Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
File: xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json)
Hash identifier: xiaRUMOE79EA1ETKrN7shNF41iWiXz3VmkjZ4z0NGKY=
Subject key identifier: 2F:47:E0:C9:D4:A6:FD:5A:6D:2E:38:2D:2C:FF:18:C7:0A:6B:67:4B
Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
Certificate issuer: /CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Certificate serial: 0196C081414B4CB201829A82B0FE403827FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
Manifest number: FE
Signing time: Sun 11 May 2025 18:00:18 +0000
Manifest this update: Sun 11 May 2025 18:00:18 +0000
Manifest next update: Mon 12 May 2025 18:00:18 +0000
Files and hashes: 1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: L6TEZ8pIEbcAx0h9fAackmNkyruD3Wt+Lk727HDevT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:41:4b:4c:b2:01:82:9a:82:b0:fe:40:38:27:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Validity
Not Before: May 11 18:00:18 2025 GMT
Not After : May 12 18:00:18 2025 GMT
Subject: CN=2f47e0c9d4a6fd5a6d2e382d2cff18c70a6b674b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:72:dc:5e:b0:80:85:ac:84:8b:36:01:c2:
f1:d4:63:13:ef:64:55:bb:aa:4c:99:13:99:08:4e:
42:dc:06:39:45:2b:d4:f7:ad:28:6c:0c:9c:25:6a:
5e:83:fb:d2:f7:1c:28:49:11:3c:45:0b:57:36:9c:
45:6a:ad:60:8a:fd:f9:66:6d:d5:39:37:64:b4:bd:
02:9c:a5:ba:3a:21:67:8c:26:63:4d:3f:fe:35:c9:
e0:bd:5e:c4:51:b5:6c:54:50:7e:e1:91:4b:4b:76:
32:a2:58:c7:db:6c:7e:3d:3f:3e:52:ad:1b:0e:22:
3c:7d:79:31:ee:45:6c:65:f0:eb:5c:54:8c:ed:a5:
73:9b:c3:3e:7d:86:fb:d2:cf:94:de:ac:eb:61:e1:
2a:f9:35:0e:96:bb:b8:aa:2e:57:5d:12:b2:11:63:
3b:0e:e0:d0:3e:9c:24:31:0b:fa:d8:67:49:78:e4:
99:22:67:1b:3a:b1:06:9d:6b:bd:96:03:87:fb:c5:
6e:dd:63:f2:88:a7:61:cd:e3:9c:06:aa:9b:be:ee:
05:33:fc:13:67:6a:f3:20:54:25:b8:de:bb:d0:e5:
65:06:22:c2:a3:43:ca:88:a6:7c:c1:35:1c:e2:e2:
08:a8:a3:4a:3d:57:b0:86:bd:03:94:e4:e2:cf:f6:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:47:E0:C9:D4:A6:FD:5A:6D:2E:38:2D:2C:FF:18:C7:0A:6B:67:4B
X509v3 Authority Key Identifier:
keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8e:cd:af:57:80:e9:07:13:4b:d6:c3:30:7d:65:b7:bc:22:
af:3f:a7:eb:91:01:24:a4:18:c0:ca:1e:e2:56:d6:92:1e:a8:
86:28:d2:a6:2e:26:34:bb:01:6c:b8:a4:cb:0a:76:ce:76:fe:
cc:b7:61:f7:42:af:5b:ef:a3:d4:1b:a1:97:bf:e8:b2:26:75:
6b:b3:e4:d9:56:51:76:99:8b:c5:cc:f1:2b:28:5d:c8:45:79:
2d:94:35:bd:f8:04:6e:32:51:e6:e9:5a:38:3e:44:80:a3:70:
5f:cb:d5:9a:ef:8c:21:60:31:9e:3a:c1:14:77:c3:c7:34:82:
a2:ae:a5:a5:8e:49:6f:36:8a:5e:37:f2:f5:b4:b1:6a:d2:37:
a0:99:d2:c4:7a:9d:28:db:ad:30:a9:72:91:43:de:00:4d:5a:
eb:40:72:08:89:44:93:3a:52:39:49:a2:5d:fe:9e:09:48:9f:
a3:16:4c:41:71:d8:40:7c:db:ae:b6:7e:08:07:2e:ec:e9:f3:
44:9b:37:52:bd:c7:6b:34:94:d8:96:43:a0:66:23:ba:47:91:
36:d6:f6:55:0a:e1:41:5d:ff:0b:ee:24:3f:3d:d6:94:9d:8a:
e6:bd:3e:7a:5e:4e:cf:7a:f6:5e:8b:f0:ed:96:d9:6d:02:af:
45:1f:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:44:19 2025 by rpki-client