Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
File: xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json)
Hash identifier: GII7Dnn1FOVUStsSi4kR52WVlGT+AmDi1qizx6rZZro=
Subject key identifier: B1:10:6F:EE:3F:6F:B4:88:64:3E:AA:0E:55:5C:4A:4C:1C:82:C1:A8
Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
Certificate issuer: /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Certificate serial: 01958EF34B6A57DD03F1F8C3B9314AAEC582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
Manifest number: 0AD8
Signing time: Thu 13 Mar 2025 10:01:03 +0000
Manifest this update: Thu 13 Mar 2025 10:01:03 +0000
Manifest next update: Fri 14 Mar 2025 10:01:03 +0000
Files and hashes: 1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: S8GRAlLJ2+je9YPFwul6VGVu0n1A32ZP5B0sAclQm0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:4b:6a:57:dd:03:f1:f8:c3:b9:31:4a:ae:c5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1
Validity
Not Before: Mar 13 10:01:03 2025 GMT
Not After : Mar 14 10:01:03 2025 GMT
Subject: CN=b1106fee3f6fb488643eaa0e555c4a4c1c82c1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:d6:39:7a:04:39:70:0d:b0:96:40:87:c3:
76:8a:46:46:46:c3:c4:d1:4b:78:c8:3f:73:d5:31:
ab:38:26:db:60:63:a0:1f:1a:7d:b6:75:29:2f:e0:
7f:45:1e:45:73:c5:05:22:8d:83:aa:fc:61:e1:d6:
31:20:51:eb:65:42:c0:27:09:2f:09:27:33:60:18:
30:09:c6:2f:a2:94:93:95:5e:65:8d:30:66:04:50:
18:57:8f:4a:d9:2c:5e:69:75:74:ca:22:3e:83:63:
01:57:9e:a9:2a:51:1b:76:1b:af:cb:2e:fe:0c:3c:
9c:fa:cd:50:45:b5:38:76:cc:63:1e:46:d1:8b:b5:
c9:79:a5:95:f6:c2:15:b5:9f:67:18:e0:0e:7f:fe:
ee:74:66:47:66:b8:91:d4:c4:43:c2:86:c3:39:07:
06:96:d3:e6:fa:2c:41:3f:cd:bd:9a:1e:80:2c:27:
13:5d:c0:4b:e1:1b:49:21:01:e0:d7:01:21:2b:d6:
ae:57:e0:3c:6c:7c:fb:fe:d8:bd:95:25:95:85:13:
0e:02:ff:dc:45:d0:8e:b4:23:ee:e9:58:08:15:29:
c8:f5:fa:05:77:83:46:e9:db:66:a8:b3:09:15:a0:
78:fc:f6:9a:cf:76:43:79:36:7f:fd:0b:3d:be:bc:
2d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:10:6F:EE:3F:6F:B4:88:64:3E:AA:0E:55:5C:4A:4C:1C:82:C1:A8
X509v3 Authority Key Identifier:
keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:66:7b:26:5f:f8:49:cf:de:df:eb:4f:cf:53:40:05:79:78:
95:a6:9e:b6:48:f5:6e:b3:f5:b0:e5:2a:13:d8:7b:e2:ae:a6:
80:cd:54:fe:04:34:2d:7f:61:8c:3b:c0:1b:a4:95:22:02:b0:
7d:fa:f1:54:ed:4d:94:d4:7e:19:40:d4:98:b5:ae:33:d3:8a:
52:a2:2a:53:66:43:a5:95:8c:f9:e2:16:02:d4:f6:02:3b:da:
20:2b:82:89:3d:1c:70:cf:80:39:ec:c0:a2:63:08:a8:53:da:
30:84:c3:8a:dd:fe:d6:dc:7b:8c:f1:43:7d:b9:ed:cd:76:69:
d0:2f:05:6a:10:16:08:65:59:ad:f4:b1:2c:3c:fc:35:37:e2:
e0:d8:eb:23:20:d8:e9:38:1f:e7:55:f5:ff:d9:bc:65:0e:19:
e0:cf:f3:e5:d1:26:ef:26:bb:79:f0:ae:c3:65:98:66:bf:22:
35:88:3a:9b:95:2a:33:4b:ec:8b:78:e9:9f:86:3b:a3:44:56:
6f:4d:88:27:4f:75:77:d9:fe:8a:12:a6:c6:b6:5c:55:07:ee:
94:71:fc:54:7f:8f:8b:cf:98:8f:17:59:21:0b:12:03:ac:71:
ea:54:0c:fd:36:e2:a7:f6:f1:2c:e3:02:ff:14:c8:e4:ab:34:
3e:32:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:35 2025 by rpki-client