Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
File: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft (raw, json)
Hash identifier: t8+g7dc4sTlAlXwSgj9Z2leghp9XiXwcGNhYbJAgLTs=
Subject key identifier: E2:4C:36:04:30:52:07:18:E7:99:46:C1:31:58:DA:68:38:0E:38:A1
Authority key identifier: AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
Certificate issuer: /CN=af1bc3295ac305f85960e0401b00f487a94ab394
Certificate serial: 0196BA7FB060D4FE82DDD0B0B2D675C61861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
Manifest number: 114D
Signing time: Sat 10 May 2025 14:00:52 +0000
Manifest this update: Sat 10 May 2025 14:00:52 +0000
Manifest next update: Sun 11 May 2025 14:00:52 +0000
Files and hashes: 1: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl (hash: PEl6lll/l+IM/zDuUMlqrbkpoPNCpMo7pwbpHSopVJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:b0:60:d4:fe:82:dd:d0:b0:b2:d6:75:c6:18:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1bc3295ac305f85960e0401b00f487a94ab394
Validity
Not Before: May 10 14:00:52 2025 GMT
Not After : May 11 14:00:52 2025 GMT
Subject: CN=e24c360430520718e79946c13158da68380e38a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:a1:03:7c:b0:be:c4:9b:66:c0:8b:d7:cc:
c1:7e:f8:c2:6a:19:41:85:76:bd:39:3c:4b:45:b5:
7b:b0:00:f6:8c:06:04:6f:8b:8e:80:64:b5:36:a3:
a8:cb:c7:46:97:7c:1f:13:69:31:c9:41:53:64:d1:
9a:27:fc:82:f4:01:b8:54:e2:cf:ce:97:68:d9:2c:
a1:ee:5e:de:be:1f:61:06:d6:5e:d7:1a:5d:e0:17:
a1:81:f1:4b:e6:4f:4d:23:90:e2:bf:9b:da:92:f8:
fe:c2:af:bd:3c:02:08:ee:ca:22:40:48:32:b6:f3:
2a:d4:e1:ba:de:8e:01:38:ea:b0:d3:10:72:6e:e0:
83:9b:1f:45:b1:a0:05:b5:2e:c4:24:32:5d:a0:8d:
67:0e:b8:dd:d0:1b:bf:e5:ed:9a:e2:86:a3:fa:de:
c0:26:3c:5b:1b:8f:9a:b2:56:0a:fc:de:af:ea:e3:
54:62:fc:ac:80:98:be:6e:b1:fd:a9:53:f4:4c:16:
41:5b:48:9a:15:1e:05:84:19:f1:0f:74:71:72:5d:
e8:05:d5:0b:d7:1b:57:d7:0a:9d:24:a5:ea:81:cf:
75:a1:29:53:70:a5:34:1a:fc:80:05:81:a7:61:7e:
f2:44:11:6e:4f:c9:9f:72:6b:ca:c7:9c:b5:db:1e:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:36:04:30:52:07:18:E7:99:46:C1:31:58:DA:68:38:0E:38:A1
X509v3 Authority Key Identifier:
keyid:AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:14:1d:11:ec:13:fd:7b:d8:fd:66:09:3f:f2:2b:7a:13:c2:
f7:d5:47:08:e6:55:ac:22:6c:9e:28:86:5c:cc:b6:cd:3b:53:
81:7c:e4:7a:dd:a8:7f:5d:1c:4b:70:08:ef:06:db:0a:fd:0d:
9d:3b:8e:02:8e:a7:41:ea:34:ad:42:32:fb:84:2f:03:8a:54:
7a:b6:35:60:a5:1f:03:4d:05:55:f0:ff:5b:3d:a4:a8:86:b1:
c0:5b:05:6e:3d:78:e7:cc:04:c6:9f:f6:d4:db:51:11:7b:e3:
b6:5b:e8:67:3d:a9:54:d4:06:c1:e0:8b:07:82:33:cc:fd:57:
1f:6e:2a:e9:0c:11:bd:cd:5a:f0:dc:80:20:91:b7:df:42:55:
fd:f5:ed:5c:4d:50:84:a0:73:e5:e3:6d:48:69:2a:7f:be:11:
55:e3:dd:12:70:72:42:25:92:55:d1:bc:b3:f9:d9:bc:26:3f:
45:f7:18:d2:59:88:5b:48:34:f2:c6:c1:52:dd:51:2b:bc:c5:
7c:2f:2c:56:30:a1:4f:fc:82:b0:76:c0:58:92:a9:99:f5:cf:
a4:fd:7c:d0:b8:9a:d3:99:84:e2:51:01:79:6a:7c:d5:b5:9d:
24:74:53:f7:c6:b3:64:ea:3c:8f:ff:7c:07:0b:6f:67:28:34:
2a:54:c6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:25:03 2025 by rpki-client