Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
File: xFz9uYA84FcULRh_hrxPVnHX63s.mft (raw, json)
Hash identifier: nT+vF3Q/H4OHRX+HO24UeIIJb72LpL/Axnch0B9VXr4=
Subject key identifier: 88:BB:0B:4A:96:B2:85:5E:B2:B3:2C:2E:89:F6:75:25:EF:B8:00:5E
Authority key identifier: C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
Certificate issuer: /CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Certificate serial: 01964B90666C9DE26A064C650EF730FA52D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
Manifest number: 14F3
Signing time: Sat 19 Apr 2025 01:01:16 +0000
Manifest this update: Sat 19 Apr 2025 01:01:16 +0000
Manifest next update: Sun 20 Apr 2025 01:01:16 +0000
Files and hashes: 1: xFz9uYA84FcULRh_hrxPVnHX63s.crl (hash: QV+y0EFaHOnuLcEpHPjlt3KVeKdYJgGixuGoxtMCWek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:66:6c:9d:e2:6a:06:4c:65:0e:f7:30:fa:52:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45cfdb9803ce057142d187f86bc4f5671d7eb7b
Validity
Not Before: Apr 19 01:01:16 2025 GMT
Not After : Apr 20 01:01:16 2025 GMT
Subject: CN=88bb0b4a96b2855eb2b32c2e89f67525efb8005e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:4b:85:7d:f8:72:79:27:86:d3:0c:c1:66:
36:a1:84:80:a2:d8:a1:f7:47:84:4f:f7:03:d3:b9:
5f:95:cd:50:e1:00:80:e8:41:28:a0:5d:09:1c:7e:
e9:a5:4c:06:b9:d4:b4:a5:f1:e1:29:e6:9f:c0:8e:
6c:39:82:48:43:10:c9:e5:39:76:13:52:74:56:ed:
61:97:5b:06:63:8a:1a:82:86:a6:8e:ab:b5:ba:35:
50:ee:95:a8:2c:8c:e3:0f:b9:63:6f:2b:fd:d1:eb:
2c:8a:44:44:b3:4b:10:c5:15:76:e1:4d:d2:8c:bb:
6f:53:e8:7a:c8:12:83:bd:ba:ca:2e:fd:15:45:8a:
40:17:fc:62:c8:7f:81:35:05:e3:fa:82:9f:a3:67:
39:de:7e:95:ab:0d:4e:b0:5f:55:9b:c6:42:ee:98:
76:38:09:c4:8b:99:b0:90:95:9c:93:94:50:8d:d4:
4c:6d:80:88:82:ba:0e:f0:dd:07:13:4a:e8:60:a1:
56:9c:3c:a9:a6:e5:26:e9:8f:91:e1:53:1a:08:04:
a7:54:43:b6:a1:a9:e6:be:97:c4:c6:4d:7a:e3:65:
65:fb:ba:4d:4c:41:40:8a:b1:11:97:75:8d:69:b4:
f7:bb:86:b4:12:88:da:53:3b:72:99:5d:87:a4:64:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:0B:4A:96:B2:85:5E:B2:B3:2C:2E:89:F6:75:25:EF:B8:00:5E
X509v3 Authority Key Identifier:
keyid:C4:5C:FD:B9:80:3C:E0:57:14:2D:18:7F:86:BC:4F:56:71:D7:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFz9uYA84FcULRh_hrxPVnHX63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b254bd-145c-4019-88a4-d5a177178f4a/1/xFz9uYA84FcULRh_hrxPVnHX63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e2:05:25:67:0a:6c:73:e7:70:8b:86:d7:61:aa:41:75:8a:
68:d6:02:e4:1e:55:aa:f5:4b:2d:fe:d9:63:26:c2:7f:69:ce:
3f:2c:11:b6:36:3a:e6:4e:5d:b8:ea:f7:4c:ab:71:5a:99:1f:
62:e7:1e:2b:dd:ed:11:e2:7a:d4:dd:2c:d0:03:01:db:7a:84:
5b:01:01:94:c7:e5:d2:f9:d4:f2:22:fa:8f:bc:3a:2f:1d:db:
0c:97:57:2a:a5:ae:ef:e0:43:cd:ff:53:10:7d:b6:e3:1b:30:
6c:3a:20:f8:a5:e0:e0:4d:43:54:cb:32:41:00:c5:17:ba:dd:
ef:ec:5c:69:f1:87:84:3e:e8:df:c0:d0:e2:d1:fd:9f:11:d0:
b3:7c:e4:b6:f8:b3:d6:ad:dd:35:f6:d8:32:c7:ef:3e:0a:0a:
e0:a8:ed:3d:c7:ea:8d:de:9d:0c:6b:86:7d:26:4f:5b:83:3f:
93:7f:1b:78:51:d3:f6:18:d6:d8:42:e7:d1:20:a8:4c:c0:c0:
80:eb:e7:5b:78:da:5a:12:87:02:75:8e:38:1f:0d:9f:1b:8a:
51:98:82:76:8f:b7:df:94:4e:5a:67:ae:29:68:ac:ba:5b:ca:
ef:9e:54:f8:54:bd:de:e6:b9:83:8a:95:4d:fb:d5:c4:b3:71:
f2:75:40:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:13:38 2025 by rpki-client