f3:c4:44:72:5d:5a:62:3f:7e:b6:99:
04:6f:c1:f2:ac:1a:4c:8a:34:ba:54:c7:0d:1b:bd:4b:83:1c:
f0:14:93:65:de:30:fe:32:bd:58:35:b4:97:a6:6f:11:2d:b5:
32:dd:e9:a1:15:03:8a:e0:b1:e0:57:d4:28:9a:be:c0:98:14:
a7:51:30:f7:53:a3:60:df:26:64:a2:55:1d:a4:aa:a6:c7:8d:
ad:77:dd:84:0c:e8:4a:6c:09:45:cb:1c:47:0f:bf:16:a6:9e:
1b:ae:b8:0c:27:b8:8f:3f:c4:5e:30:a9:7d:6f:82:86:c1:51:
d7:8e:28:80:4b:e8:00:12:cc:fd:4f:d1:12:27:18:75:62:ac:
ec:8d:4d:fb:da:69:cb:5d:50:72:53:b2:ec:0e:48:9d:29:78:
d7:df:34:2d:89:44:51:54:e7:92:7d:6a:61:1e:f0:1d:8d:f4:
18:02:ce:5a:96:66:d5:d8:69:81:c5:ce:70:2d:db:6d:1e:1d:
50:17:1a:70:b1:af:f8:84:67:43:b1:1c:0b:34:a5:17:3e:8e:
fe:fb:59:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 22:06:22 2025 by rpki-client