Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
File: xIzPWOSy4trdSoSDPAZ87iuXRek.mft (raw, json)
Hash identifier: gzxWO0uHMrymkExk4hk+hulXnCt2ZG6PtkFkVCGwgbQ=
Subject key identifier: E2:19:57:37:18:3C:51:2E:F0:CD:F2:B0:DE:C6:AD:4F:7E:D4:24:B4
Authority key identifier: C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
Certificate issuer: /CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Certificate serial: 0196B7106F6C89270FB42350F46AE4367648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
Manifest number: 0760
Signing time: Fri 09 May 2025 22:00:29 +0000
Manifest this update: Fri 09 May 2025 22:00:29 +0000
Manifest next update: Sat 10 May 2025 22:00:29 +0000
Files and hashes: 1: xIzPWOSy4trdSoSDPAZ87iuXRek.crl (hash: kF3Lt0YjZKE9kCtcMzwvw6pt/MgMDO/qiCKTQSKX3+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:6f:6c:89:27:0f:b4:23:50:f4:6a:e4:36:76:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ccf58e4b2e2dadd4a84833c067cee2b9745e9
Validity
Not Before: May 9 22:00:29 2025 GMT
Not After : May 10 22:00:29 2025 GMT
Subject: CN=e2195737183c512ef0cdf2b0dec6ad4f7ed424b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:51:63:0c:ce:0c:d7:e6:38:3a:6b:7e:93:cc:
92:3a:cf:21:b5:d2:66:c7:24:5e:51:c2:7d:ae:b2:
92:28:83:14:43:1b:b1:e4:83:ff:93:91:14:45:80:
72:d4:39:37:d3:b0:2d:41:6d:83:3b:4f:d1:2e:da:
f3:5c:49:83:63:11:1a:2f:16:86:f8:ff:87:81:96:
e3:50:db:3e:c4:fa:77:b2:e8:a4:5f:c8:9e:de:d1:
37:4e:d9:b0:dd:84:2e:d5:0f:12:ee:c5:8f:38:6c:
d3:e6:b2:49:83:7c:62:9b:77:e1:6b:8c:7c:ec:58:
26:b7:4d:8c:06:6b:e5:49:20:0e:fb:bb:13:f4:65:
ba:ba:22:99:7b:af:3b:c5:c0:e3:3b:b5:59:54:80:
6f:23:97:2d:db:78:3e:6a:8d:70:33:ed:86:88:73:
b9:92:ee:65:1b:2a:6a:b9:ce:17:76:1d:c0:e3:a5:
ad:08:8e:04:6a:f1:a7:88:17:eb:c8:73:e4:16:63:
dc:45:f0:bc:41:87:7c:2b:a0:74:af:07:89:5b:65:
56:da:47:6a:dd:a6:c0:3c:f5:4b:bc:2c:cf:c0:5c:
91:90:ba:d6:14:5c:58:19:da:cb:ec:b2:49:5d:4b:
1b:2b:10:6e:3d:d0:b6:bf:d1:98:17:96:45:d5:0a:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:19:57:37:18:3C:51:2E:F0:CD:F2:B0:DE:C6:AD:4F:7E:D4:24:B4
X509v3 Authority Key Identifier:
keyid:C4:8C:CF:58:E4:B2:E2:DA:DD:4A:84:83:3C:06:7C:EE:2B:97:45:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIzPWOSy4trdSoSDPAZ87iuXRek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cbe005-2689-4379-9a7e-a50e32de0823/1/xIzPWOSy4trdSoSDPAZ87iuXRek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0c:c3:5d:c8:c5:f7:2c:3a:e6:ef:66:83:40:7f:3f:6c:40:
1e:bc:9c:24:70:4e:15:2b:b5:fb:a4:4b:4e:4e:7a:80:fc:40:
28:00:9c:f7:43:d8:41:56:ba:53:95:39:ce:50:86:6b:0f:58:
52:e8:19:03:81:ac:e0:c6:be:bd:a9:04:e1:a5:f6:71:5b:07:
fb:92:da:b6:58:7d:61:fd:cd:93:ee:8a:6c:fb:17:c4:8a:1f:
85:31:e3:9b:95:66:d3:7e:24:55:5b:24:06:23:1d:5a:cb:f6:
ac:d9:2a:2f:f2:9c:99:ab:08:74:6d:99:a8:52:04:b9:e7:69:
54:e2:4a:f4:2e:b9:a5:7a:f2:5e:7b:38:40:58:b8:09:17:e7:
cf:80:cd:25:6d:b0:44:ed:7f:32:ff:65:fc:c3:10:df:5d:23:
67:47:3f:82:1b:35:90:36:14:a9:cf:c7:51:1d:ed:3b:23:40:
3b:98:23:19:e3:a4:a2:d0:cd:6a:d8:82:c5:da:b3:ef:f3:fa:
89:0f:d4:36:04:e4:c9:7a:60:f2:f3:05:4e:0e:62:d8:22:f8:
2f:80:f6:a2:53:f5:8f:92:08:48:27:5f:c5:5c:eb:ec:23:2e:
08:9a:11:4a:e0:08:a7:e4:53:f1:f7:65:65:e8:25:2f:a5:b4:
02:d2:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:55:33 2025 by rpki-client