Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier: RkBpTwmVHkB4/OsXZ448I4VJZPRxaBpESlJVjrhQk1c=
Subject key identifier: ED:58:40:C6:A8:BA:D2:D7:71:33:8E:81:A1:A8:63:D3:DF:34:E6:56
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial: 01965B708E2C9251183976C279F42D6B325F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number: 0450
Signing time: Tue 22 Apr 2025 03:00:25 +0000
Manifest this update: Tue 22 Apr 2025 03:00:25 +0000
Manifest next update: Wed 23 Apr 2025 03:00:25 +0000
Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: E+EsdC93ClRZyNlLcsfka+Z1tle2RYjcX/AzjJrX8kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:8e:2c:92:51:18:39:76:c2:79:f4:2d:6b:32:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Validity
Not Before: Apr 22 03:00:25 2025 GMT
Not After : Apr 23 03:00:25 2025 GMT
Subject: CN=ed5840c6a8bad2d771338e81a1a863d3df34e656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:b2:73:64:79:16:63:9f:ff:ca:73:70:9a:
06:c0:9c:af:2e:b9:81:47:df:3d:b2:8e:e9:94:9e:
02:ab:96:86:23:48:e4:e2:e6:70:c6:cb:bd:22:98:
6a:a6:41:74:46:35:49:2e:da:1d:06:69:ae:01:58:
a9:47:b7:1b:ce:b1:42:df:33:24:a1:91:e6:b0:b7:
c4:2e:17:38:0a:26:16:c3:06:1f:be:29:9d:e0:c3:
9f:97:61:75:2f:29:ca:46:0f:c8:88:1d:f9:9f:6f:
89:0f:67:27:2c:b9:bf:a2:c1:44:2f:04:6e:1e:b1:
4e:3e:02:ea:af:e5:32:81:3c:75:3a:fd:87:1b:e3:
4d:30:1c:80:7d:66:e2:eb:20:58:f4:b3:17:ef:cb:
48:d8:90:77:70:f6:22:1a:09:84:46:cd:6b:0a:19:
38:45:2d:1e:f1:a3:fd:90:a9:f5:fe:ea:f2:e8:e4:
a7:83:ad:7d:ad:c9:9d:13:11:29:f0:c5:11:14:9d:
a0:47:b2:40:8b:43:be:a9:67:dc:1b:30:7f:fe:1b:
88:0d:ee:43:95:a5:f0:67:77:ef:97:3b:c0:a7:cf:
48:47:3d:bb:29:2a:f4:cb:33:3a:0c:2c:ad:a8:4b:
64:03:e8:c2:02:07:f2:a0:aa:8b:a8:61:54:30:39:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:58:40:C6:A8:BA:D2:D7:71:33:8E:81:A1:A8:63:D3:DF:34:E6:56
X509v3 Authority Key Identifier:
keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:52:46:c7:45:30:de:4e:d5:95:1b:77:c8:62:e6:f1:01:1e:
cc:5e:de:f2:97:54:00:08:a6:49:81:6d:b7:d7:ce:ef:f0:fd:
fb:da:ec:bd:e3:a0:40:2a:f3:a1:8a:bd:3b:f7:8a:d1:ff:99:
16:5e:b8:1e:bf:7e:ba:9d:6f:b5:b5:c5:37:04:7e:e9:57:3d:
2b:52:e7:23:a7:de:35:b4:cc:13:ac:bb:2b:2a:ed:3b:64:4d:
ff:d0:c0:3e:9b:97:27:c9:3e:65:aa:71:3f:9c:42:65:12:91:
a4:0e:5d:5c:d8:60:f5:18:ee:28:8f:a9:3c:6e:7c:2b:72:e5:
95:2f:cc:c0:65:33:37:d7:f8:69:8c:da:96:2a:0e:a2:4f:32:
d2:50:ba:85:66:05:d3:7b:1b:37:72:73:bc:8e:3e:a0:ae:69:
8e:d1:71:ff:5c:44:29:b6:8f:ba:1f:4d:cc:87:76:12:b6:ae:
21:10:28:af:b0:fa:28:50:95:8a:32:96:bf:fe:a7:0b:48:aa:
e4:fe:3b:63:1c:ad:92:a8:f9:74:40:5a:84:e3:9e:4f:2c:fc:
01:8f:c3:eb:e4:16:ac:a8:d8:40:71:29:ce:e6:53:1f:b8:91:
7f:7f:56:1f:1c:78:98:b8:83:e2:19:c8:82:21:df:17:67:58:
02:51:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:31:29 2025 by rpki-client