Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: uE5LIX/UbUsiv+KcwKQ2s3wKKkuEwVeKCAPz2b7HOc8=
Subject key identifier: 49:90:58:72:10:AF:F9:F1:DC:1E:59:BA:A6:26:39:5B:CB:0F:70:DF
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 0196B8238F9F71B73DC98D2E969D1F09644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 0EFF
Signing time: Sat 10 May 2025 03:01:00 +0000
Manifest this update: Sat 10 May 2025 03:01:00 +0000
Manifest next update: Sun 11 May 2025 03:01:00 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: yKd81+HTE1wGJyYxEPQbMrE0loFwZRuMADMvahBhIPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:8f:9f:71:b7:3d:c9:8d:2e:96:9d:1f:09:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: May 10 03:01:00 2025 GMT
Not After : May 11 03:01:00 2025 GMT
Subject: CN=4990587210aff9f1dc1e59baa626395bcb0f70df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:1f:aa:34:0e:2b:67:6a:47:97:92:55:8f:
3c:ca:8d:5e:cd:02:a2:55:fd:02:aa:d1:81:d8:6e:
0c:1a:5e:aa:c2:81:cc:22:f7:50:b5:de:b8:b3:3c:
f1:2f:e5:41:00:95:79:3c:7d:5b:0f:30:02:8a:b7:
4c:ea:2f:1e:a2:eb:d1:64:40:f8:33:e3:18:ff:09:
ed:03:b2:1a:eb:fe:62:af:69:59:86:93:66:b5:8f:
f7:dc:e2:41:bf:90:3f:ac:c9:7a:3b:01:4c:42:de:
07:02:6b:f0:de:d9:b1:c5:33:88:a5:20:bc:75:6d:
ea:82:67:3a:31:cd:ab:67:30:c6:fe:21:c1:2a:d4:
0d:33:71:0e:4d:b8:d9:40:18:4b:a2:fe:a7:df:36:
66:65:ec:15:f1:fe:d6:1b:d6:ac:78:11:6a:41:ff:
d1:ad:41:92:fb:96:79:50:97:98:49:69:ba:70:54:
77:b0:16:6c:9a:b2:bf:18:cf:79:cd:ae:90:e8:e1:
c6:ca:93:e7:ac:7c:8e:80:64:1d:ec:97:aa:66:88:
54:0b:5b:dd:51:ff:86:26:37:23:29:c6:17:94:3c:
08:4f:5d:d8:26:b5:17:6e:43:6e:a4:2a:20:df:73:
9d:15:64:c2:6e:16:03:37:1d:d7:8f:72:f5:f6:bd:
ce:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:90:58:72:10:AF:F9:F1:DC:1E:59:BA:A6:26:39:5B:CB:0F:70:DF
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3e:6f:d7:50:0f:c7:3d:fa:a6:d2:08:27:17:06:16:d3:42:
8f:ef:a7:d7:f3:b7:a5:84:fa:59:1d:6e:0b:6f:93:df:a1:da:
45:22:a3:98:be:d1:19:cd:0f:b2:71:e5:18:97:27:88:1d:15:
45:fc:b1:84:22:de:4a:b2:39:89:ec:86:42:2d:d0:89:7b:09:
43:4c:f7:28:aa:64:b9:92:13:ef:fc:a5:d6:5a:e5:e6:99:e1:
4c:40:c2:74:53:04:60:9c:48:59:5e:64:8f:a4:ab:a8:af:2f:
6b:ae:21:20:ff:27:c3:74:38:98:b1:ee:1c:ba:c2:09:62:d4:
74:c1:ef:44:36:cc:36:ec:18:c1:3a:84:49:86:38:99:60:b1:
db:33:5b:b0:0a:cb:8e:48:1d:e1:6d:93:bf:54:24:a8:b4:63:
ac:94:c4:3e:e1:48:85:71:7c:bd:2a:48:71:c7:a8:71:ee:9e:
51:58:e3:cb:91:0d:7f:f3:e0:b1:b7:95:54:94:12:20:fe:cf:
03:a4:fd:3a:04:8c:25:e6:d2:bf:f6:ef:d6:0a:d1:c3:a6:20:
ae:69:a4:8d:a2:c4:cb:4a:18:7d:e0:a0:1e:e1:10:35:a3:a2:
88:48:4f:57:26:4d:91:6d:69:cb:66:d1:4b:45:d3:1e:01:1d:
64:cc:74:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:23:37 2025 by rpki-client