Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json)
Hash identifier: JQLEnlOahQjX7L6QljS/6crdXb87C5Z2RFJ9LMewCgo=
Subject key identifier: 8E:0B:14:29:97:4A:D2:91:8F:2B:12:CC:3A:12:93:DE:3C:36:53:15
Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Certificate serial: 0196C5A850AF29B0B374D24E387CB6F2CD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
Manifest number: 126F
Signing time: Mon 12 May 2025 18:01:04 +0000
Manifest this update: Mon 12 May 2025 18:01:04 +0000
Manifest next update: Tue 13 May 2025 18:01:04 +0000
Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: yXrugkZZIGZe38KJNdeFTZTgA3jMJV2largzaCevyoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:50:af:29:b0:b3:74:d2:4e:38:7c:b6:f2:cd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Validity
Not Before: May 12 18:01:04 2025 GMT
Not After : May 13 18:01:04 2025 GMT
Subject: CN=8e0b1429974ad2918f2b12cc3a1293de3c365315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:6c:74:4e:96:26:34:eb:9e:2c:19:ea:16:
90:05:4e:a7:33:f5:21:54:66:4c:3a:62:a8:29:78:
4e:8d:00:2f:cb:43:a2:e0:71:6f:c3:4f:74:ca:1a:
ae:50:e9:da:f2:89:12:5a:41:5f:7a:a2:6c:3a:55:
6b:53:b3:58:61:09:7e:db:cc:29:49:e6:04:47:93:
99:25:eb:2a:63:c4:c6:97:f4:e8:1e:37:93:de:d3:
5f:aa:de:1d:fa:35:21:a9:f8:83:80:48:50:0a:25:
7d:3a:af:1d:b4:06:23:40:a4:53:a6:56:c7:02:1b:
2a:82:f4:81:49:09:ae:7d:ac:01:bd:e2:9e:8e:08:
69:e9:a6:86:c5:2b:6f:d1:36:7d:64:49:d3:cd:57:
ca:a7:ed:b1:55:4a:27:2f:8c:a0:c5:19:99:e2:9d:
dd:ed:25:54:5b:d8:9b:b9:91:92:65:9c:47:68:dc:
a2:ee:33:66:94:4a:fd:6b:52:a4:6b:a0:e7:d2:d4:
d1:7d:e3:e9:70:8d:23:00:75:0b:4c:08:c6:49:9d:
1c:30:c7:d0:1d:1d:e3:e3:00:d8:35:a0:73:ff:b8:
f4:65:8e:d2:3c:bb:76:00:de:15:1e:cc:c3:75:c0:
d9:c8:47:3c:44:b5:b6:86:05:8f:fa:5e:ef:ff:f7:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0B:14:29:97:4A:D2:91:8F:2B:12:CC:3A:12:93:DE:3C:36:53:15
X509v3 Authority Key Identifier:
keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:78:4a:2f:e2:dc:3a:26:1a:46:bd:b7:9d:44:a2:c6:2f:
61:a1:1b:33:b2:c7:d3:e7:69:8b:2b:a3:dc:3a:4f:8a:7b:93:
7b:64:ea:56:98:84:03:86:ae:71:30:a8:f8:a3:c6:f3:09:c5:
65:a4:6a:09:09:36:e1:87:13:23:f0:01:e9:cd:98:c1:6d:cb:
86:e9:24:c4:a7:10:35:6b:68:0e:a3:3f:7a:f2:a5:29:15:fe:
e3:05:67:d2:90:ec:95:12:4b:cf:08:67:c8:a3:7a:49:d0:1f:
92:48:02:aa:3e:8c:6f:04:07:a2:ea:14:5e:83:11:88:08:9a:
a7:8e:4c:79:9c:c4:01:2a:cb:c5:df:90:da:03:c3:34:19:e3:
5d:52:6d:8b:c5:68:11:13:9d:e9:24:70:07:a4:1b:08:74:7a:
dc:33:a0:95:d9:36:37:4e:f4:80:1f:df:18:b3:c3:1f:e0:91:
34:3c:ea:a0:52:7d:a7:7d:d1:cd:73:50:23:48:9b:c2:fb:2b:
9a:84:23:83:42:77:ed:74:be:17:8e:cf:62:64:8e:6c:4c:4a:
66:97:fa:a1:7e:b2:44:36:3f:0b:92:88:72:96:31:6b:05:38:
66:24:66:c2:d3:56:05:ed:32:7f:ad:02:49:d1:8e:80:aa:71:
9a:e2:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:25:38 2025 by rpki-client