Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier: f+535hbHXwJwA66BWAK/roIdF+Cm4j5jmySncjdpO4w=
Subject key identifier: A1:07:F6:7B:DF:61:49:C1:FD:C5:58:33:BA:FA:2B:E9:4B:C3:F6:09
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial: 0196CCF3606D0E574F9379FE90E1DBC5DB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number: 0C1C
Signing time: Wed 14 May 2025 04:00:23 +0000
Manifest this update: Wed 14 May 2025 04:00:23 +0000
Manifest next update: Thu 15 May 2025 04:00:23 +0000
Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: Z6IsgLtrN4C+B1bLsqE+hd18w7JNZ5+MAIWddcA8pLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:60:6d:0e:57:4f:93:79:fe:90:e1:db:c5:db:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
Validity
Not Before: May 14 04:00:23 2025 GMT
Not After : May 15 04:00:23 2025 GMT
Subject: CN=a107f67bdf6149c1fdc55833bafa2be94bc3f609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:4d:55:a1:e1:6d:e6:7f:7f:a1:ab:7d:c7:
9e:fb:20:15:54:dc:66:45:e1:b3:ec:47:c5:63:b6:
c1:5d:eb:f8:99:5e:32:df:d5:21:03:ad:ae:55:2b:
97:fb:cf:cf:ed:75:62:b9:29:e1:1c:1a:3b:bb:d7:
08:31:30:c9:a6:31:c7:5e:fb:cb:f8:dd:6b:03:ce:
24:14:d9:bf:71:52:74:67:de:4b:5f:3b:55:d6:0d:
a1:2f:36:e4:ee:11:68:36:83:d2:d6:05:cd:90:3e:
df:29:bb:a6:16:96:1c:8e:6d:68:8d:31:0b:05:f9:
8c:2c:0c:a2:e0:72:5d:8c:17:ed:0e:da:27:83:bd:
f1:96:a5:16:17:93:d7:09:8b:74:5d:42:5f:cb:6e:
10:83:75:61:0d:aa:0f:b8:66:68:6c:62:27:97:50:
a1:da:98:69:33:9b:40:2f:3f:2e:e8:61:61:31:6e:
82:c9:15:78:87:9c:b7:96:06:2d:e3:ec:59:53:bb:
21:02:eb:ae:00:08:1b:3c:39:e9:61:94:97:5b:93:
65:07:ad:6f:7f:ef:bf:44:36:87:86:2e:b0:9d:9e:
4d:19:57:33:37:a4:13:cc:da:f8:77:cb:da:28:d3:
86:d2:50:3a:76:34:8c:8c:e8:f5:28:99:b7:f4:f5:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:07:F6:7B:DF:61:49:C1:FD:C5:58:33:BA:FA:2B:E9:4B:C3:F6:09
X509v3 Authority Key Identifier:
keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fc:7b:86:82:27:47:f7:34:8c:b2:1c:af:70:9b:38:f6:b2:
7b:24:9c:39:15:9c:3a:b2:dc:c0:d6:ca:33:29:ac:84:56:bc:
9a:bc:06:e4:3c:26:b4:71:1c:d0:d0:b5:50:90:44:61:6a:6b:
37:00:99:88:6e:96:de:fe:5f:03:13:9f:69:15:a0:e6:18:38:
aa:4a:fb:15:8d:86:2b:a2:71:0d:3e:ae:eb:6a:16:18:91:d9:
a4:d4:91:e9:86:6c:da:8c:56:6d:63:b2:3f:9f:33:4d:bc:47:
0d:28:57:58:36:fe:03:f8:5e:75:28:5c:a7:18:b5:83:27:63:
61:34:f0:7a:c8:4a:47:60:f4:e6:25:4c:80:86:82:d4:ee:fa:
fb:47:27:67:11:a5:9f:54:f2:05:43:0e:9a:c3:bd:ef:69:88:
83:8a:8a:48:44:8e:eb:60:64:0a:56:f0:7a:91:c2:70:6b:5f:
fd:6f:5c:48:52:f7:e0:49:2e:65:2e:12:4c:df:a0:e4:cd:24:
d2:e9:de:5c:f6:32:a1:59:d2:5b:31:f3:ac:f9:15:ef:55:1c:
67:3d:a0:7e:99:e6:ea:47:cb:5d:4f:ea:1c:1f:07:bd:a0:ac:
9d:da:17:a4:e7:20:8d:f2:d7:49:f5:6c:62:87:70:fc:ad:48:
1f:6e:29:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:30:37 2025 by rpki-client