Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
File: xRg7G2FacNeXwnfPyEC5CjLZaWw.mft (raw, json)
Hash identifier: F7lXx9S1FKdvJSTjcVXZz+csbwGALcfiaq1dVxReBzA=
Subject key identifier: A9:D2:57:22:80:0C:B0:79:42:C4:C6:D5:A6:6D:9F:4A:1C:3B:1F:05
Authority key identifier: C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
Certificate issuer: /CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Certificate serial: 01964D0FF3A83E7A17B453BD54F23294E4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
Manifest number: 0C1D
Signing time: Sat 19 Apr 2025 08:00:13 +0000
Manifest this update: Sat 19 Apr 2025 08:00:13 +0000
Manifest next update: Sun 20 Apr 2025 08:00:13 +0000
Files and hashes: 1: xRg7G2FacNeXwnfPyEC5CjLZaWw.crl (hash: sHGWsOyyMH7ppqQ2w7QxBUgWCpPGrTs2a0Ne5ByX9zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:0f:f3:a8:3e:7a:17:b4:53:bd:54:f2:32:94:e4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5183b1b615a70d797c277cfc840b90a32d9696c
Validity
Not Before: Apr 19 08:00:13 2025 GMT
Not After : Apr 20 08:00:13 2025 GMT
Subject: CN=a9d25722800cb07942c4c6d5a66d9f4a1c3b1f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:be:79:81:68:1b:89:d5:d2:16:76:20:ab:
69:40:25:ed:41:b3:ba:36:5e:0e:7d:81:54:fc:6a:
07:24:5f:a3:47:0d:9f:1c:84:ae:4c:6f:b6:ff:b2:
9d:59:e0:6d:be:6d:c1:92:a1:36:8e:f8:34:60:de:
f2:7d:f0:13:cb:8d:85:ae:6b:35:84:fa:04:07:d0:
00:ea:ef:91:38:ae:0f:b4:49:4d:8a:a2:6e:f5:50:
00:83:74:82:46:48:86:6e:72:2b:f1:02:83:1c:db:
42:89:fb:36:14:c4:0a:e5:36:f5:12:e5:ae:15:fd:
f2:a4:ea:b6:5b:c6:22:9d:22:b3:40:35:62:c0:3c:
d0:18:98:0a:bb:32:df:a9:30:34:d4:86:32:e4:b3:
70:56:26:3e:eb:0e:84:61:23:b5:04:fe:1e:5a:b4:
41:ad:f0:9f:b4:39:e7:e8:1a:67:cd:cc:da:d0:a8:
74:ff:44:e4:a3:08:5b:c1:d1:c1:2a:14:0b:a8:3e:
9c:6b:09:5d:b3:ec:88:a2:30:e2:5c:e3:c4:74:0a:
11:70:2b:68:08:a1:42:ba:e2:71:38:12:44:ba:f0:
b9:37:5a:08:c6:6c:15:22:68:37:06:8b:7c:02:cb:
c0:c4:9d:30:59:c4:5f:7b:a4:a3:06:af:0a:c4:2e:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D2:57:22:80:0C:B0:79:42:C4:C6:D5:A6:6D:9F:4A:1C:3B:1F:05
X509v3 Authority Key Identifier:
keyid:C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:37:63:0e:d6:df:ca:41:55:6b:4b:0a:c2:03:03:70:62:40:
2b:b5:47:da:0b:85:bb:27:79:34:6e:f2:1c:e8:b7:b3:9b:c1:
07:11:10:b7:5b:09:82:48:d0:8e:c1:94:4a:c4:23:bd:86:13:
d6:57:a3:fb:6a:51:65:4b:63:c8:7b:5b:ce:83:01:75:63:43:
78:41:cb:01:fa:35:70:06:71:c4:fe:c2:c9:44:e4:4b:be:e6:
84:17:93:2c:d3:7a:5a:09:b7:b1:ef:d2:19:fa:fd:8b:7f:c9:
89:ad:8a:5b:a9:33:09:fb:77:4d:69:ba:95:73:6d:3f:81:30:
e8:e7:a3:08:a4:12:fe:b9:f3:9a:70:2d:dd:ae:61:bb:7b:38:
64:59:c6:83:d7:8f:86:24:b0:66:a9:fb:73:5f:bf:ce:96:e8:
7c:49:0a:d3:a9:5e:ea:91:af:1a:e1:0f:b6:c8:2e:b5:de:5a:
7b:70:2c:c3:b6:30:3a:c6:be:f4:a6:11:e0:96:33:5f:55:3d:
6b:97:17:78:c0:e1:72:b9:e3:93:49:74:4a:48:1c:db:27:08:
aa:ef:d8:08:92:d1:e1:71:50:10:61:19:ac:2d:bf:78:5a:0a:
cb:71:1c:cc:e2:4a:6c:5f:6c:2c:82:85:4a:43:cb:fd:97:2b:
ce:b8:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:10:22 2025 by rpki-client