Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
File: xQkxs_iAn_sx6V_THf8pd6xAgHk.mft (raw, json)
Hash identifier: BRIYxSMMAXikJksscqe6+GNulrR+izFa+stjFOcycAQ=
Subject key identifier: 29:6D:2D:FB:47:4E:32:F2:79:7F:60:D5:66:34:FB:EB:E7:33:15:6C
Authority key identifier: C5:09:31:B3:F8:80:9F:FB:31:E9:5F:D3:1D:FF:29:77:AC:40:80:79
Certificate issuer: /CN=c50931b3f8809ffb31e95fd31dff2977ac408079
Certificate serial: 0196C4CC1CDBAF7F7CD11754360A36D9C857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
Manifest number: 040E
Signing time: Mon 12 May 2025 14:00:33 +0000
Manifest this update: Mon 12 May 2025 14:00:33 +0000
Manifest next update: Tue 13 May 2025 14:00:33 +0000
Files and hashes: 1: xQkxs_iAn_sx6V_THf8pd6xAgHk.crl (hash: CrJ95XcTzKNT2dPlyQ1bC7OpPJNYE8zOSFJtS72GuDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:1c:db:af:7f:7c:d1:17:54:36:0a:36:d9:c8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50931b3f8809ffb31e95fd31dff2977ac408079
Validity
Not Before: May 12 14:00:33 2025 GMT
Not After : May 13 14:00:33 2025 GMT
Subject: CN=296d2dfb474e32f2797f60d56634fbebe733156c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:72:6b:30:c1:37:5d:ab:f5:24:84:c9:92:
d4:64:1b:bb:30:c1:fc:e5:eb:ac:86:14:93:12:b3:
08:a7:86:42:54:dc:d9:d0:d7:5d:38:8f:ca:35:e1:
ab:fb:43:57:11:73:ba:f3:5d:38:54:c4:c2:a6:d2:
8a:7b:5c:1f:5c:c3:56:8a:12:3f:35:19:b8:e5:62:
ee:5c:e8:fe:5d:59:a4:1d:de:9b:e4:8a:0f:7f:fa:
bb:27:70:6d:c1:26:fd:d0:9d:04:89:b0:66:28:6c:
02:dd:da:72:a3:30:8b:2b:ad:7b:b6:a6:1c:82:c2:
b1:76:19:95:bb:8e:fd:c0:eb:ef:d8:39:01:ee:cb:
ec:f6:a3:2f:02:eb:be:4e:b5:8b:dd:e2:86:e5:28:
1e:84:26:4a:59:a5:af:3f:7d:87:74:96:ac:a4:a0:
09:84:be:a0:9e:cd:13:07:e5:fa:60:ba:aa:1e:f5:
52:4a:0e:22:92:b1:53:37:26:de:09:e9:88:00:2b:
6c:8b:2f:5e:ca:64:7b:c9:bf:a2:19:82:d6:a7:ee:
8a:9a:5a:0e:2f:16:3d:da:e1:05:0e:c2:4e:e4:48:
99:fd:96:f8:44:18:7c:0e:96:55:86:60:8a:7a:f1:
64:f9:03:9e:30:92:9f:eb:f6:cf:53:ee:b3:af:19:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6D:2D:FB:47:4E:32:F2:79:7F:60:D5:66:34:FB:EB:E7:33:15:6C
X509v3 Authority Key Identifier:
keyid:C5:09:31:B3:F8:80:9F:FB:31:E9:5F:D3:1D:FF:29:77:AC:40:80:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bb:9d:a0:cc:a1:98:90:41:5e:04:26:7a:52:33:58:df:7e:
00:d4:ba:39:fd:67:28:3d:37:df:73:7f:b2:a3:44:26:0f:e7:
85:b0:01:86:53:d4:9a:00:cc:9a:8f:33:88:26:76:df:33:22:
b7:59:c2:da:ff:33:6b:f5:1b:31:61:bc:2d:87:64:65:fc:88:
57:c9:1b:94:e9:bb:bc:bd:c2:ea:5f:69:03:68:f4:11:71:52:
33:a6:44:e2:e9:19:74:68:5d:2c:2a:06:38:0a:dc:9c:01:88:
ff:e0:22:87:ca:a6:83:ee:14:1e:ed:88:4d:6f:fe:61:c4:a8:
af:fe:76:c2:28:66:a1:a1:e3:bf:39:92:b2:57:e0:62:34:e0:
88:75:99:59:37:5c:c1:c4:79:57:1a:95:78:ab:fa:cf:47:71:
2a:6e:6e:8c:18:c2:b8:e0:cf:51:d4:7d:40:8f:82:f2:51:c6:
08:66:a2:c6:53:9e:e1:20:5d:12:8f:62:95:07:38:23:aa:70:
35:a9:c1:99:f4:38:d5:49:9c:68:1d:51:86:2e:ba:a3:a3:9f:
24:f5:21:eb:7a:19:12:23:ea:23:71:20:9c:b6:76:0a:40:69:
46:d4:15:df:0c:a0:c7:ac:98:46:a7:ab:85:b7:e7:6d:95:5e:
fd:5b:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:16:14 2025 by rpki-client