Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: Fuj7ELage380SYQ39yYwXvC+IpzXqi2M83Pkveo7es8=
Subject key identifier: 60:08:E8:D5:4D:F3:88:78:47:28:C4:40:5B:80:F4:CE:8D:C1:19:6F
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 0196C427891654A2A78AB9ACE0B6D29E7902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 1029
Signing time: Mon 12 May 2025 11:00:47 +0000
Manifest this update: Mon 12 May 2025 11:00:47 +0000
Manifest next update: Tue 13 May 2025 11:00:47 +0000
Files and hashes: 1: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: XK2QtBA5Wk/Aa6m5CQ3aZ04MZ/XUPg2vpYYM4bnOMz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:89:16:54:a2:a7:8a:b9:ac:e0:b6:d2:9e:79:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: May 12 11:00:47 2025 GMT
Not After : May 13 11:00:47 2025 GMT
Subject: CN=6008e8d54df388784728c4405b80f4ce8dc1196f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:d0:a2:e5:85:7d:8f:cd:c0:c8:9a:4f:75:
1e:37:e3:69:35:f4:e0:dd:20:aa:47:69:ee:ad:ae:
40:44:2d:be:2c:c5:01:28:ad:52:b3:d2:ab:b6:60:
93:78:39:96:a7:0a:36:46:9d:53:80:07:8a:7a:8f:
82:6e:e4:f5:dc:bc:dd:ef:c8:c0:c8:3e:e7:be:3d:
d2:ce:82:bb:df:95:17:5f:f4:84:1a:7b:45:5a:39:
30:ba:1d:a1:d2:7a:41:8e:2c:43:45:cb:e7:b4:50:
a0:ab:0d:ce:70:d4:51:02:96:b4:59:bb:bc:54:b0:
12:72:07:a1:e4:83:7d:85:35:cf:c9:ca:cc:a1:fd:
b6:45:c1:8c:d3:f5:01:57:d6:f7:10:5d:cc:5b:2b:
9c:b7:45:44:86:e6:00:d0:ca:66:f7:ff:86:8a:e4:
7b:e1:f1:3d:1e:cb:19:ca:bb:42:9a:5a:a7:73:15:
0c:e6:45:53:95:08:4c:3b:05:58:df:e0:57:ec:88:
a3:f4:52:2e:41:62:b9:0a:79:5b:67:09:a4:42:22:
51:e4:16:61:26:d1:17:4e:06:16:8d:f8:cc:3d:7e:
c3:4a:50:c7:a5:50:e6:f4:fb:38:4d:fa:b8:5b:82:
d7:76:95:11:20:f7:09:2b:0b:68:ff:85:c2:4e:bf:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:08:E8:D5:4D:F3:88:78:47:28:C4:40:5B:80:F4:CE:8D:C1:19:6F
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8c:0b:74:25:f7:33:2a:78:02:68:b8:53:55:fd:b0:d7:49:
f8:e6:82:f5:3c:98:5b:39:61:00:96:f4:d0:e9:6f:59:32:d2:
cc:b0:fe:60:0e:6b:a2:74:10:2f:69:91:77:9b:25:0b:93:83:
c8:e9:fb:c1:82:14:18:f0:04:5f:dc:b7:b8:e8:73:96:6e:f4:
91:ca:06:09:14:17:7e:a7:02:c8:bd:bf:e0:0b:e0:60:da:bb:
a0:0f:fc:d8:72:97:de:da:2e:bc:31:27:a1:cd:80:bb:d2:3b:
d0:51:7d:56:7c:f0:a0:4f:fb:3a:bd:f0:ab:c6:24:4f:f3:60:
72:c0:29:81:46:bc:a1:46:f6:23:0d:45:76:4d:ce:56:4f:21:
96:49:0b:a2:0a:72:aa:b2:58:37:b6:4e:84:7d:91:18:5a:86:
5f:b7:95:2e:8a:c5:ad:b0:5e:f7:1b:69:c2:05:e5:17:16:51:
e1:6d:10:ad:df:ed:31:1a:eb:51:7e:29:f1:a3:9c:41:36:0a:
f1:d3:43:33:ea:79:75:17:55:51:2e:e5:ce:3d:75:72:9c:5d:
15:e1:9b:81:65:1b:88:aa:2a:d1:07:93:24:2e:b4:30:b3:f7:
4d:b5:62:d1:a7:8f:38:67:f3:26:e0:94:38:4e:8a:a4:a3:34:
25:f6:5a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:50:31 2025 by rpki-client