Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
File: XHOCiOHdRuIcmgORGXJEtHjQqyY.mft (raw, json)
Hash identifier: Pw8RKTkpdB2Ulxx5H2M0nBY9jA0e/j5eBiW2S6O+21E=
Subject key identifier: C5:22:3F:C2:29:5C:5C:1A:AF:F9:87:B2:D6:D8:B8:91:BE:50:07:61
Authority key identifier: 5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
Certificate issuer: /CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Certificate serial: 0196CB05084231F8197EA4D59B866BD00BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
Manifest number: 1537
Signing time: Tue 13 May 2025 19:00:26 +0000
Manifest this update: Tue 13 May 2025 19:00:26 +0000
Manifest next update: Wed 14 May 2025 19:00:26 +0000
Files and hashes: 1: XHOCiOHdRuIcmgORGXJEtHjQqyY.crl (hash: JOtxCA1oYkR4rKzNmPcM0OlpBpLOxPapkYwIjy3TikY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:08:42:31:f8:19:7e:a4:d5:9b:86:6b:d0:0b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c738288e1dd46e21c9a0391197244b478d0ab26
Validity
Not Before: May 13 19:00:26 2025 GMT
Not After : May 14 19:00:26 2025 GMT
Subject: CN=c5223fc2295c5c1aaff987b2d6d8b891be500761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:eb:7d:b3:a5:a0:f7:ca:41:ef:c9:1e:d3:
87:ac:11:8c:8d:c7:ca:f7:0d:85:c8:60:75:a1:91:
fa:d8:cf:d0:c8:40:70:d0:c8:ae:ca:ae:a1:bb:2f:
48:32:ae:01:24:21:48:34:c0:7b:21:77:77:b6:6d:
b3:fb:4b:4b:72:79:00:aa:2d:56:61:fb:76:d4:a5:
7b:f7:2e:de:d0:b2:b2:18:17:9b:60:8e:fe:df:21:
95:88:e1:b4:3c:28:b6:2d:0c:51:ce:69:43:ac:df:
09:12:ca:8f:8a:eb:4f:06:ff:1a:d7:77:74:95:e5:
e3:ca:fd:ad:9a:16:a8:de:02:d8:a2:4f:61:9f:af:
83:4e:b0:20:99:31:16:c5:f6:71:8e:99:e7:80:70:
c5:a2:6d:ca:20:21:8f:c8:9c:7c:85:c2:18:a8:fa:
2b:60:8a:47:ad:5e:af:93:fa:84:45:07:c3:38:d6:
8a:41:72:86:e6:7e:2e:00:bb:53:32:b0:65:60:5c:
f9:aa:56:da:d7:63:9b:93:96:6c:28:1a:63:83:db:
06:58:41:0b:7e:e8:0d:7f:12:00:6a:76:7a:7e:d1:
79:e7:37:1a:75:ed:95:df:1f:22:d2:e9:1d:9a:33:
64:6a:e5:2e:fd:6d:c3:ee:b0:80:cd:4f:7b:cd:4d:
4d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:22:3F:C2:29:5C:5C:1A:AF:F9:87:B2:D6:D8:B8:91:BE:50:07:61
X509v3 Authority Key Identifier:
keyid:5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3d:30:c1:88:2b:f3:c9:63:7b:10:b1:1c:71:2d:45:b4:65:
ab:9d:39:99:54:1d:fc:e9:12:c7:a6:06:fe:47:fb:a1:f2:7d:
ac:62:09:c0:0e:b2:05:3e:45:3a:9e:eb:44:d1:cd:6a:da:5d:
5e:4d:67:3d:3c:9d:c5:21:5c:ca:61:e1:73:17:85:ff:0c:1c:
55:0e:2c:5c:2e:f2:e4:74:4e:57:48:80:2f:e7:a8:88:cd:94:
d7:8c:93:17:7e:a8:81:50:42:b1:a8:7a:cd:96:f6:5b:0f:13:
b2:7e:c1:0d:88:e8:12:8c:5a:91:41:00:79:31:c7:4b:4d:d2:
ef:8f:1f:d2:40:3a:15:ee:8a:21:7f:f0:5b:4e:52:27:dd:d9:
29:8e:27:07:0c:fb:d2:11:8d:43:f4:5b:80:13:92:23:a1:a9:
bf:b9:3c:85:06:17:32:5c:5a:9a:fa:04:72:d3:a4:f9:2d:15:
33:d6:0e:ca:ba:01:8e:32:ad:54:cc:d7:bd:86:67:39:bc:be:
b4:35:4b:9e:30:ca:34:2d:8c:18:ad:a9:4c:74:ba:22:94:e5:
39:f2:19:85:b0:72:51:41:63:79:63:d3:b7:86:f4:05:8a:47:
0b:d1:68:e9:0b:a3:85:31:7c:de:cf:62:78:6f:c6:b8:9b:4f:
5e:5b:2f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:26:59 2025 by rpki-client