
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
File: Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft (raw, json)
Hash identifier: NKPveJiMi7WMNcAW7pLDkzDr+O/FphG9I3P6t2oUfMM=
Subject key identifier: 13:86:F2:E3:C0:B3:F9:DD:AA:EE:6A:ED:05:C0:9E:6F:D2:37:76:B0
Authority key identifier: 5E:FA:30:EE:35:8E:25:0E:1C:C6:6B:46:81:93:A5:65:D8:24:D4:48
Certificate issuer: /CN=5efa30ee358e250e1cc66b468193a565d824d448
Certificate serial: 01965492F28DAE69B8007867DFA6676DCE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
Manifest number: FC
Signing time: Sun 20 Apr 2025 19:00:38 +0000
Manifest this update: Sun 20 Apr 2025 19:00:38 +0000
Manifest next update: Mon 21 Apr 2025 19:00:38 +0000
Files and hashes: 1: Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl (hash: 21S5yW5xDRSTUX9g/f2yGMltW9pUq6r/wFFKZy64xyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:f2:8d:ae:69:b8:00:78:67:df:a6:67:6d:ce:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efa30ee358e250e1cc66b468193a565d824d448
Validity
Not Before: Apr 20 19:00:38 2025 GMT
Not After : Apr 21 19:00:38 2025 GMT
Subject: CN=1386f2e3c0b3f9ddaaee6aed05c09e6fd23776b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:ae:9e:d0:99:4a:bb:61:3a:ff:be:44:38:
89:14:53:64:52:70:b6:88:50:73:02:c4:17:a0:01:
8f:c6:4b:35:ac:9b:eb:1d:61:ff:77:16:f8:14:0f:
d2:da:2a:e0:a1:a3:65:c6:7d:f2:46:00:be:3d:ad:
f0:8e:2e:a2:0f:54:8c:a7:a9:a9:92:96:2f:8e:80:
22:ff:8f:92:03:ff:a9:68:87:d1:29:76:46:fe:21:
0f:c5:79:73:48:e1:4a:c6:98:8d:16:fc:71:83:cb:
fe:44:b0:dc:36:f2:93:eb:5e:30:3e:5a:70:e4:d7:
aa:19:58:20:52:b3:6f:9d:74:e9:2f:05:73:c3:6e:
50:5e:81:87:5d:5b:da:8d:df:c4:a0:c8:c1:5e:3e:
16:d6:3b:d1:87:97:e4:01:30:e9:c8:2b:79:13:d7:
5c:e3:66:82:ee:39:ca:81:ed:23:98:75:db:ff:51:
77:ba:ff:0f:3d:0b:23:4d:36:38:fd:2f:c2:e4:9a:
96:15:ff:f2:33:47:cd:db:30:dc:88:ac:1e:e8:3c:
f0:e3:19:92:b3:52:58:09:2e:e3:91:82:b1:35:83:
cf:fd:95:ef:b7:53:95:6d:02:a7:f2:30:fc:6a:56:
b8:43:88:7b:6b:38:e9:80:60:2c:88:63:76:8c:75:
87:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:86:F2:E3:C0:B3:F9:DD:AA:EE:6A:ED:05:C0:9E:6F:D2:37:76:B0
X509v3 Authority Key Identifier:
keyid:5E:FA:30:EE:35:8E:25:0E:1C:C6:6B:46:81:93:A5:65:D8:24:D4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/033ccb-7235-409c-bd6e-bbac3b81899b/1/Xvow7jWOJQ4cxmtGgZOlZdgk1Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:de:0e:4f:32:4d:04:5a:cb:81:dd:87:0a:7a:36:8b:f2:21:
98:ea:fa:68:be:aa:54:44:0f:4c:65:bc:e2:a9:60:6d:91:6f:
65:e5:dc:e6:ef:5e:69:5c:b4:74:02:3c:5a:0d:55:fa:ac:95:
59:51:25:7c:c9:b9:86:12:38:58:a2:d7:51:60:11:b1:f9:c6:
53:7d:94:40:68:f0:3c:3a:64:40:e5:eb:1f:7c:62:e4:c1:c7:
14:13:ad:4b:96:41:a0:30:39:e4:9d:b0:9e:a8:a3:ee:54:b5:
d1:95:49:93:aa:1b:31:95:c6:c1:4c:31:fe:71:a7:5d:39:9f:
35:4b:51:93:0f:a4:36:76:ac:d7:4f:3a:24:cb:d4:b3:b3:83:
66:c8:60:14:80:e1:ee:12:e9:c7:a8:d4:6b:56:d8:6a:ed:9d:
51:f4:3f:19:e1:a9:4e:58:a4:14:f2:8e:2e:f9:f5:0c:bd:89:
94:50:67:6a:d4:80:ae:7e:63:4d:60:7c:e9:5b:08:84:d0:9a:
bd:43:65:c4:26:ee:75:02:a7:62:07:24:66:2b:9a:9f:8b:29:
64:ff:8c:29:eb:c8:0c:51:d7:7f:48:20:38:b0:0e:5a:c3:8f:
44:a3:b5:31:63:39:43:83:0c:ce:be:c1:34:7c:30:40:b0:9d:
b8:93:d8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:19:56 2025 by rpki-client