Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
File: xrjeVShQrOhfyMDhaFLMc98QFp0.mft (raw, json)
Hash identifier: A/Js9XVgbmbJVOCHRHo5zChT+3l+m5ckStb+A1k5Ngg=
Subject key identifier: BF:12:01:16:2A:7E:9E:88:50:C6:7D:54:8A:07:36:3A:B4:73:63:14
Authority key identifier: C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
Certificate issuer: /CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Certificate serial: 0196CBAA08959A49A7F463EA070091E5A5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
Manifest number: 0711
Signing time: Tue 13 May 2025 22:00:40 +0000
Manifest this update: Tue 13 May 2025 22:00:40 +0000
Manifest next update: Wed 14 May 2025 22:00:40 +0000
Files and hashes: 1: xrjeVShQrOhfyMDhaFLMc98QFp0.crl (hash: M0zBu226JUyJomB/vvlJX/ZjrzjL2nRSP/9vLtx//JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:aa:08:95:9a:49:a7:f4:63:ea:07:00:91:e5:a5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b8de552850ace85fc8c0e16852cc73df10169d
Validity
Not Before: May 13 22:00:40 2025 GMT
Not After : May 14 22:00:40 2025 GMT
Subject: CN=bf1201162a7e9e8850c67d548a07363ab4736314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:a9:4f:81:87:8e:50:de:99:de:91:ae:07:
a2:09:58:ee:c3:bc:81:64:69:9e:e4:46:be:30:6a:
21:32:2c:b2:6d:c8:a4:d2:1d:b6:3b:0b:9c:d4:83:
a0:96:48:3d:56:9c:cf:48:20:aa:ba:3a:55:62:8c:
43:86:9a:9c:5f:ee:f3:10:d2:70:30:ed:10:bb:7b:
91:3e:7a:3c:02:d6:01:e9:44:c0:79:e0:7d:aa:cd:
dc:88:39:b2:25:00:7c:3e:d2:07:dd:c3:71:58:b7:
c7:35:de:0f:e5:b4:de:fa:83:d0:5f:4a:8e:04:1f:
c8:65:4a:00:1e:fa:45:47:ac:9d:0e:7f:16:e1:b3:
94:9e:fe:17:fb:ed:34:2b:db:83:bd:a6:45:d6:3d:
eb:98:e2:e5:2a:35:0b:ad:2a:eb:e3:2c:5c:76:e1:
ba:70:da:0e:d7:d8:f8:0d:c5:68:30:6b:c0:ab:3b:
3c:ff:97:81:2f:aa:59:9a:ce:b7:17:ce:6b:e3:ba:
29:47:57:41:26:cd:a6:02:08:5c:b9:45:d3:f1:6f:
0c:19:10:8d:db:b8:9c:66:07:a2:4e:e8:50:07:94:
af:26:8f:a5:59:43:b4:b7:1a:4c:78:16:d2:1f:ac:
34:3c:ab:b5:77:8d:b2:83:52:bf:3e:54:ef:06:60:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:12:01:16:2A:7E:9E:88:50:C6:7D:54:8A:07:36:3A:B4:73:63:14
X509v3 Authority Key Identifier:
keyid:C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3c:40:3e:a0:6d:cf:69:6e:c1:57:3a:8f:a2:2c:77:4a:04:
2d:71:ef:9f:c2:8f:f5:5e:2a:96:2e:80:6f:97:78:0a:ae:97:
6f:44:36:b2:07:95:1c:d8:0f:f3:34:06:d6:9c:4a:e7:42:2e:
23:1e:64:12:3b:db:92:be:1f:59:6b:f7:92:7f:40:ff:20:7a:
ad:52:5a:f7:47:a8:d8:22:24:d3:b5:fd:9a:6f:cf:8a:04:4c:
05:67:b6:a2:c9:33:e2:52:29:bb:92:7a:4f:f1:b7:d8:4a:c8:
28:f8:0a:5d:5a:b5:70:58:d3:c2:4d:36:ac:4d:bd:49:ef:2e:
a4:2e:5c:bc:d2:ea:82:cb:05:1c:86:94:d7:e9:7d:78:5f:40:
a1:b1:3e:ab:ef:96:28:bb:d4:59:25:7b:15:df:74:bb:ec:81:
c2:44:06:ec:af:e7:e1:9a:e5:9c:e0:01:cc:d0:4a:26:fa:45:
12:a1:9f:ac:e0:71:c6:c1:7f:fd:55:dc:40:84:75:6e:a0:c6:
99:03:0b:8d:68:dc:e8:78:22:03:7f:a2:f8:99:40:24:d8:be:
a7:e3:fc:80:41:30:27:0b:24:54:75:95:6c:0f:17:da:ff:eb:
37:f0:f0:22:ea:17:3e:f3:83:31:ed:34:cb:da:04:f5:bb:b3:
22:fd:a5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:53:35 2025 by rpki-client