Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: KSPSVBliyGn2fGBEiC44ickarKrI1rPM7kD/grDtodI=
Subject key identifier: 6E:DF:EA:7C:BF:D7:74:C1:70:02:5D:24:0D:A9:A1:42:1D:20:81:91
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 0196A2E573A63EB1D19E81D6540D6E7662C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 0CD6
Signing time: Tue 06 May 2025 00:01:08 +0000
Manifest this update: Tue 06 May 2025 00:01:08 +0000
Manifest next update: Wed 07 May 2025 00:01:08 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: Nb1UrOnYPOakSG/tRUagbAT2Kh6oEwwc87W5aSWT2kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:73:a6:3e:b1:d1:9e:81:d6:54:0d:6e:76:62:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: May 6 00:01:08 2025 GMT
Not After : May 7 00:01:08 2025 GMT
Subject: CN=6edfea7cbfd774c170025d240da9a1421d208191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:66:2b:6e:6b:f3:c8:56:dd:68:33:cf:de:
cb:8e:75:59:dd:26:0d:94:e1:60:5b:a5:1e:d9:e3:
5a:54:8b:65:3b:09:82:d1:e1:52:42:b2:f9:cc:0c:
92:d8:6c:6c:a3:bb:9b:66:5e:dd:96:ca:83:b6:4f:
2b:7a:92:6b:3f:43:a7:0e:a5:82:15:b7:a0:78:59:
88:bd:e7:e5:60:25:cb:5f:62:29:cf:64:70:d6:20:
55:bb:58:8a:56:00:b9:d8:87:47:11:02:a9:2d:a4:
46:87:52:dc:c3:36:85:10:17:bf:59:b6:2f:e3:92:
f2:b4:23:f6:ef:a0:43:73:8a:d5:c6:7e:7b:e6:43:
1c:e0:8a:52:2f:a2:36:ac:f0:14:e1:99:f6:5d:16:
65:35:85:14:ae:ca:2a:4b:24:59:d8:66:6d:2f:3e:
62:64:cd:04:4d:70:8f:3c:72:01:e2:40:4a:7c:28:
a1:b8:7f:38:22:58:6f:0e:d8:90:16:2b:88:20:b2:
7b:d3:b3:2f:20:c2:91:d1:59:d9:fa:94:27:26:31:
dd:17:db:5b:61:86:62:56:a1:16:7c:56:15:1c:2f:
1f:02:8c:10:6b:f0:86:1c:39:64:29:2c:53:61:a8:
d2:34:a6:aa:cf:1f:37:7b:0f:5d:04:8f:fb:e5:bb:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DF:EA:7C:BF:D7:74:C1:70:02:5D:24:0D:A9:A1:42:1D:20:81:91
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bb:e4:80:48:aa:9c:a4:2a:93:a5:ac:1e:41:b6:60:1c:3c:
f7:a3:03:a3:58:33:d9:3c:72:9e:1e:25:fb:d5:f4:71:1c:d0:
7d:b5:a9:04:07:c4:29:76:2c:e5:5d:a1:cf:c5:41:6c:c3:76:
d5:87:81:30:c5:39:96:2a:4d:74:83:e7:ff:de:11:97:53:7f:
4f:48:d1:9b:06:42:17:99:f4:c6:f8:11:a2:44:43:4c:c0:24:
74:90:83:42:68:f9:0d:fd:6f:fa:1c:1f:35:93:8c:7b:50:c4:
fc:b2:71:5b:25:5f:46:b4:27:ad:8e:40:34:8f:63:96:11:fe:
24:1e:5b:4c:a3:61:b4:f3:4c:cf:b1:ed:bf:b5:9c:6b:f0:f9:
79:5a:74:c4:62:34:fe:64:62:5b:0a:0d:1c:cc:fd:cc:c5:99:
51:bd:c8:76:8c:46:93:3b:3b:42:89:09:ee:20:04:c7:87:11:
a3:73:12:b8:1a:e1:7c:5b:bd:ef:cd:5d:25:af:a9:1b:74:bc:
00:17:d5:04:ff:f4:6c:6a:7a:a2:44:92:be:15:dc:7b:b8:ef:
a0:8d:6a:83:26:72:7e:76:42:ab:8c:5a:ab:78:58:1c:8a:5d:
7c:0f:e9:7b:6f:9b:33:42:aa:c7:2b:30:20:1d:11:2f:6f:2c:
db:44:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:16:45 2025 by rpki-client