Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: +KrkvNOMMnUDMP5zYlPyzg711d1uVx77/ltz8gc3dOA=
Subject key identifier: AE:B0:1D:4C:1B:5A:78:95:43:F2:3B:C3:3D:80:CF:36:16:5E:62:87
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 019648584B485DE0439525B885BE6E149922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 0909
Signing time: Fri 18 Apr 2025 10:01:08 +0000
Manifest this update: Fri 18 Apr 2025 10:01:08 +0000
Manifest next update: Sat 19 Apr 2025 10:01:08 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: Zb8H6c0you19kPfstB6biUt5EtiBhQFS68GwF3WhnTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:58:4b:48:5d:e0:43:95:25:b8:85:be:6e:14:99:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: Apr 18 10:01:08 2025 GMT
Not After : Apr 19 10:01:08 2025 GMT
Subject: CN=aeb01d4c1b5a789543f23bc33d80cf36165e6287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:eb:8d:ec:96:cc:db:ad:b0:da:4a:38:75:de:
2d:26:f7:f9:9e:da:5c:b5:c0:69:7f:0c:ad:ed:fe:
79:72:fb:92:c5:79:46:f1:9b:f3:bf:79:54:b4:9d:
05:a0:7a:71:ca:e5:76:5f:74:fd:4b:ed:08:dd:8e:
2a:1c:11:d3:09:ac:46:bc:7a:f1:0c:6c:ed:99:53:
8c:42:b5:d7:cb:9e:70:99:b6:d8:cb:c7:12:a4:20:
78:94:80:62:30:b7:19:7d:9c:d1:24:5a:f4:6f:04:
97:c9:1c:b7:a9:61:83:00:6d:ff:8c:41:99:5a:54:
78:67:07:52:ae:f6:d5:e6:1e:5d:26:ce:92:8f:ca:
86:1c:50:a3:67:57:f7:9a:46:47:0e:75:10:0d:8f:
75:b7:be:2f:97:63:6f:31:be:51:47:70:9d:d6:c8:
f3:32:0e:32:25:f1:47:59:d0:05:9e:0e:96:2b:f1:
7a:11:dc:7c:e2:49:7d:dd:34:07:20:77:d3:39:de:
f7:89:7b:d5:84:4a:d7:00:2f:40:6b:cb:83:be:af:
d4:72:3e:b3:24:7c:7c:d9:a9:ea:d3:bf:a0:19:c3:
da:66:ae:9b:7f:34:8d:c2:36:09:64:e3:4b:e3:e0:
80:fa:2c:38:f1:98:40:69:97:e9:17:b7:03:44:cb:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B0:1D:4C:1B:5A:78:95:43:F2:3B:C3:3D:80:CF:36:16:5E:62:87
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4d:e9:44:91:0a:79:1d:4f:d9:18:99:c7:34:4c:a0:a7:be:
05:d2:d8:bf:b2:3c:86:4a:2b:32:76:46:c1:b9:83:8e:c5:41:
88:d0:97:c8:d9:4b:86:ef:b2:58:f4:fa:44:a0:09:13:37:0c:
da:63:1d:bb:e9:ac:b3:b5:39:dc:d7:b0:a4:e0:d0:7b:50:9f:
61:07:2c:83:7a:be:a5:e8:63:d0:bd:c7:70:57:da:ce:e4:40:
19:93:4d:cf:21:e5:6a:74:0b:94:37:58:19:9b:dc:8b:9b:f0:
b3:c6:51:d0:0f:bb:cc:27:2c:e0:c0:10:04:2e:48:32:f5:92:
5a:3e:80:75:7b:1a:fb:5c:f1:fb:bc:4b:79:8a:12:ba:49:16:
c4:0d:42:4f:db:a4:b8:52:c7:65:45:60:ee:97:f8:ee:a2:3d:
14:45:0d:44:b2:0e:2b:49:c4:7a:04:48:ed:92:6a:17:ab:f9:
7d:4c:7e:39:aa:fe:57:14:ca:94:e7:a6:17:78:13:c5:5a:d3:
4b:2b:1e:1e:bc:1a:13:75:b5:38:76:48:b2:ff:b1:d8:2d:c5:
db:9e:55:f9:18:e4:e4:e3:06:07:01:3e:eb:ce:cb:ae:ec:32:
45:1a:5a:7e:fd:1e:41:65:23:86:3b:95:13:75:0b:d0:62:4a:
f8:61:97:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:18:26 2025 by rpki-client