Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
File: XsApKzJbgsdEucIBMrg7M7Uv_5c.mft (raw, json)
Hash identifier: jIl9keNkmMOTX/FzRtOX+zT/FAVStSRzXWOBDgdF9wc=
Subject key identifier: E1:C4:F4:AC:B3:A3:7F:E1:4F:75:FE:36:6A:E6:60:C8:20:E5:D7:4F
Authority key identifier: 5E:C0:29:2B:32:5B:82:C7:44:B9:C2:01:32:B8:3B:33:B5:2F:FF:97
Certificate issuer: /CN=5ec0292b325b82c744b9c20132b83b33b52fff97
Certificate serial: 01969F07E808A8ABBA023B03179E039599B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
Manifest number: 03E5
Signing time: Mon 05 May 2025 06:00:17 +0000
Manifest this update: Mon 05 May 2025 06:00:17 +0000
Manifest next update: Tue 06 May 2025 06:00:17 +0000
Files and hashes: 1: XsApKzJbgsdEucIBMrg7M7Uv_5c.crl (hash: paFrQvhf9DikH8ZwpKGkMWnthC70wn/ogVNkf0xdR0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:e8:08:a8:ab:ba:02:3b:03:17:9e:03:95:99:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec0292b325b82c744b9c20132b83b33b52fff97
Validity
Not Before: May 5 06:00:17 2025 GMT
Not After : May 6 06:00:17 2025 GMT
Subject: CN=e1c4f4acb3a37fe14f75fe366ae660c820e5d74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:19:e2:40:46:a6:eb:4d:20:76:ea:11:9b:21:
b6:ad:a8:6b:80:cf:60:92:a1:6a:b2:c8:c4:dd:dc:
3e:c2:e7:3e:94:f6:23:5e:26:45:0f:66:13:f7:e6:
5a:79:89:ac:cd:c2:4b:2a:84:df:ac:c3:b4:20:42:
1c:9a:2a:c9:3e:b8:e6:a9:00:7a:29:1a:5b:bc:f6:
86:38:af:d5:da:ab:2a:8f:0a:6e:ec:c5:d7:2f:a5:
38:93:f2:1a:b9:03:a0:d9:bc:10:45:7f:47:1d:b3:
6c:6c:43:39:be:2f:43:80:5e:ea:82:cd:42:82:9c:
32:b4:f0:0b:3d:63:7d:0f:bd:0a:eb:f4:60:87:0a:
ad:87:15:c5:87:71:76:5a:7f:27:40:dc:7e:cd:2c:
65:82:56:45:20:2a:4a:6b:d7:80:95:b5:ca:a0:8f:
d5:43:91:19:6f:4b:54:f0:14:2f:58:44:e9:bf:ab:
e8:31:5a:29:87:65:fe:e0:10:aa:22:ab:c7:88:ee:
c3:0a:3b:72:ce:57:2a:c7:fb:74:67:61:cb:a1:20:
c0:d3:73:ba:14:54:12:91:67:62:99:cc:9c:8a:0d:
67:12:a3:22:2b:40:9a:52:24:60:c4:cf:20:7f:ef:
34:12:00:43:28:7d:de:06:d0:9f:9b:c2:ab:38:16:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C4:F4:AC:B3:A3:7F:E1:4F:75:FE:36:6A:E6:60:C8:20:E5:D7:4F
X509v3 Authority Key Identifier:
keyid:5E:C0:29:2B:32:5B:82:C7:44:B9:C2:01:32:B8:3B:33:B5:2F:FF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:eb:4f:11:2e:d3:ae:7c:c6:ba:69:aa:76:a6:57:4c:4f:e3:
2d:35:e0:dd:89:74:f6:6f:06:86:c2:ec:4f:2e:d9:8c:b6:4e:
ed:17:5e:93:e8:39:c4:49:60:ee:d8:7f:b5:09:41:01:fa:de:
d2:8e:7e:00:99:0d:49:7f:b9:b7:dc:9a:d7:5a:16:0e:b8:fc:
38:82:86:0e:52:c3:5f:23:bd:a7:de:d3:13:29:d0:07:09:3a:
de:58:22:91:be:57:29:56:14:c5:b4:c8:8b:6b:68:9d:92:3d:
56:10:53:1c:e1:14:9a:ff:3c:79:85:53:25:87:d4:ee:d4:a7:
a6:f3:b4:1e:af:c3:db:b9:94:c1:6e:45:6f:07:9e:10:77:f2:
89:bd:e0:c2:66:b7:58:a1:98:19:5d:05:9b:ad:fe:56:16:0a:
2d:3a:e8:60:25:57:92:9e:c2:d9:07:f2:b1:74:89:83:3d:72:
40:29:56:1c:b9:13:86:8c:ed:f7:4d:19:1f:e8:65:b4:4b:75:
bc:40:59:d0:2c:aa:56:5a:5e:59:08:1c:97:b2:61:6b:cd:e7:
b0:01:37:81:90:3e:4a:55:b3:96:f2:42:01:cc:a2:4e:22:c9:
f2:ca:82:3a:92:90:9d:f1:08:66:b4:41:00:13:b3:b4:70:a4:
c8:b1:c6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:32:42 2025 by rpki-client