Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
File: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft (raw, json)
Hash identifier: iHk2LlngXMtTU6GdQvvn3YSxF+YYlMVeqOSLM2h+NLk=
Subject key identifier: 3F:9D:7E:CE:B3:6E:20:BE:7E:50:6D:31:5F:FF:09:8C:84:5E:FE:71
Authority key identifier: 5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
Certificate issuer: /CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Certificate serial: 0196ADD64C4FE923985884E84A8E1F438767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
Manifest number: 1528
Signing time: Thu 08 May 2025 03:00:24 +0000
Manifest this update: Thu 08 May 2025 03:00:24 +0000
Manifest next update: Fri 09 May 2025 03:00:24 +0000
Files and hashes: 1: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl (hash: aPPqORDwxZl/jbI+zjNGxutT2MH9Y5ZfYZLKJxIoXig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:d6:4c:4f:e9:23:98:58:84:e8:4a:8e:1f:43:87:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579
Validity
Not Before: May 8 03:00:24 2025 GMT
Not After : May 9 03:00:24 2025 GMT
Subject: CN=3f9d7eceb36e20be7e506d315fff098c845efe71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d1:2c:47:52:d2:1a:df:0b:9f:f7:0f:eb:81:
bc:dd:b7:29:2f:c8:45:ab:c0:c5:8b:19:3e:2d:ac:
46:70:15:c6:bb:f4:03:43:a5:7f:86:67:a0:80:29:
38:93:22:17:53:82:98:ce:75:e3:9b:cd:04:ea:89:
14:40:c6:e2:b4:a8:5b:26:3a:9a:65:58:dc:fd:32:
8b:0b:4e:bb:44:96:80:23:70:e7:3d:57:9c:1c:6b:
fb:e7:87:54:89:e8:1a:7a:69:93:13:dd:31:18:19:
71:24:69:9a:19:c9:4a:db:76:2a:15:13:75:9a:ec:
82:f4:5b:26:47:9f:35:87:67:1b:f4:39:da:18:e1:
56:a6:07:11:de:f1:71:85:73:74:35:31:a4:6b:f2:
a0:46:55:36:69:8e:91:7a:a6:0e:e3:86:30:a9:01:
01:bc:e0:3f:06:6b:0c:d9:c6:06:9a:17:a5:a6:dd:
b3:8d:68:bb:6c:77:69:ce:f6:2c:e7:1d:2e:1f:be:
36:1e:a4:88:81:84:63:09:f5:1a:95:3a:e0:93:4d:
dc:89:cc:e9:ea:f6:f5:50:be:e5:2b:87:10:59:87:
28:c7:c4:53:3b:02:21:66:26:2b:fa:00:a4:5c:a3:
27:9a:c0:86:83:06:6e:61:85:e3:cd:1a:b7:87:80:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9D:7E:CE:B3:6E:20:BE:7E:50:6D:31:5F:FF:09:8C:84:5E:FE:71
X509v3 Authority Key Identifier:
keyid:5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c8:12:16:fa:1b:f2:a3:97:3b:b1:21:68:dc:a0:42:d9:10:
94:4a:e4:99:a2:24:97:71:2c:5b:ba:bc:c6:cb:9d:aa:ca:03:
9d:5a:08:9a:35:1e:eb:23:b5:fd:4c:3d:0d:8d:ee:c5:1c:5d:
14:17:8c:24:20:5d:ec:14:b4:fd:16:5f:52:03:d3:84:03:c8:
1f:9a:76:27:3c:3a:d4:9a:04:30:72:10:ea:ce:b0:6a:6c:9e:
70:68:9b:16:d0:7b:e4:ec:eb:72:28:2b:9c:8e:81:fa:cb:d0:
dc:7e:6f:81:c3:9c:69:92:f2:1c:e4:a6:31:b8:c6:09:c7:50:
6c:87:bc:2b:6e:62:f5:7f:11:a9:f2:3a:9f:2f:02:54:65:d3:
d9:b2:e0:da:0a:ca:05:87:40:c5:31:62:99:18:74:b2:be:29:
be:b1:89:c4:ff:d6:f0:ed:fc:86:d8:f2:f5:24:e7:01:2d:86:
5e:03:a0:4b:d9:0e:18:76:01:a4:47:6d:5b:1f:63:a2:ce:34:
ff:9e:42:b1:bb:78:de:6f:ff:6c:4d:eb:44:19:4a:4e:45:79:
b6:3b:c3:71:a0:5b:14:3b:a6:e4:27:c1:2f:c7:dd:6c:39:ac:
d4:49:35:f0:7a:57:a8:3b:a8:04:16:cd:91:2f:7e:7f:31:36:
80:7c:46:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:53:59 2025 by rpki-client