
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: zuTD58U9Hhxx13NFXX6KIAL3bVfH8eFfoupp/PZp2vQ=
Subject key identifier: 75:86:0E:28:F4:7F:35:47:A0:D8:FE:D8:87:21:9F:8F:6A:77:57:3C
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 01969E9A43B84820D8484977F4489FDAB9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 08E0
Signing time: Mon 05 May 2025 04:00:32 +0000
Manifest this update: Mon 05 May 2025 04:00:32 +0000
Manifest next update: Tue 06 May 2025 04:00:32 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: 6wN3ynqojHIhUm3F/hPsuPNGH8NxguH0LrXqZWUs+H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:43:b8:48:20:d8:48:49:77:f4:48:9f:da:b9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: May 5 04:00:32 2025 GMT
Not After : May 6 04:00:32 2025 GMT
Subject: CN=75860e28f47f3547a0d8fed887219f8f6a77573c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:ae:ee:49:38:1f:14:82:da:41:10:7b:31:
94:7b:6d:62:e2:c4:4e:2a:4b:39:9c:63:32:ab:94:
8b:1b:17:f6:34:78:1f:c4:6c:d8:a5:66:90:ef:20:
fa:4e:ff:91:38:7c:63:3a:e3:d8:46:ca:a1:23:47:
ed:e5:a6:58:9d:5e:c1:15:8e:f6:4f:63:df:bb:69:
79:ff:50:78:e7:d4:e0:c3:52:91:b2:de:15:30:7d:
83:e7:de:5b:1f:06:9b:f6:17:86:46:f8:ae:c2:1e:
dd:70:3b:6a:14:93:05:ce:7d:ea:45:bf:d2:c9:77:
62:00:e2:9f:c6:ad:94:11:0f:84:f0:5a:87:fa:4d:
55:87:40:db:16:1b:8a:cd:02:74:27:7f:0b:07:2b:
5b:33:69:34:aa:20:42:b4:b0:1d:5f:1a:fe:d3:4d:
cc:27:a4:4e:c6:4f:33:76:37:a7:e7:7b:4a:20:6a:
8f:51:58:ef:91:d5:03:af:45:41:4f:02:8f:40:79:
88:45:3c:dc:9c:72:19:c5:c2:96:05:cf:18:2b:f2:
61:e1:eb:d2:06:ff:f3:79:ac:54:53:d0:e9:32:56:
d5:0c:c1:7e:0a:3f:71:18:c5:fb:e7:79:f6:46:86:
be:a6:a3:ee:fe:6e:c6:f3:73:8e:34:04:ed:a4:74:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:86:0E:28:F4:7F:35:47:A0:D8:FE:D8:87:21:9F:8F:6A:77:57:3C
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:43:69:d3:f6:cd:2d:a6:23:ea:8f:a9:4e:c1:d4:ed:59:c3:
fe:8d:38:88:6e:cd:63:c2:71:45:24:38:38:7b:f2:e8:12:81:
da:45:1a:5e:bd:f9:47:23:41:91:68:0c:c5:20:b8:a3:4a:62:
57:d8:4c:b4:86:0d:94:6e:f9:57:86:ad:8f:2c:10:4d:9c:9f:
84:cf:8b:19:42:fa:47:de:8b:87:38:ab:02:ff:b8:38:98:cb:
6d:55:f3:59:60:1d:c6:32:13:1d:e4:c3:88:3c:6f:f6:61:61:
fe:e5:5d:0a:a4:3a:a6:df:31:cb:14:b4:b4:5b:de:96:53:2c:
df:37:51:3d:b5:ca:2b:5a:54:aa:37:7a:85:92:03:fb:6f:2f:
62:8b:9a:51:d6:6a:67:9b:48:f1:85:d9:b6:66:eb:6d:ea:c9:
36:d2:aa:c6:be:65:9b:c7:4b:4d:75:8e:d4:91:7c:9c:24:ee:
13:61:74:eb:ac:f5:1a:37:ca:51:d8:80:64:7e:22:4d:6f:40:
76:71:e5:fd:f8:09:c6:b8:5f:6d:60:1b:4f:03:9c:70:a8:d9:
15:ef:16:17:42:3d:f7:63:e9:29:6e:5f:7d:c3:c6:72:65:26:
ce:f9:1c:38:64:ca:0c:4b:ac:d8:67:28:8e:a8:91:8c:a7:a7:
cf:87:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:24 2025 by rpki-client