Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File: XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier: zCx99RBAi0+VAiPSj9enhz2OVUm9C+CFfaBNB8uOa3Y=
Subject key identifier: 90:91:D1:79:6B:14:1A:51:78:F8:B7:A7:BA:F9:A2:22:DB:A9:E6:A6
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer: /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial: 019653B71116881349D72415BB83CE9C1B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 15:00:28 +0000
Manifest this update: Sun 20 Apr 2025 15:00:28 +0000
Manifest next update: Mon 21 Apr 2025 15:00:28 +0000
Files and hashes: 1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: H7ZRmbnba0HZChL85xZZYG6jSg9Rw2fvctnJCd3vxfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:11:16:88:13:49:d7:24:15:bb:83:ce:9c:1b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Validity
Not Before: Apr 20 15:00:28 2025 GMT
Not After : Apr 21 15:00:28 2025 GMT
Subject: CN=9091d1796b141a5178f8b7a7baf9a222dba9e6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:dc:9d:a2:11:9c:65:7d:d8:9c:51:1b:33:
51:d2:be:ba:97:2c:ce:c0:99:a9:70:5e:ca:71:c0:
22:d6:a3:c1:e5:24:6c:3e:5f:52:c8:4c:ca:b8:97:
d6:c9:81:e5:4c:8d:4e:63:aa:e4:b8:d0:db:c3:9d:
7d:9f:a8:75:cd:c8:73:17:21:e1:a1:e5:5a:59:58:
11:e6:21:a6:fe:4b:09:64:2e:66:32:5c:d5:5a:ee:
01:1c:58:e6:c3:69:a5:bb:aa:4c:26:c7:24:13:ff:
18:90:98:d6:4c:18:8c:b1:6d:62:d0:85:3f:99:77:
28:cf:21:a1:b1:fc:7d:f0:12:0b:c2:23:c7:8c:40:
05:77:b6:5c:1d:44:84:4f:59:3e:41:23:e8:a6:08:
c7:b6:4b:26:ba:c8:5d:94:61:38:e3:73:a6:9d:4d:
25:9d:86:b0:83:92:84:f0:e7:07:3a:ee:03:aa:27:
8b:58:0b:ae:b4:60:08:5c:87:c0:21:ae:6f:73:a0:
4b:49:04:63:34:36:b9:78:7e:17:14:66:72:c4:53:
75:23:25:c5:e2:0a:16:c6:4b:87:b0:6c:f6:9a:c6:
e6:9e:76:1f:44:e8:84:fc:39:0d:f6:8a:67:4a:81:
7c:5d:1e:f3:3a:e6:58:ca:f9:46:54:93:4c:7f:99:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:91:D1:79:6B:14:1A:51:78:F8:B7:A7:BA:F9:A2:22:DB:A9:E6:A6
X509v3 Authority Key Identifier:
keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2e:ff:78:53:4a:e0:2e:fd:c9:e7:86:55:55:49:92:ac:4e:
9d:23:fb:94:b9:33:6a:5d:8e:79:0d:2d:28:96:40:21:1a:26:
25:55:64:4b:ed:32:85:46:eb:25:2a:f1:8d:4c:02:87:46:35:
79:30:89:d8:ce:2a:7c:a1:08:0b:2c:99:f5:ee:19:46:df:91:
97:35:1c:e9:be:72:33:27:01:37:02:5a:f5:12:92:af:4e:6b:
27:d7:0b:0f:c4:9f:a4:35:6f:a1:a2:d9:e3:28:d2:40:20:9e:
81:37:50:d3:8c:b6:07:f5:29:9f:54:07:21:98:fc:df:f1:ff:
b7:0f:21:97:e9:ee:17:bc:e2:2b:3d:86:b6:f3:09:28:a4:73:
da:a7:ef:cd:2b:db:10:4a:c4:d2:96:00:27:44:f6:a6:61:2d:
33:0f:46:b3:60:7a:17:ae:4e:ca:e9:95:3e:e3:a9:ed:c2:27:
54:c6:ac:47:9f:69:04:4b:ae:a8:42:79:ee:e2:e2:88:20:d1:
f8:23:ba:23:0a:81:95:b1:8c:a8:2d:f8:7c:d1:07:92:08:dc:
d9:f9:24:49:eb:8e:46:43:a0:23:70:fe:63:cc:df:80:21:6d:
fa:4c:48:b2:6e:d8:6a:39:09:cd:56:39:7a:79:8e:6e:02:0d:
de:d8:f8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:05 2025 by rpki-client