Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
File: Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft (raw, json)
Hash identifier: 2W2rYoOufQLqv6Vx6sQn/Ywyi2nP+k7GsbPDU35RPzI=
Subject key identifier: 7C:C3:3E:FF:A5:86:D4:B4:8C:73:3B:E3:7B:55:8D:BE:6D:A5:49:0E
Authority key identifier: 5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
Certificate issuer: /CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Certificate serial: 01964FDAE070E4080FCBBA1AB9565A056626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
Manifest number: 0B51
Signing time: Sat 19 Apr 2025 21:01:06 +0000
Manifest this update: Sat 19 Apr 2025 21:01:06 +0000
Manifest next update: Sun 20 Apr 2025 21:01:06 +0000
Files and hashes: 1: Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl (hash: PpaJMRHz/L9bNcMa7mgRd4z6PG/H/NecPN0ifMeVFls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:e0:70:e4:08:0f:cb:ba:1a:b9:56:5a:05:66:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3e4fa8c9971aef12345fc0e37d16b3459b783b
Validity
Not Before: Apr 19 21:01:06 2025 GMT
Not After : Apr 20 21:01:06 2025 GMT
Subject: CN=7cc33effa586d4b48c733be37b558dbe6da5490e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:21:cd:35:52:de:28:0e:0c:ae:5f:3d:e8:
e4:50:46:51:e7:da:ce:fe:21:f3:47:33:e7:a9:a7:
74:e9:df:59:19:36:00:25:20:27:88:d9:f1:f2:33:
e8:b8:52:91:a9:13:9e:ae:15:7b:e0:15:1d:0a:92:
26:3e:86:b9:31:91:06:c4:d6:00:55:88:a9:8d:1d:
80:eb:e8:c8:93:a8:6a:4a:da:97:98:23:c8:52:a4:
1f:45:d3:ee:a7:4f:8a:c0:08:4e:72:19:fd:0d:00:
42:61:8d:31:0c:6d:6f:20:11:d5:2a:f6:e1:43:71:
bb:6e:d9:1b:dd:17:75:50:db:e6:dd:ff:f3:e6:8b:
db:19:28:cd:98:94:fc:82:59:76:0e:00:cb:d5:a1:
06:b1:14:85:13:f2:ec:32:fd:a5:e0:ce:a4:80:5c:
97:10:6a:02:14:a0:71:b4:7e:0a:38:f4:39:c1:02:
d9:c8:48:8a:f5:65:b1:98:0d:8f:e2:66:ae:d0:84:
32:83:85:f7:d8:ca:2d:42:5c:23:b8:30:e9:ba:8f:
8b:82:e9:ff:40:7e:8d:ea:fd:7e:a4:a1:54:04:8c:
de:60:4e:ee:36:4f:d9:5c:70:8e:30:e2:9c:5d:6b:
8a:1f:ec:9a:23:94:b3:bc:c9:50:60:75:1e:9b:b2:
ad:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C3:3E:FF:A5:86:D4:B4:8C:73:3B:E3:7B:55:8D:BE:6D:A5:49:0E
X509v3 Authority Key Identifier:
keyid:5E:3E:4F:A8:C9:97:1A:EF:12:34:5F:C0:E3:7D:16:B3:45:9B:78:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xj5PqMmXGu8SNF_A430Ws0WbeDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eb5454-7293-437f-ac0b-3a3b0296bb82/1/Xj5PqMmXGu8SNF_A430Ws0WbeDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e1:db:a5:65:aa:76:5d:23:f3:d8:49:00:0c:86:68:67:34:
81:ec:78:a4:88:bd:0c:d7:a0:fc:50:54:6e:63:20:d5:f0:a8:
d6:e6:77:23:94:77:67:0b:cd:92:bc:a5:fb:3e:9d:73:75:9c:
f3:17:15:75:8f:58:f9:cf:c6:21:25:20:d0:bb:dc:e8:7e:fc:
0e:46:5f:ef:10:21:42:dc:23:fa:01:4c:77:14:81:f4:42:7a:
ee:77:58:a2:49:2e:37:15:89:c2:6e:e7:b6:05:80:e9:2b:de:
4a:38:7e:04:9d:c1:5f:31:67:c2:bd:a9:f7:50:72:d5:df:19:
64:4d:76:78:1c:d6:f2:3d:9a:68:79:f2:d3:0a:e5:67:87:93:
83:b3:d5:81:78:b5:50:22:4b:91:c6:7a:27:58:25:58:ae:18:
00:67:aa:86:16:83:58:48:91:27:c3:a2:88:b7:be:32:50:9e:
fc:f7:7f:ba:b7:7a:83:10:74:8d:d1:f7:67:f7:91:de:56:53:
a3:98:a1:66:62:3b:09:f2:5c:87:d9:5e:19:a7:2c:c9:38:90:
61:f9:85:bb:7d:6e:38:13:c2:41:3f:b6:f6:74:e4:4b:01:37:
48:92:21:f2:d7:8c:3b:ef:67:6e:c8:f8:dd:97:e4:56:5c:c6:
15:c1:41:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:35:25 2025 by rpki-client