
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
File: x_SYwou91eWf9XaMbTikEMqCZkA.mft (raw, json)
Hash identifier: qLAMvFKN6X3iwfalTDlHTvRsgw4f/EtOTNNvXLqKaf4=
Subject key identifier: 1D:3A:DE:8C:3C:A8:95:A0:37:ED:BB:B8:68:FC:A3:99:DC:8E:B6:B1
Authority key identifier: C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
Certificate issuer: /CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Certificate serial: 01969E9A678EBF4AD9A30471739FFAF31D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
Manifest number: 0D11
Signing time: Mon 05 May 2025 04:00:41 +0000
Manifest this update: Mon 05 May 2025 04:00:41 +0000
Manifest next update: Tue 06 May 2025 04:00:41 +0000
Files and hashes: 1: x_SYwou91eWf9XaMbTikEMqCZkA.crl (hash: erTzj7V6KX94mc6EO2QM6iWgmOxArkBKBuunPzrJacs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:67:8e:bf:4a:d9:a3:04:71:73:9f:fa:f3:1d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Validity
Not Before: May 5 04:00:41 2025 GMT
Not After : May 6 04:00:41 2025 GMT
Subject: CN=1d3ade8c3ca895a037edbbb868fca399dc8eb6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a2:21:1c:0e:76:93:44:8c:05:83:06:ba:5f:
97:39:16:a3:94:36:b4:b7:cd:14:37:a7:6a:49:88:
51:09:83:d3:55:54:97:39:6f:65:10:23:54:ba:78:
76:ea:e1:a8:68:b0:37:29:3f:5a:92:3f:2e:79:6d:
2c:f2:e2:db:f6:13:d9:d0:d9:7c:05:dd:5b:c4:6b:
54:c6:a3:ad:a5:da:d6:cf:65:f5:48:25:93:b7:e9:
af:2e:51:70:54:bc:3c:6e:df:a4:0a:ec:1f:8a:80:
a4:2f:47:74:c2:ce:18:32:39:ea:54:7d:7b:da:bf:
1b:79:33:44:4e:63:ef:d4:e9:36:7b:88:ab:99:2a:
11:6f:3b:79:3a:3a:4b:6c:90:f2:c5:7a:89:6a:0b:
82:53:46:c3:ad:d6:31:7f:9a:f6:e1:85:18:d7:ff:
3a:26:bf:a4:86:c0:29:1a:6c:d7:ec:41:c7:a6:9c:
0e:37:2e:0a:66:5f:fb:ff:58:83:c0:88:c5:cd:41:
a5:a7:4a:16:47:71:c1:a1:44:ca:47:b4:a7:79:b7:
b2:cc:b6:c0:c8:c3:62:eb:2b:cd:f0:07:4c:fc:b3:
b7:99:5d:5b:a7:f3:c3:46:9f:3f:f5:74:61:07:29:
61:20:16:d5:de:e5:b4:91:e2:58:d6:58:7d:9f:77:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3A:DE:8C:3C:A8:95:A0:37:ED:BB:B8:68:FC:A3:99:DC:8E:B6:B1
X509v3 Authority Key Identifier:
keyid:C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:db:e1:e9:1c:0a:80:2d:db:f8:36:50:62:64:28:51:2b:92:
de:dc:19:f0:61:d7:b6:cf:fe:d9:8b:73:17:1a:00:fe:f5:77:
c2:94:db:b9:34:b8:5f:38:7b:fe:49:d5:f0:82:86:9e:bb:2d:
49:94:4b:cc:48:84:76:0f:10:63:52:61:83:00:74:8c:40:b1:
ac:fa:cf:c2:28:12:a3:d7:ca:f0:5d:d7:8c:0b:22:9d:be:a9:
8d:87:e8:dc:db:80:4a:f5:c1:b6:19:b1:d7:05:86:3e:dd:31:
2c:a6:ab:15:42:f8:be:3b:24:0a:48:5c:d6:2c:68:30:5b:de:
5e:98:4c:b6:97:ea:1c:2b:1e:4e:43:bb:eb:73:10:8f:60:6f:
07:1a:de:f5:a4:69:4d:22:bf:57:32:3e:5a:5d:87:75:cb:e3:
9e:28:eb:f4:87:01:0b:46:ab:cd:19:99:be:4e:cf:0a:bf:57:
19:2a:88:f5:3f:0b:52:4e:2d:63:23:2a:03:1b:d9:6a:27:87:
c1:26:5b:9f:a4:aa:a0:04:06:33:c1:28:8a:c3:f8:70:6f:7e:
00:5c:13:c3:8a:66:1c:f3:29:b2:dd:6b:72:4b:18:28:b8:bd:
2f:04:9a:21:b4:83:b5:19:b9:7d:0a:38:91:34:d1:e0:6b:da:
76:65:5a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:07:21 2025 by rpki-client