Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
File: XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json)
Hash identifier: V732Unoyszpt4Q+r1Byp17UCnJE6AZrU1LkaIsbr79Q=
Subject key identifier: E5:6C:A7:C6:7A:CC:7E:3E:09:D2:43:DB:92:71:A3:99:76:DA:4D:D5
Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Certificate serial: 01965424EBEC480FB3D60440C377313A98E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
Manifest number: 0764
Signing time: Sun 20 Apr 2025 17:00:27 +0000
Manifest this update: Sun 20 Apr 2025 17:00:27 +0000
Manifest next update: Mon 21 Apr 2025 17:00:27 +0000
Files and hashes: 1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: 0p+4LygEJWbKFdGrI1keTuEN7ytBlc13lZn4Xdykj4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:eb:ec:48:0f:b3:d6:04:40:c3:77:31:3a:98:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc
Validity
Not Before: Apr 20 17:00:27 2025 GMT
Not After : Apr 21 17:00:27 2025 GMT
Subject: CN=e56ca7c67acc7e3e09d243db9271a39976da4dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:32:46:99:dc:e1:9b:d8:d1:f0:bf:07:29:
89:3f:57:20:5d:8f:a1:1f:b1:10:cf:1b:7f:69:0d:
3c:20:be:b1:f1:64:32:15:c3:68:c0:f4:e4:9e:33:
3d:28:b4:1c:45:2b:f4:18:b6:3b:ae:2e:3f:bc:cf:
ea:38:dc:76:f7:10:80:04:77:69:b3:18:65:49:fa:
a3:2b:36:64:ac:87:3e:3e:1c:cd:5f:47:68:84:cb:
f8:65:6c:68:aa:8b:00:11:2c:93:fb:fc:65:eb:63:
3f:dc:e2:b1:7d:ea:26:ba:9b:49:8e:8a:fd:47:c6:
de:8e:7f:73:43:0d:e4:42:b0:68:f1:12:39:3f:58:
e6:7b:31:39:91:14:97:a8:f2:58:01:28:f1:e2:75:
11:06:45:46:b7:f2:d0:b2:d3:51:79:13:be:2c:5b:
73:30:99:7a:fe:36:8d:bf:a6:fe:65:16:ff:8d:92:
53:ef:f2:4f:33:2a:e8:5a:20:70:97:43:4c:e0:23:
13:6a:ba:7a:06:69:7b:ea:ce:2b:e1:ac:41:6c:50:
f4:c3:6f:a3:0c:3b:6a:97:95:69:18:54:8a:18:82:
da:44:10:0a:3b:ba:f5:c3:bc:e3:cf:1d:9c:8d:57:
aa:d5:50:35:52:84:ca:0c:ff:c8:b4:86:28:39:4d:
fe:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:A7:C6:7A:CC:7E:3E:09:D2:43:DB:92:71:A3:99:76:DA:4D:D5
X509v3 Authority Key Identifier:
keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1a:f3:a1:1c:c7:c1:df:2a:03:53:8e:e2:ec:21:1d:f4:69:
3a:ef:23:6b:32:e7:a7:bb:82:f3:b8:ec:52:30:d0:04:f7:ae:
17:62:8e:d0:68:e9:90:35:c1:7e:83:fe:f5:f8:fe:3d:4d:c0:
ad:65:5e:a0:bd:85:22:d5:a4:62:fd:7e:78:ab:2d:e4:ee:a5:
15:12:69:18:78:22:4b:2d:a7:78:fe:1d:03:fd:80:8d:18:4d:
f8:cc:cb:b4:a6:f9:b6:de:3a:b1:75:8e:fe:d7:59:52:bc:7c:
04:4b:e7:dd:6d:9f:e3:2e:a3:85:09:6a:76:88:0a:b7:da:9f:
70:8d:11:a0:d6:3d:21:f2:a5:b4:8f:c3:be:30:65:8f:db:9f:
97:92:2b:47:00:a0:87:dc:57:4a:8e:62:49:fa:2b:b5:03:76:
c0:52:6e:d9:18:9c:bb:16:16:d6:29:c5:e8:fe:2b:68:ab:4b:
c9:c9:96:03:b5:f8:99:3d:9f:dc:d9:a3:ff:b5:48:91:ae:42:
6a:68:13:71:0f:74:6c:24:02:cf:8b:43:89:9d:0b:0f:44:bf:
26:b6:91:4f:09:34:54:ee:96:a4:86:7a:d9:ac:b3:1b:f5:1d:
b9:4d:cc:50:51:c1:37:7e:c3:18:0b:b4:18:99:17:f3:90:65:
ab:dd:86:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:40 2025 by rpki-client