Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier: ce9MIZazZbF7KZfsJZ6aey3CITyePzeR1CIob4RNFII=
Subject key identifier: 31:2E:27:F6:0D:6A:10:15:68:72:EA:E2:79:A7:F0:E4:F9:E1:67:B9
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial: 01964FDA3A22A0D9EE30A9488F002FD6C0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number: 0FC0
Signing time: Sat 19 Apr 2025 21:00:23 +0000
Manifest this update: Sat 19 Apr 2025 21:00:23 +0000
Manifest next update: Sun 20 Apr 2025 21:00:23 +0000
Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: GmJhLpOHVo4j4wBGynRClnrmGvsbdxMelQU15VhLBUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:3a:22:a0:d9:ee:30:a9:48:8f:00:2f:d6:c0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Validity
Not Before: Apr 19 21:00:23 2025 GMT
Not After : Apr 20 21:00:23 2025 GMT
Subject: CN=312e27f60d6a10156872eae279a7f0e4f9e167b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:de:55:c7:da:37:05:96:1b:5c:b8:23:c7:
01:e5:1a:a6:b9:33:07:d5:de:62:17:41:ae:3b:92:
9e:da:f8:6d:19:7d:b4:31:82:4c:53:b7:2a:cd:fe:
c0:57:93:60:e0:57:ca:b1:a4:ec:75:72:ae:f8:c6:
d3:98:9e:3a:cd:d1:65:5b:ff:c4:fe:3e:8f:13:61:
af:a1:00:d9:00:3f:76:ff:22:88:aa:db:09:8c:45:
9b:e5:f7:65:e3:97:3e:21:74:ec:a5:e4:87:99:30:
4d:fa:64:24:6b:fa:06:0d:24:ca:f0:4e:f2:df:dd:
f4:ce:87:ea:a1:24:fe:96:7a:fa:b1:63:8e:11:30:
3d:3f:8f:b5:db:cb:34:c6:d9:a6:08:29:6d:96:c0:
c9:63:82:16:59:b9:81:e5:d1:7b:10:0b:6b:3a:f6:
54:11:97:b8:85:20:ab:be:9d:d6:69:50:7d:a0:e2:
3f:e0:72:d7:24:2d:07:b5:8c:f3:46:ed:07:cc:6f:
e9:7b:14:8a:32:82:fe:e9:e9:ee:7f:ff:52:f0:1c:
b4:a7:4e:e5:69:d4:78:2d:da:50:00:60:9a:5c:c4:
51:e6:71:15:63:f4:a3:73:6d:2d:98:41:88:c9:eb:
4d:fe:05:17:89:10:10:25:b0:89:2d:f4:54:0f:fb:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2E:27:F6:0D:6A:10:15:68:72:EA:E2:79:A7:F0:E4:F9:E1:67:B9
X509v3 Authority Key Identifier:
keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ed:e0:56:38:81:32:e5:c5:3c:39:c5:e4:25:8b:a2:77:2b:
b9:fe:16:50:df:37:79:21:26:cb:02:bc:d5:41:ab:1e:da:3c:
d4:23:a9:6d:91:16:bf:29:bb:e1:11:07:7b:81:c5:f0:3c:09:
34:2b:64:6f:b1:fa:c4:8f:7d:52:31:fe:c8:b8:e9:77:46:31:
65:33:b2:e9:dc:f3:2b:12:50:11:b5:32:2d:4f:a6:ba:f7:91:
23:22:62:07:00:72:a6:84:83:3a:83:f7:b6:c1:7c:f5:0a:8c:
20:a6:b3:03:ca:4f:9c:06:b2:cb:72:f8:28:8d:c9:d0:7e:73:
1f:e6:b1:7d:d7:ea:43:21:c6:21:d5:98:2b:2a:9d:6f:32:fc:
b7:8c:ed:31:9a:f9:ec:8b:85:26:8d:bc:3d:05:34:81:54:13:
0e:89:cd:52:54:0c:9a:ca:4a:78:89:f4:15:6b:4e:86:13:37:
ec:f4:0b:1d:cf:4f:81:40:bb:2d:5f:b8:6e:58:66:e8:8c:cf:
31:96:7b:fd:0a:74:86:51:98:1f:06:57:23:ca:2a:07:78:df:
6d:ce:bd:19:da:1b:85:c9:0d:9a:47:45:f9:8d:47:16:ed:5a:
d9:e6:46:06:f3:27:49:b1:9f:1b:d1:a7:c0:15:1c:fc:aa:d8:
aa:c5:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:51 2025 by rpki-client