Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
File: XtAC05cM6z3Wh7QwuTaibzeNaSc.mft (raw, json)
Hash identifier: DndM8sG8jniskSga+7uWDM21kDx4g0vUXS3IAionjUA=
Subject key identifier: C7:1D:8C:15:B9:20:96:B1:80:D1:5D:85:1A:8F:9B:87:6A:1C:58:2A
Authority key identifier: 5E:D0:02:D3:97:0C:EB:3D:D6:87:B4:30:B9:36:A2:6F:37:8D:69:27
Certificate issuer: /CN=5ed002d3970ceb3dd687b430b936a26f378d6927
Certificate serial: 0196BB929B7BB84564F04BA7558FA16F0139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtAC05cM6z3Wh7QwuTaibzeNaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
Manifest number: 07AF
Signing time: Sat 10 May 2025 19:01:09 +0000
Manifest this update: Sat 10 May 2025 19:01:09 +0000
Manifest next update: Sun 11 May 2025 19:01:09 +0000
Files and hashes: 1: XtAC05cM6z3Wh7QwuTaibzeNaSc.crl (hash: vFvaO+Rb/P4SWUT+Z2TrJZNNcXbrhgBTX79wKMXvTDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtAC05cM6z3Wh7QwuTaibzeNaSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:9b:7b:b8:45:64:f0:4b:a7:55:8f:a1:6f:01:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed002d3970ceb3dd687b430b936a26f378d6927
Validity
Not Before: May 10 19:01:09 2025 GMT
Not After : May 11 19:01:09 2025 GMT
Subject: CN=c71d8c15b92096b180d15d851a8f9b876a1c582a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:03:b0:b6:85:f4:91:5d:bc:79:83:91:ac:
7e:cf:39:49:32:84:64:84:66:60:a0:9a:ba:84:ad:
63:f6:8c:1a:d4:e7:47:72:cd:ab:91:de:62:64:8d:
88:8a:f6:83:b7:ba:17:a3:5d:13:20:71:cd:df:4b:
88:83:04:b6:e2:50:03:8e:f6:df:e3:3f:08:26:b0:
40:48:1b:a8:29:28:71:17:ba:46:af:75:85:24:d2:
8e:ec:c2:7a:78:2c:98:da:34:05:e4:b8:5a:4b:21:
56:96:f1:49:87:fa:56:6b:ee:20:f0:de:88:9d:03:
5c:d9:30:a7:69:d1:51:46:9d:7e:6f:b3:7e:ca:e2:
2d:51:ae:a5:50:83:64:62:1b:1e:7f:be:b2:53:2d:
64:bb:fc:34:01:51:37:71:a4:50:b0:69:64:d3:85:
ec:5c:23:b2:1b:17:02:43:2e:e9:03:3e:1f:cc:59:
97:18:eb:7a:c4:dc:6e:7e:b2:f6:08:fc:3c:3c:c7:
ac:89:3e:96:22:32:bd:23:b3:60:89:d6:9f:8c:9e:
03:d5:ef:85:67:02:bb:9d:0b:b2:20:99:81:85:b7:
d0:88:52:09:b5:2e:0b:91:12:d5:6c:6d:61:48:90:
88:c2:f2:83:51:f3:68:54:45:88:d5:52:1a:c6:f1:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1D:8C:15:B9:20:96:B1:80:D1:5D:85:1A:8F:9B:87:6A:1C:58:2A
X509v3 Authority Key Identifier:
keyid:5E:D0:02:D3:97:0C:EB:3D:D6:87:B4:30:B9:36:A2:6F:37:8D:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtAC05cM6z3Wh7QwuTaibzeNaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0d3651-987b-4627-ad06-427c035fbc8d/1/XtAC05cM6z3Wh7QwuTaibzeNaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:70:ef:5d:39:ff:d7:db:65:9b:b5:1e:16:99:41:3e:45:61:
a9:59:e9:e3:c1:79:e3:ca:46:19:1e:b5:57:ec:35:56:92:2d:
56:49:08:66:95:47:39:9a:82:56:e3:61:ae:29:a5:8c:ce:ce:
87:3f:f8:74:36:49:a8:37:e0:e5:57:a4:98:09:3a:ea:25:51:
20:d8:dd:28:08:c7:c2:fd:0d:42:2b:59:0e:43:dc:8e:19:19:
ca:fe:46:10:61:83:7b:d8:93:f4:14:41:c2:ab:c7:ff:04:8f:
08:6f:6e:db:4f:e6:27:cd:17:6c:2e:0c:c5:75:e8:80:65:fa:
64:7a:10:e0:e9:e8:13:ce:a0:99:9f:1c:cb:c7:2a:80:9f:c9:
8f:b3:38:de:08:f6:6d:06:1f:1e:6f:50:de:8f:1f:1d:a8:64:
47:2f:91:a0:e5:73:4a:c2:f9:2b:cc:6e:6e:8b:bc:df:60:82:
13:38:7f:90:9f:fa:80:fd:78:3c:6a:18:14:94:63:9e:db:df:
ba:a5:cb:8e:20:4a:db:80:59:18:9f:64:9d:33:ad:0f:50:66:
79:56:c2:9f:45:9a:5b:91:43:49:f4:28:7a:04:77:8b:bb:b1:
9d:a2:09:ff:b3:cd:c3:98:40:3d:32:60:23:8b:77:c4:6a:d9:
30:fe:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:59:31 2025 by rpki-client