Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json)
Hash identifier: b1f+FKwmXv6ZSbP52Zq/IfPdrDUjX4ut6XV+aeh1nGI=
Subject key identifier: D5:5A:7E:49:AE:2A:16:C6:68:1E:04:1A:48:38:DC:63:3E:6D:3A:00
Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Certificate serial: 0196C12601576D3D49A731DD355927222072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
Manifest number: 0282
Signing time: Sun 11 May 2025 21:00:15 +0000
Manifest this update: Sun 11 May 2025 21:00:15 +0000
Manifest next update: Mon 12 May 2025 21:00:15 +0000
Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: cAkV4PxxnPxii8o6cOR+0OFLmyGGGhDDpDCigvCYAqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:01:57:6d:3d:49:a7:31:dd:35:59:27:22:20:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151
Validity
Not Before: May 11 21:00:15 2025 GMT
Not After : May 12 21:00:15 2025 GMT
Subject: CN=d55a7e49ae2a16c6681e041a4838dc633e6d3a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:0e:9b:92:cb:93:0d:5f:9f:27:df:96:5f:
e2:cf:cc:c1:9a:0d:63:e0:f6:4c:48:21:47:c6:6e:
c8:ca:04:d0:51:56:3e:b8:af:6e:06:74:d0:5a:61:
32:8d:db:ba:a3:c0:e0:24:4b:6f:8a:a9:4c:d7:4f:
25:06:39:e7:be:02:72:41:55:ed:f4:87:7e:be:f1:
55:ee:c4:38:08:66:d7:61:b7:d0:69:0b:66:19:39:
70:ba:ed:3d:66:32:50:b9:d1:66:b8:de:2a:d1:86:
18:43:b8:2b:d9:ac:59:db:7e:48:72:38:5a:e5:29:
aa:91:c5:11:75:be:18:92:7c:32:1f:71:51:ea:5a:
58:d8:2c:cb:10:39:01:04:89:a5:83:ef:e5:67:1e:
f5:9c:27:f4:4b:83:65:fa:f6:9c:1d:e5:fe:5b:ff:
c5:13:20:35:f6:bc:6b:ef:2d:3a:86:3c:e9:03:bc:
83:75:7c:e8:68:23:4d:af:6a:3c:57:8e:82:c4:77:
ea:a8:4c:da:ba:d2:aa:01:d6:6d:1d:40:f5:00:2d:
9a:24:ae:e4:60:6a:b2:cb:66:ea:79:59:62:18:8a:
dc:1c:bf:eb:67:94:7b:95:9b:59:d8:4d:95:2e:a8:
18:88:8c:cc:35:7b:98:17:71:9e:ad:9b:d3:e0:8b:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5A:7E:49:AE:2A:16:C6:68:1E:04:1A:48:38:DC:63:3E:6D:3A:00
X509v3 Authority Key Identifier:
keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6e:ad:75:c1:38:21:15:c8:5b:f2:d6:6e:d0:b9:33:b8:b3:
a9:0d:32:e1:41:8f:81:4b:48:fd:3a:ef:06:d8:4f:01:92:37:
ca:74:ec:34:62:9f:19:ea:3c:0c:80:d1:9a:bd:16:0b:61:95:
15:fe:ee:ba:01:ca:0f:37:5a:63:87:b9:47:ad:89:b8:45:8a:
aa:e9:5b:5e:f4:a7:e2:93:0a:32:fa:b1:37:81:dd:3a:05:27:
38:55:b8:ed:f7:92:c2:7e:50:60:81:37:ed:d1:35:ce:59:42:
77:f0:29:b7:1a:2d:2e:76:3e:0e:35:81:c7:fe:27:e9:5d:01:
a4:26:58:7c:62:13:05:1b:db:5c:4a:c7:81:7d:fc:9f:32:8e:
7b:12:a9:db:ff:bc:05:7c:00:55:a1:dc:e6:41:c5:26:8a:90:
2c:9f:8b:31:1c:a8:93:e6:31:b6:7c:3a:3c:23:34:a7:df:66:
5e:47:fc:8d:b5:b9:62:0c:e9:00:6c:09:82:96:9e:78:e7:1e:
48:06:a3:e3:e8:b4:95:6e:72:29:49:53:2a:05:a1:45:60:b1:
e7:1f:65:dd:0a:2e:9c:14:af:7d:14:ef:86:c7:0e:2f:00:4f:
af:d6:15:af:0e:8d:8f:19:01:79:a5:d4:56:56:49:10:6d:fa:
29:fa:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:43:45 2025 by rpki-client