Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier: 4Gbj6USl+WwQsALu/K+CrlADpKDki4VHr3YP6uqc1RA=
Subject key identifier: 6C:D3:09:18:E6:D2:9B:E4:33:D3:B3:23:26:09:71:52:2E:50:BD:04
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial: 0196D13DEBA6C55BC4BB9F7632580D9862A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number: 048D
Signing time: Thu 15 May 2025 00:00:18 +0000
Manifest this update: Thu 15 May 2025 00:00:18 +0000
Manifest next update: Fri 16 May 2025 00:00:18 +0000
Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: WkxJi9g6AkoFnvYS+zCwWWc9G9Sq8AuokbheUWv+538=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:3d:eb:a6:c5:5b:c4:bb:9f:76:32:58:0d:98:62:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Validity
Not Before: May 15 00:00:18 2025 GMT
Not After : May 16 00:00:18 2025 GMT
Subject: CN=6cd30918e6d29be433d3b323260971522e50bd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:14:91:7f:9f:7b:cd:c1:e3:e4:e1:31:ca:
43:1f:3d:b3:7b:07:90:a7:9c:5f:29:48:21:84:53:
89:29:1f:58:8e:fe:bc:e3:ca:cf:2a:fa:91:9c:00:
90:5f:dc:de:cb:c4:c6:0d:8a:6d:15:fd:3d:c2:cb:
65:94:1d:bb:cd:0f:b3:c5:98:2e:f5:85:47:45:a7:
4c:8d:87:78:bd:e2:f3:30:3e:6f:13:b0:7e:ab:61:
56:bf:3d:7f:f0:2c:95:37:6a:e5:09:f2:52:f9:8e:
68:76:03:14:df:6a:b9:d1:f1:8a:89:6f:29:92:fc:
a0:ed:ee:99:cd:1a:a4:e1:35:e7:87:f3:f6:fa:7b:
b1:f9:b9:14:9b:97:39:0d:93:15:33:ef:78:3c:7e:
44:25:6a:8c:20:5b:76:e1:37:39:4b:94:d8:9b:43:
03:ca:19:1a:e9:9e:7a:95:be:9b:1b:f4:42:9b:da:
19:b7:ed:d4:01:1d:d8:cd:d3:49:8c:5a:8e:fa:53:
38:1c:97:15:9f:56:f1:50:38:a6:f1:d9:30:3e:9c:
22:c3:f4:d0:c1:b4:dc:f4:36:c3:ff:b3:c6:4b:93:
8b:dd:2c:f5:96:a6:0a:01:02:f5:8c:b2:07:0c:3c:
43:84:05:ad:81:18:b4:91:7b:74:26:99:c1:29:d0:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D3:09:18:E6:D2:9B:E4:33:D3:B3:23:26:09:71:52:2E:50:BD:04
X509v3 Authority Key Identifier:
keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ed:22:cd:39:5f:e5:9e:e4:62:14:c5:a0:3d:61:45:22:8a:
6d:45:50:a4:60:ae:51:ba:5e:fd:a9:99:93:54:16:c0:0f:8f:
12:b5:77:c4:1b:b5:ec:0b:10:fa:12:02:44:f6:dc:b1:e3:d2:
96:20:38:cd:93:7d:4b:f2:85:40:45:52:b9:16:ef:39:27:67:
98:f7:ec:bb:71:79:9e:d4:b3:1e:2f:fa:37:84:d3:b0:9e:0c:
e6:70:51:a7:7b:fe:43:de:80:57:57:33:8e:c3:ce:af:13:c7:
b5:5a:6f:3d:0d:ed:98:61:01:a8:09:03:24:20:c5:b5:07:20:
7a:17:70:17:83:3f:38:4d:79:41:35:37:86:6f:df:88:53:90:
00:bd:fb:47:fa:8a:1c:e1:44:ea:5b:14:72:8f:76:59:99:89:
4e:ff:2b:79:2d:c2:a7:3d:94:30:f9:c2:88:da:25:f4:ca:61:
9d:c8:2a:85:02:81:7a:07:ad:1d:9c:30:f3:85:54:23:a4:21:
c6:77:8e:fd:7f:a0:6e:68:de:ef:55:0f:9f:96:33:c8:99:83:
f1:62:d0:14:8c:5b:51:06:e9:ef:88:21:77:fb:df:17:46:fd:
49:95:e2:62:d8:f8:82:58:f8:8d:a2:01:94:f3:80:ac:e0:bb:
25:bd:cd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:36:52 2025 by rpki-client