Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
File: XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft (raw, json)
Hash identifier: v5KukzdRdjTcvjuAyu8E1f9dqyJqyZ8LII92aKt7TOo=
Subject key identifier: B5:CC:CE:34:8B:82:C8:58:C5:AE:8D:7D:02:6D:06:F8:25:30:03:6C
Authority key identifier: 5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
Certificate issuer: /CN=5e55afde34211bcee6a7fd992488a24927b46947
Certificate serial: 01965838C15D18BFBD987C7992FF72044C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
Manifest number: 0149
Signing time: Mon 21 Apr 2025 12:00:36 +0000
Manifest this update: Mon 21 Apr 2025 12:00:36 +0000
Manifest next update: Tue 22 Apr 2025 12:00:36 +0000
Files and hashes: 1: XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl (hash: b5NpmN3Qf9naku2BaZCJQQRr1IfqAedo/ylHViO2aTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:c1:5d:18:bf:bd:98:7c:79:92:ff:72:04:4c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e55afde34211bcee6a7fd992488a24927b46947
Validity
Not Before: Apr 21 12:00:36 2025 GMT
Not After : Apr 22 12:00:36 2025 GMT
Subject: CN=b5ccce348b82c858c5ae8d7d026d06f82530036c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:0a:b2:a4:b7:25:ab:27:0e:fd:db:40:b2:
cc:ba:1f:76:d1:4c:5b:e6:87:a5:ba:d9:c8:d1:ea:
c3:be:d4:0b:ce:5c:93:b6:d7:4a:8d:bf:f2:a8:06:
b4:15:5c:d4:9a:cc:d4:62:43:5f:a2:93:ab:8d:6d:
24:22:e3:49:2b:18:69:99:d2:b2:61:93:5d:63:90:
97:d4:41:6a:67:2c:ab:4a:84:a7:0a:08:56:1d:9d:
92:7a:5e:23:93:c7:7b:16:ad:b2:cc:92:a5:9e:d6:
7e:ec:dd:72:56:87:e0:f3:54:cd:6a:9c:f1:72:06:
f0:ff:c4:06:a8:c0:a5:87:79:a5:f9:18:e0:b4:65:
e9:de:47:93:9d:b6:4d:a4:3a:73:84:5d:15:8e:1f:
87:36:ea:4c:b4:63:b2:d9:05:50:07:93:fa:09:c0:
32:21:44:b8:58:5a:af:5d:82:b6:18:97:cf:b6:45:
47:ee:d3:47:7b:d1:2d:de:30:41:c7:2f:bf:74:eb:
70:44:a8:cb:69:06:e9:c3:ab:10:b6:8e:2b:1d:a0:
07:8f:89:f5:72:0a:d3:94:be:29:bf:ef:28:03:1b:
08:b7:39:72:be:4b:f0:91:8f:d1:7b:48:c6:61:50:
7c:4a:cc:88:bb:11:6c:b7:b8:31:7c:97:91:5f:65:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CC:CE:34:8B:82:C8:58:C5:AE:8D:7D:02:6D:06:F8:25:30:03:6C
X509v3 Authority Key Identifier:
keyid:5E:55:AF:DE:34:21:1B:CE:E6:A7:FD:99:24:88:A2:49:27:B4:69:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlWv3jQhG87mp_2ZJIiiSSe0aUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d28ac8-f6b8-4b47-ba93-de7b41678b6f/1/XlWv3jQhG87mp_2ZJIiiSSe0aUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:29:1d:cb:f6:95:4b:53:77:7c:c1:c3:e6:9f:c3:81:be:7b:
2c:71:f1:83:aa:70:1c:56:65:df:26:48:df:99:fe:f4:f6:d4:
a1:0f:4d:a7:d0:40:8c:a6:1c:aa:3e:6e:a7:e6:fb:1b:63:c0:
4f:2c:6d:5f:80:38:71:f9:18:c7:8a:a4:2e:fa:69:fc:9d:68:
20:bb:46:f9:55:7f:d0:2c:b6:98:a1:1b:87:26:93:d7:6a:3a:
d2:1c:bb:19:ea:b8:cd:23:18:d5:a9:c9:a2:00:62:f1:32:d7:
99:c0:14:38:9d:b0:4b:83:b3:85:a0:89:b2:76:8b:be:c7:6c:
74:38:36:2a:f4:b5:f2:6e:e8:55:8f:f0:8f:bc:f7:0d:82:95:
35:fc:9a:f4:9f:9f:5f:94:65:59:7c:90:90:02:36:b8:d6:0c:
91:69:93:eb:fd:cb:da:88:67:01:42:02:87:62:86:4c:80:86:
b4:85:19:94:66:6d:c1:31:9a:1c:5d:7b:c6:30:05:55:dd:57:
7d:10:c9:d5:cb:80:d1:11:af:42:36:87:18:30:e4:b2:1b:c7:
74:8e:f5:c0:34:55:91:b0:97:b3:a1:9c:16:88:9f:01:36:c2:
c1:f9:5b:71:90:78:2d:7f:5d:2f:cd:7b:b2:bb:b1:84:17:ed:
df:07:e0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:20 2025 by rpki-client