Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: ORA1CPm+eREI4DNXHIO+zTxkcN4bwmu9n60cXFIuPFE=
Subject key identifier: 38:4A:F3:2F:D6:F4:88:0B:42:2D:33:CA:19:F1:8A:0E:94:CD:F5:65
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 0196B52256F4B519911A100E56017D16D011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 141F
Signing time: Fri 09 May 2025 13:00:48 +0000
Manifest this update: Fri 09 May 2025 13:00:48 +0000
Manifest next update: Sat 10 May 2025 13:00:48 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: By7OeekGr1KiXeeltS0cLq27gKRWzAuypUC6NF/JVSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:22:56:f4:b5:19:91:1a:10:0e:56:01:7d:16:d0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: May 9 13:00:48 2025 GMT
Not After : May 10 13:00:48 2025 GMT
Subject: CN=384af32fd6f4880b422d33ca19f18a0e94cdf565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:06:31:ea:83:a3:b3:90:91:20:be:c2:ac:
43:52:98:ee:1f:ff:6b:a1:d5:52:b9:29:af:84:3d:
c5:0c:97:ce:6c:8d:d4:0f:d1:40:50:11:09:24:1e:
ae:c2:3c:8a:5f:a1:b1:d5:d8:34:47:ad:3c:1e:ee:
bc:9c:ff:95:bd:df:dc:cf:ec:9e:54:44:41:5f:00:
85:86:6b:08:ec:56:4f:0f:25:aa:15:ec:89:bb:5d:
58:2f:92:0b:4c:89:c3:cf:b6:2c:96:ae:46:49:8d:
78:73:aa:f1:47:f9:a5:06:54:72:e2:b6:72:f3:34:
29:1d:9a:61:41:6c:d2:16:08:53:7f:2a:20:20:25:
d3:69:03:fd:c5:88:6b:9a:9b:bf:e4:21:ab:28:fa:
7d:2f:ac:25:d4:51:be:86:f1:4e:b0:5a:46:d8:f3:
9f:a1:5b:c1:8d:61:9b:a8:8e:a9:f6:8b:ed:b3:13:
e6:bd:7c:90:43:b6:d5:a6:46:a2:30:c6:4b:49:dd:
0f:43:54:25:53:31:b7:83:3b:5d:d5:e2:50:55:85:
60:e7:9f:a2:5c:9f:95:5c:d7:e5:36:d7:07:d9:85:
bb:43:d9:31:b0:0c:03:23:0f:08:08:dc:d9:74:a2:
f8:b2:a5:5b:48:8d:5b:57:b2:38:82:7f:ab:a0:bc:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4A:F3:2F:D6:F4:88:0B:42:2D:33:CA:19:F1:8A:0E:94:CD:F5:65
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7b:12:9c:7e:aa:cb:76:15:b3:46:bd:b0:37:38:83:b7:55:
ee:c2:27:c3:be:92:15:90:72:29:94:2b:c6:fe:19:e7:81:c6:
40:9d:0c:e8:07:4b:ff:4e:01:90:d0:48:0a:5f:4a:ac:27:ec:
45:89:5d:e5:32:c0:bb:63:b2:c3:91:53:ce:91:15:d4:c2:93:
3e:7d:bc:25:a3:76:14:9b:fe:4f:de:9e:7b:2e:fa:30:f8:8f:
62:02:b9:e4:62:b9:6b:8b:5c:0a:73:fb:b5:3c:50:b5:f0:80:
f5:90:54:d8:75:02:b4:5e:25:2a:eb:65:9c:36:2f:8c:f8:46:
6d:3b:cd:c2:b7:c0:48:39:dd:cb:55:4d:72:58:a1:bd:50:d1:
fd:0e:16:d8:27:5b:11:b7:e1:6f:dc:0b:e4:1b:0f:ea:2e:b8:
3f:1e:ea:c0:76:c7:bc:04:d3:df:4c:a3:41:80:fb:9a:94:f8:
e7:80:e8:0c:32:65:b2:f6:49:6c:c1:3a:e4:7f:d8:dd:82:3c:
37:c4:d8:cd:eb:df:bb:ae:26:8e:66:3a:8d:c1:c3:f1:12:f5:
f9:d3:7a:2d:11:2d:3a:92:d8:fe:46:f8:5d:93:97:28:7a:a6:
cb:bc:e3:6f:d5:36:21:2d:65:84:84:cc:10:04:34:aa:68:75:
eb:3f:4f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:07:26 2025 by rpki-client