Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
File: xbqElpIUKuxW19DdyN1N20HPg8E.mft (raw, json)
Hash identifier: y3HTt3ADwqYm/lt5ziH7id5dF2UHIOoDErEyrogMen4=
Subject key identifier: DD:D1:D4:61:65:C6:12:28:CA:5D:0B:C7:8C:33:9A:D6:1A:37:00:57
Authority key identifier: C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
Certificate issuer: /CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Certificate serial: 0196E48DF5FD9982FB2BB4D3774DAA420DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
Manifest number: 0E48
Signing time: Sun 18 May 2025 18:00:30 +0000
Manifest this update: Sun 18 May 2025 18:00:30 +0000
Manifest next update: Mon 19 May 2025 18:00:30 +0000
Files and hashes: 1: xbqElpIUKuxW19DdyN1N20HPg8E.crl (hash: yP3qFkiWra4TUAc976oSn9Lit8aCHC8IonRd70MgC3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 May 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e4:8d:f5:fd:99:82:fb:2b:b4:d3:77:4d:aa:42:0d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba849692142aec56d7d0ddc8dd4ddb41cf83c1
Validity
Not Before: May 18 18:00:30 2025 GMT
Not After : May 19 18:00:30 2025 GMT
Subject: CN=ddd1d46165c61228ca5d0bc78c339ad61a370057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:98:0a:17:38:14:1e:7a:7b:dd:0b:39:9d:
ab:c1:a3:b8:97:d6:00:cb:6c:4f:e1:89:52:28:aa:
0b:e4:a6:8a:7e:26:0a:ad:7b:15:56:a6:f5:ef:be:
00:d7:42:d5:c2:ee:72:1d:bd:bc:b5:a6:25:d8:fc:
37:73:ac:71:d6:bd:b7:8d:f9:97:c9:c2:e7:e1:0f:
21:51:2e:fe:e0:9d:31:5a:b6:47:ab:82:1d:08:e7:
a3:7c:22:4f:8a:d4:5c:25:f8:07:93:2c:6b:21:66:
70:96:7a:0d:ee:06:56:5c:d5:9b:f5:aa:76:a8:2a:
0b:27:25:30:70:d8:32:70:3a:2e:7f:fb:15:6b:f3:
7f:76:14:5c:50:cf:5f:13:1f:89:65:90:ee:97:c2:
c3:56:76:0e:25:cf:a5:33:d3:cc:fb:37:48:a8:4f:
19:a0:39:06:15:87:9c:41:9a:c6:ca:0a:f3:c5:6f:
d4:75:ce:80:b4:4a:95:90:46:f3:b7:c9:f6:ee:c9:
41:df:a9:9a:15:60:7e:ae:db:cc:f3:f3:55:6d:c4:
e6:6f:f6:96:91:94:71:fd:f2:c9:4b:8e:09:8c:c4:
d0:f1:d5:cc:10:52:ca:ae:3f:7c:b5:7e:d3:52:91:
ce:d9:bc:7c:84:c0:21:c5:0d:d4:bc:40:cc:d7:3a:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D1:D4:61:65:C6:12:28:CA:5D:0B:C7:8C:33:9A:D6:1A:37:00:57
X509v3 Authority Key Identifier:
keyid:C5:BA:84:96:92:14:2A:EC:56:D7:D0:DD:C8:DD:4D:DB:41:CF:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbqElpIUKuxW19DdyN1N20HPg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/06684c-9955-424b-ace8-23797aeabb0f/1/xbqElpIUKuxW19DdyN1N20HPg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e6:0f:41:fe:fb:95:5f:ee:b7:ed:35:33:a8:38:6b:3e:a8:
7d:1c:60:07:64:02:8d:97:37:ee:8b:3f:db:56:aa:21:66:5e:
4d:9c:43:5f:cb:fa:9d:68:b1:68:7a:c4:95:3d:a5:cf:f3:0a:
18:fb:47:15:07:cc:19:01:fa:45:e2:d0:8e:ff:eb:83:67:d5:
5b:41:2b:5f:9b:3d:09:25:9f:e9:9d:2b:57:fe:4b:38:c9:e9:
6e:bf:90:d7:e6:c3:9d:11:1e:78:f3:ef:c2:9f:e6:a2:a8:83:
e6:75:d6:7b:9a:86:92:df:83:43:44:76:0a:bb:8f:17:5b:8b:
42:c6:34:bf:0d:c7:9e:d3:5f:eb:ec:01:27:a6:cf:5a:71:60:
0e:08:4f:6e:94:45:6c:de:f4:80:51:de:7b:db:4c:a7:2f:ef:
4c:12:87:02:7a:cf:70:dd:25:6d:b4:3b:60:b7:29:29:a5:d7:
5c:e4:7a:49:e9:3f:73:90:1b:83:b7:27:3f:80:1d:f7:ea:af:
d1:03:cb:d6:2e:02:05:0e:37:7b:07:e1:36:c9:97:6c:89:4d:
48:3a:8e:f7:1f:f6:de:3e:56:19:0f:66:8c:ab:b8:c7:a0:c9:
1a:3e:0e:d4:b2:1f:63:91:7b:31:17:3c:21:15:b0:61:f8:4c:
f0:ed:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 21:06:44 2025 by rpki-client