Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
File: Xl5k_r-lZnT03hZCn13eSdnOk2g.mft (raw, json)
Hash identifier: LqZO20skcTAAMgbIt8F7aWZQXYQvH3LJCsRwHoeslIk=
Subject key identifier: ED:57:65:BF:AF:26:F9:5E:4D:8B:5D:FF:90:53:98:64:DA:5D:94:22
Authority key identifier: 5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
Certificate issuer: /CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Certificate serial: 01965492AC528AC1234E003C60906321BA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
Manifest number: 118F
Signing time: Sun 20 Apr 2025 19:00:20 +0000
Manifest this update: Sun 20 Apr 2025 19:00:20 +0000
Manifest next update: Mon 21 Apr 2025 19:00:20 +0000
Files and hashes: 1: Xl5k_r-lZnT03hZCn13eSdnOk2g.crl (hash: JkmhF9/ABV0bHJDfe7rPnadaIO/GlcbYIEAMZz1JEHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:ac:52:8a:c1:23:4e:00:3c:60:90:63:21:ba:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Validity
Not Before: Apr 20 19:00:20 2025 GMT
Not After : Apr 21 19:00:20 2025 GMT
Subject: CN=ed5765bfaf26f95e4d8b5dff90539864da5d9422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:c7:7b:ad:33:33:58:30:07:a8:11:59:3d:
91:3b:64:ef:2e:57:e9:36:fc:44:62:8c:16:e4:c9:
bf:82:96:41:a4:8b:da:ee:72:92:a1:ba:e7:f7:27:
61:db:5f:37:d2:ac:79:f5:d5:19:9b:30:f5:95:2e:
06:bb:d2:b4:6e:26:19:93:6b:c1:dc:62:2f:82:0b:
58:c4:2a:45:8b:d0:4d:d9:4d:9f:5d:d3:21:99:99:
b8:da:21:30:35:60:85:c5:d2:e5:50:fb:dc:fa:9f:
64:4f:d2:ca:50:75:eb:25:b6:cc:e5:2c:51:0b:d2:
e4:aa:30:74:21:d7:9c:83:6e:4f:98:e7:6b:94:6a:
6c:d5:a7:05:cf:f7:b5:f7:0f:9c:66:9f:91:a7:ae:
69:aa:b7:53:09:4e:8e:ea:7a:c8:a4:61:42:9a:54:
d4:fc:45:43:af:0f:be:88:cc:fb:20:10:dc:f0:da:
7d:d8:c4:76:97:52:3b:e7:83:c9:d1:9a:80:29:2e:
bb:2e:84:1c:a0:89:3c:f8:e4:30:76:c1:de:d4:fb:
2c:ca:85:1b:83:23:e0:5d:bf:4e:3d:8b:20:51:ff:
f9:26:76:d2:20:ca:7b:b9:58:d4:c3:47:35:dd:3f:
6c:69:2f:4b:5b:ae:d8:1b:4b:04:01:3d:ca:48:d5:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:57:65:BF:AF:26:F9:5E:4D:8B:5D:FF:90:53:98:64:DA:5D:94:22
X509v3 Authority Key Identifier:
keyid:5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bb:03:a8:52:be:63:a6:28:fb:d8:83:05:aa:a9:f7:f9:f9:
9b:42:4b:63:14:f1:3e:8a:bb:80:4b:a0:1f:8f:fa:12:09:c5:
8f:45:72:45:95:e3:2f:a4:d9:ec:89:74:e6:40:22:36:b7:6b:
41:eb:99:2f:53:a0:6e:72:e0:01:b8:55:dc:9c:24:f2:e6:c2:
2e:26:2b:07:52:9e:0d:21:77:dc:6d:4b:4d:df:38:e5:bf:5f:
df:86:9f:13:86:0a:26:e3:5c:4f:46:a9:eb:50:be:5d:af:1d:
61:3a:f5:8f:05:d4:82:1f:2f:55:e6:19:cd:f1:b2:64:cd:86:
4e:ed:15:22:cb:95:b0:2b:b0:d7:d8:b8:dc:0b:b3:b0:2d:75:
ee:57:80:24:c6:25:82:83:d1:81:52:9f:76:ff:9a:0d:98:70:
5a:ef:62:85:f3:fc:80:f5:84:21:5b:79:f3:0d:9c:81:6d:a8:
43:b3:13:21:25:51:0b:81:02:e0:4a:98:9e:5c:45:19:9a:7c:
e6:b4:f7:22:a7:88:de:32:f3:04:c6:68:38:91:f0:90:dc:ee:
1c:90:b9:0d:a6:69:90:a8:3a:57:3c:93:38:7e:3f:4a:61:4e:
43:e7:7a:f8:1e:5d:56:33:00:88:b4:4b:ed:65:9d:36:c1:49:
49:fb:fa:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkqxSisEjTgA8YJBjIbqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNWU2NGZlYmZhNTY2NzRmNGRlMTY0MjlmNWRkZTQ5ZDlj
ZTkzNjgwHhcNMjUwNDIwMTkwMDIwWhcNMjUwNDIxMTkwMDIwWjAzMTEwLwYDVQQD
EyhlZDU3NjViZmFmMjZmOTVlNGQ4YjVkZmY5MDUzOTg2NGRhNWQ5NDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYjHe60zM1gwB6gRWT2RO2TvLlfp
NvxEYowW5Mm/gpZBpIva7nKSobrn9ydh21830qx59dUZmzD1lS4Gu9K0biYZk2vB
3GIvggtYxCpFi9BN2U2fXdMhmZm42iEwNWCFxdLlUPvc+p9kT9LKUHXrJbbM5SxR
C9LkqjB0Idecg25PmOdrlGps1acFz/e19w+cZp+Rp65pqrdTCU6O6nrIpGFCmlTU
/EVDrw++iMz7IBDc8Np92MR2l1I754PJ0ZqAKS67LoQcoIk8+OQwdsHe1PssyoUb
gyPgXb9OPYsgUf/5JnbSIMp7uVjUw0c13T9saS9LW67YG0sEAT3KSNXRvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1XZb+vJvleTYtd/5BTmGTaXZQiMB8GA1UdIwQY
MBaAFF5eZP6/pWZ09N4WQp9d3knZzpNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGw1a19yLWxablQwM2haQ24xM2VTZG5PazJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84NWZjMTEtZTIzYS00OTQyLWIwZGUt
MjJmOGQ0YTAyN2FlLzEvWGw1a19yLWxablQwM2haQ24xM2VTZG5PazJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84NWZjMTEtZTIzYS00OTQyLWIwZGUtMjJmOGQ0YTAyN2Fl
LzEvWGw1a19yLWxablQwM2haQ24xM2VTZG5PazJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLsDqFK+
Y6Yo+9iDBaqp9/n5m0JLYxTxPoq7gEugH4/6EgnFj0VyRZXjL6TZ7Il05kAiNrdr
QeuZL1OgbnLgAbhV3Jwk8ubCLiYrB1KeDSF33G1LTd845b9f34afE4YKJuNcT0ap
61C+Xa8dYTr1jwXUgh8vVeYZzfGyZM2GTu0VIsuVsCuw19i43AuzsC117leAJMYl
goPRgVKfdv+aDZhwWu9ihfP8gPWEIVt58w2cgW2oQ7MTISVRC4EC4EqYnlxFGZp8
5rT3IqeI3jLzBMZoOJHwkNzuHJC5DaZpkKg6VzyTOH4/SmFOQ+d6+B5dVjMAiLRL
7WWdNsFJSfv61w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:21 2025 by rpki-client