Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: gLSwB44pYFM+fLWLzpOrnUDYxDAQ17+I1fXDSlaDdqA=
Subject key identifier: 4C:D7:57:6A:4D:70:41:AA:62:9B:B2:24:A3:C9:60:53:1E:30:6D:AA
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 01965C157B2D2773953AC922EE4217060B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 14FE
Signing time: Tue 22 Apr 2025 06:00:33 +0000
Manifest this update: Tue 22 Apr 2025 06:00:33 +0000
Manifest next update: Wed 23 Apr 2025 06:00:33 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: G3t3lDwa4+vUB5OiygVsMAQQCN+vIZRw5R3RHWwOtzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:7b:2d:27:73:95:3a:c9:22:ee:42:17:06:0b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: Apr 22 06:00:33 2025 GMT
Not After : Apr 23 06:00:33 2025 GMT
Subject: CN=4cd7576a4d7041aa629bb224a3c960531e306daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:03:61:b3:e0:3d:d6:30:3c:13:fd:94:35:
5b:1a:db:be:78:4d:85:7f:9e:5c:b2:1e:43:83:8f:
6f:c8:27:3b:a1:5b:d7:fb:46:86:af:bf:e8:b3:87:
11:a4:4c:eb:f9:77:46:35:60:4c:87:f2:11:cc:ad:
a1:96:9a:0a:2e:59:41:94:f6:50:28:12:da:5c:b3:
24:2b:6e:34:89:ad:16:62:3d:eb:d6:55:4b:b6:aa:
64:d4:8c:3e:2c:82:d6:02:27:b9:f3:e2:53:cb:84:
7a:9b:96:27:d8:a7:ae:95:2c:7d:b4:9c:12:c5:b1:
16:4f:eb:97:09:f3:33:8b:50:a3:7a:4e:09:8c:67:
3e:00:ba:d6:2e:0f:83:6f:13:d9:46:34:90:b5:9d:
72:4b:36:0e:41:7c:6b:e2:d5:9a:e1:1f:38:d9:48:
0d:33:f5:2e:44:1d:4b:a5:f8:d3:4e:d5:79:8b:86:
db:39:9b:b0:c7:f6:b6:6f:9f:db:f4:3a:f6:f2:24:
b4:31:f0:c9:cb:09:6c:e3:41:83:1f:13:ab:7e:2f:
15:93:0c:13:09:68:4e:74:85:76:1d:bf:c1:79:50:
fc:94:60:ee:27:be:e5:37:b2:43:db:e7:f4:ff:ad:
a6:03:76:7c:3c:40:e4:6d:67:35:5a:7f:50:56:5e:
d2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D7:57:6A:4D:70:41:AA:62:9B:B2:24:A3:C9:60:53:1E:30:6D:AA
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3b:a7:c0:97:15:55:9c:48:86:ac:b2:57:c7:e8:31:5e:5e:
18:c5:b2:a1:3f:b3:e5:9e:72:e7:9d:be:24:80:e1:75:73:31:
9e:0c:f6:de:99:02:53:f5:92:d5:3a:4a:4e:e5:1a:cb:8d:90:
e0:ec:49:6c:f2:5f:64:9d:e1:d6:98:b6:99:eb:06:c1:b8:11:
7f:94:e5:0a:c7:e8:92:e6:33:2f:ad:b4:50:a9:eb:63:84:ce:
98:45:78:96:cd:96:57:9c:7e:52:73:2b:52:a3:c5:20:e5:6d:
c2:b7:78:32:ba:04:c6:ff:4f:74:d3:49:27:61:6e:24:6c:20:
c3:c4:c5:2a:80:00:eb:4b:fa:07:06:00:1a:c4:a9:75:07:61:
e1:fd:a6:77:54:08:36:f0:3a:3d:61:41:bd:a0:44:80:c8:f3:
4e:d1:34:a9:6e:c3:e5:6a:36:28:4e:75:2c:b4:1b:c4:bc:a8:
a3:48:78:52:26:48:53:e9:e6:fd:82:9f:93:6b:a8:48:13:9e:
81:f2:43:63:ef:21:b0:19:c7:d5:84:9e:e2:8b:b9:a2:e3:13:
4b:89:99:f9:17:3c:5a:af:80:62:ab:f3:66:09:5f:69:23:3a:
56:a9:b9:d7:a3:f0:65:eb:8b:d4:11:0b:ec:56:b1:eb:31:49:
f3:88:4c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:52 2025 by rpki-client