Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: OOEt96EJzwwY8HbGS2IK40B4S4jVRN0BxaBKMEbVJrg=
Subject key identifier: 3D:13:B8:DF:5C:A3:A7:0B:5C:9B:A6:B0:25:88:57:E3:3D:C0:DA:35
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 0196598226934964069CECBD5427071B7B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 0CB0
Signing time: Mon 21 Apr 2025 18:00:23 +0000
Manifest this update: Mon 21 Apr 2025 18:00:23 +0000
Manifest next update: Tue 22 Apr 2025 18:00:23 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: iFxBHXzbyDWgOQjpaIslFODYVo4eXGE9YR/y39Z+oss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:26:93:49:64:06:9c:ec:bd:54:27:07:1b:7b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: Apr 21 18:00:23 2025 GMT
Not After : Apr 22 18:00:23 2025 GMT
Subject: CN=3d13b8df5ca3a70b5c9ba6b0258857e33dc0da35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:27:c5:50:f6:ec:43:5d:9b:03:ae:b2:c1:
d5:eb:a3:d7:8e:9b:8b:5c:c0:55:ab:e3:9c:fe:c2:
37:96:4c:88:35:05:ad:d7:59:db:f2:b9:af:2e:20:
1f:64:be:15:5b:5f:e5:00:59:5e:b2:5a:f0:e5:0b:
3c:de:21:a3:49:fb:f1:22:4e:5e:8b:18:3e:f1:dd:
11:b3:8c:db:39:8a:a0:81:d7:71:99:94:86:56:d3:
58:9f:64:52:57:71:51:f1:f5:99:4f:d5:62:70:fa:
83:6e:8e:de:be:e8:4b:b8:06:be:5b:2e:83:72:19:
bb:50:49:ee:9c:7c:a4:ba:42:e4:2e:bc:32:4e:d9:
c3:9e:ac:9c:ca:39:4d:72:fb:6b:83:b2:ee:96:f2:
55:14:59:f6:5d:b4:de:44:a1:0b:a1:4c:26:b0:0d:
81:64:ae:7d:c1:c5:8f:ee:02:37:b4:ec:83:f3:50:
2b:11:66:ff:4c:86:82:d9:e0:98:4c:2f:86:cf:17:
d9:9b:d0:09:03:50:7f:6f:9e:b1:96:f2:73:a3:83:
d9:6d:26:5c:fc:e0:00:57:88:67:ae:2a:60:35:0b:
de:89:d7:af:10:1d:b4:44:7d:af:70:40:9e:52:10:
23:38:4a:ac:5a:96:83:34:c3:b2:4a:a7:de:83:fb:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:13:B8:DF:5C:A3:A7:0B:5C:9B:A6:B0:25:88:57:E3:3D:C0:DA:35
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a9:53:ef:9c:33:01:40:b8:9a:c9:ab:37:d7:44:af:48:a9:
ce:99:e2:ee:89:62:2a:b5:b7:47:9a:ff:39:8b:2b:a5:e1:29:
4e:3a:d2:01:ce:99:fb:23:f6:4f:cc:0b:eb:ae:96:ae:55:46:
e7:cb:33:21:da:6d:87:1f:3b:3f:5e:4e:7c:da:0e:39:c1:11:
71:3c:d6:98:c2:9b:f2:47:6b:ac:57:20:a7:2f:b5:7f:33:8b:
51:3a:2f:a2:68:cc:b5:b9:48:28:7b:55:42:0f:ef:39:aa:ab:
f2:6b:f1:ef:fc:40:f4:5a:15:0b:6a:6e:58:ee:b9:ec:6b:32:
58:30:cf:00:cb:1d:4f:c9:73:16:24:6c:ea:a2:19:00:d7:16:
dd:d0:a8:13:74:f2:d2:eb:e0:52:d2:01:85:b1:41:ae:8f:ef:
c1:e2:56:a8:d9:11:fa:f5:e3:9c:67:28:e3:09:3c:ba:82:0b:
74:54:88:20:f2:62:76:1d:4e:9b:75:63:a8:4f:3c:e6:c7:52:
e9:fc:ce:43:d3:9d:32:84:89:e7:3a:78:be:88:4b:9f:ac:8a:
6c:dc:62:07:56:59:59:7c:ab:c1:4f:3b:f7:6f:91:8f:5c:e8:
aa:36:a9:8d:2c:df:66:73:a9:71:88:77:af:0e:d1:d9:7c:e4:
89:ed:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:23 2025 by rpki-client