Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
File: xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft (raw, json)
Hash identifier: VyT0FL9UQOHqv1/TGacwicIqda+YtKGMP5KVWkaOEPg=
Subject key identifier: 40:8D:99:E2:08:87:88:42:ED:E1:61:99:1C:19:30:32:09:CD:5C:32
Authority key identifier: C5:51:F1:1C:83:B5:2A:76:4F:FC:A8:3D:99:04:70:62:D8:16:7F:4F
Certificate issuer: /CN=c551f11c83b52a764ffca83d99047062d8167f4f
Certificate serial: 0196553882B13B9989148DD49263D7EF7EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVHxHIO1KnZP_Kg9mQRwYtgWf08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
Manifest number: 0AF9
Signing time: Sun 20 Apr 2025 22:01:28 +0000
Manifest this update: Sun 20 Apr 2025 22:01:28 +0000
Manifest next update: Mon 21 Apr 2025 22:01:28 +0000
Files and hashes: 1: xVHxHIO1KnZP_Kg9mQRwYtgWf08.crl (hash: WjSIlUL2pRGrf1b0xA5pBU70wpL3LTBKr4zLzdMjGIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVHxHIO1KnZP_Kg9mQRwYtgWf08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:82:b1:3b:99:89:14:8d:d4:92:63:d7:ef:7e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551f11c83b52a764ffca83d99047062d8167f4f
Validity
Not Before: Apr 20 22:01:28 2025 GMT
Not After : Apr 21 22:01:28 2025 GMT
Subject: CN=408d99e208878842ede161991c19303209cd5c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:28:61:e9:c4:2f:25:44:e4:f1:4b:75:ee:
f0:d0:90:4f:67:1c:6e:3a:33:c1:bd:e8:ff:06:f8:
64:68:f5:2d:a5:f7:46:04:10:9e:40:e9:c1:74:04:
4e:29:6e:c4:da:07:21:86:9b:af:29:ff:41:ce:fc:
96:b1:80:b8:bd:f7:4e:24:aa:a3:90:da:ac:80:28:
ca:b6:95:62:dd:61:cc:82:4e:01:1a:9d:a7:b3:74:
21:f6:97:31:39:87:5c:ab:68:87:31:d6:e5:d3:16:
7a:d1:51:05:a9:7f:44:d6:3f:91:c9:46:7d:f9:b9:
1d:71:85:c9:8b:a9:26:b2:e6:4f:04:4c:fa:8f:3e:
6b:02:97:cc:cf:b7:ff:12:44:17:e3:1a:62:f7:b7:
6a:b3:60:57:e5:97:a6:57:23:75:2a:0e:4c:16:fe:
d6:56:21:8f:67:9a:bb:39:36:c1:5d:f1:01:57:5f:
c7:7d:e4:c2:de:7f:cc:d8:8a:31:32:f1:19:f4:d6:
12:38:eb:3b:b3:8d:5a:ab:76:7c:0f:8e:d8:23:26:
db:78:76:37:a3:33:ee:34:f3:ac:0f:aa:27:1b:9a:
8a:b3:a0:40:d7:e0:4a:85:e6:5d:1e:a9:24:45:0e:
7e:16:95:16:b4:86:62:83:06:4f:23:7b:55:c9:bc:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8D:99:E2:08:87:88:42:ED:E1:61:99:1C:19:30:32:09:CD:5C:32
X509v3 Authority Key Identifier:
keyid:C5:51:F1:1C:83:B5:2A:76:4F:FC:A8:3D:99:04:70:62:D8:16:7F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVHxHIO1KnZP_Kg9mQRwYtgWf08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7c:21:2c:93:20:0c:9e:85:73:cb:c7:0b:43:76:e4:30:60:
59:da:44:7d:7d:d4:57:e2:7a:01:ae:70:1b:42:51:2b:5e:05:
d9:3e:dd:9d:44:a8:eb:16:d7:05:df:95:7c:c6:15:b3:3e:f9:
23:41:51:bb:4b:a3:c0:79:5e:89:a2:d1:f1:32:96:87:9f:69:
ff:33:6c:df:bf:ec:5a:74:73:54:04:c4:c8:a8:37:85:a5:22:
2c:5c:f6:07:ad:ed:cb:0a:4d:57:a6:dc:1b:b4:27:3f:59:1b:
b1:dd:2b:ff:b6:1b:25:fa:44:c3:1f:db:ee:fd:1d:82:a2:5b:
f2:75:50:48:b5:a7:80:35:e4:26:ae:1a:11:fc:e4:39:58:84:
ce:5f:38:73:16:fe:6b:62:d2:39:81:16:a7:86:4d:6b:dd:16:
26:de:fa:cf:df:7f:7f:3d:bb:ab:41:a1:37:25:8c:7f:a7:f8:
f1:d4:84:2e:3c:d0:ce:df:3e:b4:c9:99:77:2d:5f:d5:c9:c6:
41:04:11:85:ae:20:e8:5e:cf:2c:8f:b6:b1:67:d4:cf:6d:88:
a6:dc:0c:f5:b9:7a:ea:61:f0:1e:af:27:71:63:c4:59:b7:e1:
0e:87:be:5f:85:b1:63:c8:49:4f:de:1d:da:6f:a6:eb:f2:1b:
8e:c6:f3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:59:47 2025 by rpki-client