Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: fhZygGc2RIZes1PtNKqf2KczYZE1SNnG4hW5YR0Hj5s=
Subject key identifier: E2:1A:10:D4:2F:2D:A5:5D:7C:88:1D:5C:B4:2A:76:19:ED:C3:0F:53
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 01965492975258012BBC7AE977F72F160606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 13ED
Signing time: Sun 20 Apr 2025 19:00:15 +0000
Manifest this update: Sun 20 Apr 2025 19:00:15 +0000
Manifest next update: Mon 21 Apr 2025 19:00:15 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: glZnUV2kJvy/AVXFofX0317DBXCiGLytDaex4XClb4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:97:52:58:01:2b:bc:7a:e9:77:f7:2f:16:06:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Apr 20 19:00:15 2025 GMT
Not After : Apr 21 19:00:15 2025 GMT
Subject: CN=e21a10d42f2da55d7c881d5cb42a7619edc30f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:b8:61:8d:92:17:e3:de:71:58:13:58:69:
37:fb:42:53:a8:c0:60:bb:08:71:a6:44:84:9f:03:
00:fd:96:24:9e:33:ca:1e:fe:e7:a9:1e:66:76:0d:
ef:66:48:69:8f:f5:c0:bc:91:b8:4e:c8:06:48:bc:
91:af:d3:31:0f:cd:ba:e3:d2:20:36:59:16:0a:3d:
81:c1:92:86:e6:1f:58:42:59:c1:b7:2c:fc:63:a9:
b9:c6:0f:ff:fa:cf:64:5d:b8:93:d2:fe:e7:27:21:
fc:91:95:5f:fe:df:ce:79:d1:4e:a4:d8:a4:2d:ea:
59:ea:31:1b:96:9c:b7:d3:4a:71:2a:5f:68:65:a7:
eb:92:ac:25:8e:e0:ec:4c:71:32:c4:8a:cf:a8:13:
97:1e:1b:6d:d5:40:72:65:45:66:db:6f:66:c9:c0:
46:96:01:5d:3f:82:86:82:96:b2:47:19:9f:2f:13:
e5:77:28:fb:c4:c4:5e:4b:27:f2:1c:dc:ad:7c:b8:
30:1a:11:8a:83:2c:9e:74:90:47:90:4d:0a:92:df:
8a:da:8e:13:2a:0c:f0:61:93:f2:ce:a5:d4:6d:fa:
10:99:ba:3a:6e:53:ff:8c:c1:c9:f0:9c:05:a4:8e:
f8:7b:c1:8d:20:16:5b:c8:82:be:8c:79:cf:a8:e4:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1A:10:D4:2F:2D:A5:5D:7C:88:1D:5C:B4:2A:76:19:ED:C3:0F:53
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a7:ac:88:f2:11:6f:1c:f4:6d:f6:13:51:aa:2d:7f:68:70:
6b:3b:03:2c:8a:e6:c9:70:0d:82:55:26:4c:4b:a1:7c:d8:75:
f5:e4:ec:99:00:74:9f:03:89:69:bb:f8:65:ad:06:98:ec:22:
c2:d4:8a:59:88:db:1e:25:63:b8:18:a3:b7:05:1d:33:56:61:
61:7d:d3:e0:76:44:eb:3c:0b:98:af:1b:6e:bc:31:e7:e3:29:
85:0d:d3:02:33:e8:55:09:92:33:aa:92:20:73:38:53:cd:5e:
fe:49:9a:c1:4a:1e:4a:a7:23:96:ce:f9:61:60:71:b6:c5:b4:
ed:0c:07:5d:45:80:f7:e9:e4:4d:7f:10:5f:9b:fb:1f:56:72:
99:f3:01:03:27:55:15:1f:d5:4b:e6:ab:d9:b9:ad:1f:8c:f2:
04:cf:e1:d5:4c:ab:80:4f:a9:b2:8b:60:3d:d6:96:43:7f:f2:
90:d8:26:c8:6d:fd:16:1e:00:da:a9:02:5b:55:44:de:31:c0:
7e:19:d1:8a:a3:0c:27:70:56:d4:c1:5c:35:a3:9f:c0:17:19:
28:ee:67:72:ec:a2:33:e5:ba:b2:94:30:f0:0d:2d:8a:8a:cd:
05:a3:5e:43:0e:de:8f:7c:10:a6:6d:26:bf:a2:72:29:a0:5c:
b1:06:c0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:05 2025 by rpki-client