Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
File: XtXKWxx3mVWyVz2isQzXxZH57hs.mft (raw, json)
Hash identifier: LLcFL9iORqwsEUlTku0LVzdRRcl7pf57sJuntmf3s4E=
Subject key identifier: 31:2C:BA:3D:4E:EC:2E:1D:03:7B:C1:C2:5F:99:E0:8A:34:E0:D2:CC
Authority key identifier: 5E:D5:CA:5B:1C:77:99:55:B2:57:3D:A2:B1:0C:D7:C5:91:F9:EE:1B
Certificate issuer: /CN=5ed5ca5b1c779955b2573da2b10cd7c591f9ee1b
Certificate serial: 0196C7292337DF32F576BD349D23E27D4297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
Manifest number: 0A7A
Signing time: Tue 13 May 2025 01:01:24 +0000
Manifest this update: Tue 13 May 2025 01:01:24 +0000
Manifest next update: Wed 14 May 2025 01:01:24 +0000
Files and hashes: 1: XtXKWxx3mVWyVz2isQzXxZH57hs.crl (hash: bm4iEoYvaYrS0X6yoQF9/kWVea0NfRAiPDoDq/QX2OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:23:37:df:32:f5:76:bd:34:9d:23:e2:7d:42:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed5ca5b1c779955b2573da2b10cd7c591f9ee1b
Validity
Not Before: May 13 01:01:24 2025 GMT
Not After : May 14 01:01:24 2025 GMT
Subject: CN=312cba3d4eec2e1d037bc1c25f99e08a34e0d2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:08:20:b0:f0:09:f8:99:00:ea:1a:cf:24:
7d:2d:85:df:e3:8e:3d:e7:55:2b:6f:1e:fc:a8:2c:
69:a3:9b:9f:9a:f6:db:e8:5e:3b:a5:57:b3:73:1c:
4e:43:14:45:82:46:c2:db:6c:d6:e5:0b:1e:eb:d3:
cb:32:fb:9a:0f:1b:68:df:66:cd:75:17:95:0c:b5:
fe:4e:a4:0f:1b:d7:ca:6c:94:67:51:39:c5:fa:42:
db:5d:da:f2:23:4f:30:82:83:c8:9d:d1:e8:65:8e:
40:7c:14:c0:09:98:6a:85:67:28:ea:0b:d6:86:ad:
dc:6c:a7:bb:8e:e0:5c:99:c8:1d:31:e0:96:d3:83:
9a:65:76:f5:1f:6d:4d:d8:51:ea:d2:61:6b:28:95:
f6:e0:c4:4a:5e:a1:9b:68:be:87:c2:16:40:12:b8:
46:92:b3:d8:12:65:b8:25:45:c1:e3:59:a6:7f:53:
c6:4f:c9:b2:39:e3:10:96:c2:9d:31:1e:a3:71:d1:
58:0f:18:45:c1:18:8a:ef:ba:0f:4f:f5:5d:c3:28:
64:47:cf:ac:7a:48:12:0e:e5:43:a0:86:d8:cd:f8:
3e:72:25:6d:82:b4:c8:80:43:f5:4f:3d:02:ba:7f:
9d:b4:82:db:3c:a5:58:32:b7:b0:5c:a4:d8:60:78:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2C:BA:3D:4E:EC:2E:1D:03:7B:C1:C2:5F:99:E0:8A:34:E0:D2:CC
X509v3 Authority Key Identifier:
keyid:5E:D5:CA:5B:1C:77:99:55:B2:57:3D:A2:B1:0C:D7:C5:91:F9:EE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d9:09:c3:a5:fa:32:75:78:bc:ee:a0:43:52:1c:84:49:3c:
af:03:8e:77:37:71:87:bd:d8:53:80:bc:45:7e:f9:a4:20:51:
25:81:85:68:f8:e7:94:60:11:59:f6:db:f1:4c:e8:e7:da:7b:
ba:7a:f9:00:4f:28:11:d4:ab:4f:ba:59:2b:60:5f:a8:88:52:
08:78:f5:73:4a:d7:ca:53:08:81:cb:81:2d:a2:ee:03:e3:db:
31:90:ae:f8:85:e5:60:4d:89:0e:3a:d6:f7:10:6c:69:61:f2:
c4:87:69:b4:88:0a:59:85:43:65:a7:0e:f5:df:64:d0:f4:a4:
d1:b3:bc:1f:a5:0f:e4:f3:8e:0c:fd:6c:60:c4:a7:85:c6:9b:
e1:cc:e2:8f:1f:cd:94:ee:01:39:79:01:d6:82:eb:32:98:02:
da:24:d4:44:38:1c:90:eb:7f:89:b6:89:1b:a0:6f:86:16:a9:
70:8b:94:d9:31:f5:34:fe:8d:25:60:b8:e1:15:ee:c2:78:12:
5b:ba:b7:af:52:4e:ea:c8:f3:56:4a:cf:de:f6:66:0c:96:53:
73:72:3e:02:09:69:35:a1:7e:ac:fc:86:53:26:fc:36:11:9f:
97:ce:1a:9a:9c:5f:7e:3a:67:49:d1:48:c2:43:e0:02:aa:ab:
46:64:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:24:11 2025 by rpki-client