Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
File: SXoXzvuUeLbK6PZdWfsepdB2LWg.mft (raw, json)
Hash identifier: WdocKig+FSrN+/RTMa+kecFvsOxAQn4vaHb+WgLeF5A=
Subject key identifier: E8:58:88:22:CF:31:89:3C:22:B8:BC:9C:46:C0:09:54:B1:D7:F3:CC
Authority key identifier: 49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68
Certificate issuer: /CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
Certificate serial: 0196534A0F075259D55028862DB9226A0058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
Manifest number: 0938
Signing time: Sun 20 Apr 2025 13:01:24 +0000
Manifest this update: Sun 20 Apr 2025 13:01:24 +0000
Manifest next update: Mon 21 Apr 2025 13:01:24 +0000
Files and hashes: 1: SXoXzvuUeLbK6PZdWfsepdB2LWg.crl (hash: ZDwbN0tZnXWPiY8YJqeZyWub+aC7BwE2tbhcwNnE6rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:0f:07:52:59:d5:50:28:86:2d:b9:22:6a:00:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
Validity
Not Before: Apr 20 13:01:24 2025 GMT
Not After : Apr 21 13:01:24 2025 GMT
Subject: CN=e8588822cf31893c22b8bc9c46c00954b1d7f3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2d:80:b1:79:c2:d5:cc:8a:cd:00:69:dc:bc:
d1:6e:df:05:23:4c:c0:7f:e0:2d:6a:31:fc:94:38:
b8:22:da:51:40:b2:3b:59:d4:31:b7:6f:bf:43:f3:
d0:cd:55:48:c7:9a:a0:51:08:b5:7a:3f:b3:f5:f2:
cf:31:36:ab:d1:f0:1b:aa:fc:c1:fb:7f:e8:b7:6a:
e2:fc:75:c5:2c:03:c3:d9:a7:c0:46:05:d7:00:10:
43:d8:ee:55:88:2d:20:c4:2e:72:f7:0b:cd:90:47:
d9:70:ae:b8:49:da:3c:f7:61:d2:24:34:37:bf:fd:
22:de:67:90:1d:d5:0e:ce:4d:c1:d9:f6:26:48:06:
c8:bf:e2:70:19:14:37:72:31:7d:6e:84:f1:4f:ca:
f2:2e:51:60:ac:d1:df:00:9d:5f:aa:49:0c:a4:56:
a1:ae:45:a8:6f:94:3c:8c:1b:ae:b7:ba:4d:26:3d:
ad:4d:44:c2:49:fe:3c:99:47:67:b6:b8:7e:56:1f:
e6:23:d8:9c:ef:b7:36:f4:00:e9:39:51:89:02:84:
93:1b:c1:72:34:14:ab:cb:33:dc:9a:43:92:ae:4f:
cc:a1:2e:8a:a3:da:9a:99:f7:dc:d8:dc:d0:07:a8:
dd:20:d9:bc:25:7b:84:8c:6a:dc:70:9b:c0:93:44:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:58:88:22:CF:31:89:3C:22:B8:BC:9C:46:C0:09:54:B1:D7:F3:CC
X509v3 Authority Key Identifier:
keyid:49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c3:66:46:34:da:8f:bc:53:f5:c9:2d:31:d0:4d:dd:fc:0a:
37:80:e6:21:26:ef:e3:31:8c:4d:a7:95:e3:aa:7e:4e:9d:fe:
73:b2:85:2f:19:81:90:2e:ca:24:79:11:4e:2e:2b:49:ea:ea:
fa:be:e4:a4:cf:5a:86:35:6c:66:e5:20:df:c4:1d:2b:51:a9:
3c:c9:c6:13:3a:9c:a5:67:1d:00:e7:e9:ee:28:22:d8:72:0f:
db:65:25:fc:8b:9c:7d:6e:e1:31:98:30:df:d4:c6:6c:a5:7c:
51:6d:cb:6f:29:f5:31:ce:b1:71:0f:5f:c7:14:ee:9b:2e:ae:
8f:72:e3:76:60:55:e8:b1:40:07:b6:ad:60:ec:64:fb:c2:4b:
3f:99:25:7f:ff:03:8a:53:39:11:7d:0b:24:7b:9b:52:a7:37:
d0:ca:a1:48:41:0d:5f:d7:b8:d1:11:a1:ab:a8:fe:85:61:95:
8a:9d:5b:96:5c:10:89:11:2d:8c:1e:40:2e:54:79:15:95:b7:
d4:98:86:d7:6e:a8:44:8f:eb:28:68:eb:e9:b0:a8:ba:2d:55:
f1:ad:26:fe:f7:7a:31:3d:04:c7:bd:b0:89:c7:45:d3:f2:c9:
a2:bf:b6:fa:da:69:fd:a4:de:08:6e:e3:be:8a:5b:21:d5:62:
09:5c:f2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:58:38 2025 by rpki-client