Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
File: XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft (raw, json)
Hash identifier: oxXYKE3HVWHfGp6KaqfK9FxhN1cmlUU0q/MVPAHuO9Y=
Subject key identifier: 11:0C:D6:5A:B9:EC:1D:30:C6:73:0E:0A:FD:22:63:A8:FE:1D:79:C8
Authority key identifier: 5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
Certificate issuer: /CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Certificate serial: 0196CE3CC9D11AA93C70CC4592FC4613ED8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
Manifest number: 153B
Signing time: Wed 14 May 2025 10:00:12 +0000
Manifest this update: Wed 14 May 2025 10:00:12 +0000
Manifest next update: Thu 15 May 2025 10:00:12 +0000
Files and hashes: 1: XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl (hash: hVGfCr3gzlLNHS12ZW3aSvwvtoA7Fqw8bYFUeByiP8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:3c:c9:d1:1a:a9:3c:70:cc:45:92:fc:46:13:ed:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Validity
Not Before: May 14 10:00:12 2025 GMT
Not After : May 15 10:00:12 2025 GMT
Subject: CN=110cd65ab9ec1d30c6730e0afd2263a8fe1d79c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:d7:2f:c2:e5:f3:b5:9e:df:63:db:02:11:
48:be:e3:33:95:07:80:ae:20:8e:ae:ea:b3:c7:73:
72:21:c1:cf:ff:8f:dd:26:3a:69:e9:1f:6a:25:1c:
f9:01:e5:8c:74:6a:e4:ef:11:8e:bd:79:9c:09:a1:
53:05:61:d7:21:8e:c0:81:a5:9d:16:b3:a0:ca:be:
e8:62:84:12:8c:e7:3b:30:48:88:2c:f1:54:f0:7a:
50:80:44:88:a4:0c:2e:09:69:1b:48:b8:25:2f:0d:
2d:b9:bb:6f:0c:fd:e7:2b:15:27:f7:52:89:62:61:
58:cd:aa:8c:bf:c6:c7:48:e7:29:0b:c3:a7:ad:f1:
50:6d:20:f8:2e:28:65:9e:3a:79:ec:c4:5b:9e:fa:
de:42:85:98:1d:90:80:6f:88:79:dc:0d:e5:1b:37:
b0:3f:06:63:0b:79:ce:5f:20:7d:96:12:d4:3c:ea:
b7:6a:a9:37:64:c1:10:43:c2:e0:7f:87:d6:6d:f4:
f3:68:25:f4:55:1e:40:26:e5:ca:a9:66:65:3d:88:
93:23:a4:92:f7:e7:54:3d:b8:ae:fd:7f:0b:d0:0d:
c1:df:09:80:f8:9e:e0:d6:c2:84:ce:6f:29:b9:6c:
98:be:49:1e:be:10:2e:b6:27:f9:73:85:54:6b:d3:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:D6:5A:B9:EC:1D:30:C6:73:0E:0A:FD:22:63:A8:FE:1D:79:C8
X509v3 Authority Key Identifier:
keyid:5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5c:19:e1:f7:0d:5a:00:40:30:11:68:af:16:43:7e:a0:38:
95:4a:05:b4:46:09:67:30:50:4f:52:5c:be:6b:f5:aa:7e:6e:
90:e4:43:83:43:89:96:09:c0:59:a7:a6:b8:ba:f7:6a:d2:43:
dd:85:2b:30:6f:82:69:ee:c9:d3:0d:5c:d4:c5:9f:41:d0:31:
65:fa:db:e1:5d:ed:44:cc:93:b8:cb:1f:88:8d:11:1d:65:37:
43:c8:4a:ff:2a:00:d6:80:73:0d:b1:24:dc:a3:7b:a6:d3:39:
4e:94:df:f7:bb:4f:ac:58:1f:6f:55:37:54:c8:ef:01:7c:f1:
49:d7:3c:7c:70:09:d4:0b:63:ba:93:0c:99:81:67:99:8e:d8:
4c:72:cb:df:ff:2c:86:89:e9:64:c6:76:f8:e6:65:18:85:1d:
97:e8:0e:68:7f:4a:fc:5a:88:e1:1e:a9:72:8c:1f:a4:cd:a7:
8b:df:70:fd:04:d2:ba:f5:79:2b:4d:2f:cd:20:bb:99:04:5d:
11:37:0b:5d:b4:2e:18:f0:ae:ae:e6:51:d6:b5:ae:86:d4:1e:
bb:b2:40:53:67:dd:2c:57:52:01:7a:e0:23:ec:e2:db:8c:e1:
04:40:03:d1:28:d2:62:3b:98:31:ab:78:96:05:f7:2d:03:d7:
54:e1:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 20:49:44 2025 by rpki-client