Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json)
Hash identifier: +CU6e8dUPU1IXPOrOvKVwB+FsXns1EH9fMHT2T3FXMY=
Subject key identifier: 26:D8:9C:10:A9:ED:9A:1B:A2:CA:52:96:22:FF:10:EB:5F:0A:BC:F4
Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Certificate serial: 019655A5D7441C725E50DDFFF045FDA0081B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
Manifest number: 0ECC
Signing time: Mon 21 Apr 2025 00:00:53 +0000
Manifest this update: Mon 21 Apr 2025 00:00:53 +0000
Manifest next update: Tue 22 Apr 2025 00:00:53 +0000
Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: S/JUh3XF6zIb5lwO4h6/OGO5n1IhtJP4rmHijTJceqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:d7:44:1c:72:5e:50:dd:ff:f0:45:fd:a0:08:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570
Validity
Not Before: Apr 21 00:00:53 2025 GMT
Not After : Apr 22 00:00:53 2025 GMT
Subject: CN=26d89c10a9ed9a1ba2ca529622ff10eb5f0abcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:ed:0d:ad:7f:01:11:bd:8e:9d:b2:62:0d:
97:3a:52:05:e9:0e:4a:25:bd:8a:e7:28:94:4a:be:
00:70:5c:2b:27:54:2d:48:8c:12:53:cb:15:54:a4:
fb:25:69:06:6c:aa:6d:5a:6b:eb:b5:f1:da:f3:93:
b6:28:61:d7:51:26:6a:ec:05:cd:bf:0f:ce:cb:90:
67:6a:db:47:22:a1:74:5c:66:f3:e1:7f:f0:28:af:
95:29:79:44:92:0c:5e:8c:d2:1c:a7:54:e2:bc:9b:
17:8d:ea:37:1e:09:58:a3:e1:51:e1:35:98:80:ba:
df:68:78:20:09:44:67:4e:02:fa:b9:46:70:3d:ad:
82:7e:23:7c:40:85:4b:69:31:c6:e7:a3:b2:25:77:
af:d5:4b:18:71:6f:e7:18:e1:2c:0d:1c:c6:7d:25:
22:fd:4c:45:11:e1:ee:bf:25:c6:54:5c:a1:f3:02:
a8:f2:4d:f9:4a:78:5b:c4:9c:1c:24:7a:73:09:48:
cc:ee:82:95:9e:f1:7c:4f:ae:6d:a5:99:25:17:33:
d4:7c:58:d2:01:0c:d6:b7:75:1a:6d:50:1c:6c:81:
97:8c:50:41:eb:12:23:84:dd:ec:d4:51:ca:97:b5:
39:62:5e:ab:ec:e8:8d:e1:0f:34:0b:e1:3d:8a:60:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D8:9C:10:A9:ED:9A:1B:A2:CA:52:96:22:FF:10:EB:5F:0A:BC:F4
X509v3 Authority Key Identifier:
keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3b:71:b7:f7:34:90:8a:9c:f3:3e:2c:54:ca:7d:a4:4a:25:
94:38:ae:dd:03:4a:99:84:cf:99:f4:05:b2:f2:4a:e6:b2:6b:
87:60:b3:f3:d1:db:9a:e7:8c:02:ab:32:ab:aa:0e:fa:ea:93:
bc:a0:f5:40:e1:a3:5c:34:86:ec:dd:d3:07:89:ad:00:7f:b0:
92:03:53:a5:6f:a7:86:80:c4:cf:34:a0:a6:0a:c1:85:de:6c:
b0:05:30:00:cd:80:20:1b:a5:b4:da:1a:b4:10:f0:18:37:3a:
c7:45:2d:35:4d:42:91:8e:1c:0e:ef:03:fc:ee:0b:0b:b0:a8:
6f:4b:28:0a:b2:a7:99:cb:fe:50:5b:fd:19:d6:53:25:f4:26:
8e:37:59:b8:a3:c3:b6:8c:e8:af:2e:4f:a7:39:7e:44:ce:bb:
63:df:22:34:c0:0b:0d:80:03:b3:34:69:52:49:15:6d:ce:82:
e3:7f:3e:8b:19:2f:dc:8e:29:94:6d:c2:0c:02:a2:49:09:e1:
63:2f:ea:e6:60:fe:90:94:49:9c:7d:68:3f:fc:bb:ce:14:da:
ac:3e:43:83:66:57:be:37:57:e3:7e:0a:2c:f8:46:ae:ae:a8:
72:ae:a3:73:b2:cc:a8:c9:9f:49:a6:77:85:f7:76:ed:67:e1:
0f:ed:24:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:14 2025 by rpki-client