Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
File: xuqBSpkqcfWiqb7872b8YiDxePc.mft (raw, json)
Hash identifier: ywqTyQHWEpUE8OfJKpAfWGBcFnTiOIHefKJ9a4aR6Mo=
Subject key identifier: DD:2C:87:EB:57:77:47:5A:6C:61:1C:F7:B8:F1:C6:97:76:EC:E3:C7
Authority key identifier: C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
Certificate issuer: /CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Certificate serial: 01958CCE2B5DAE7CE73FE6FE6F73832556BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
Manifest number: 107D
Signing time: Thu 13 Mar 2025 00:01:16 +0000
Manifest this update: Thu 13 Mar 2025 00:01:16 +0000
Manifest next update: Fri 14 Mar 2025 00:01:16 +0000
Files and hashes: 1: xuqBSpkqcfWiqb7872b8YiDxePc.crl (hash: jIxu0FZk1oquYd7A3+Mzwc+QDOSOe4uwR30luJqfSjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:2b:5d:ae:7c:e7:3f:e6:fe:6f:73:83:25:56:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Validity
Not Before: Mar 13 00:01:16 2025 GMT
Not After : Mar 14 00:01:16 2025 GMT
Subject: CN=dd2c87eb5777475a6c611cf7b8f1c69776ece3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:ae:95:64:5b:fb:08:62:bc:19:2d:ef:19:
ca:99:4e:40:60:ee:6d:0f:19:61:4c:10:93:0d:41:
28:af:ea:48:15:ef:77:a2:e3:da:a4:93:bf:9a:cc:
43:9c:a2:95:8d:f0:3e:0b:22:9a:6f:d4:37:42:bd:
5f:b2:0b:fa:9e:c0:f1:75:18:b8:5b:0c:09:9e:31:
ff:f4:d3:dc:de:3a:aa:7d:0d:29:4d:8d:76:02:5c:
e7:76:af:e7:9d:b8:35:f5:73:b9:8b:35:99:cc:af:
35:f7:70:e4:83:29:fd:44:1c:26:95:04:89:1e:ce:
56:1f:2d:9d:03:e4:00:b4:e6:83:54:7e:b8:5e:f9:
cd:8d:05:8c:86:0f:5d:96:da:7f:92:08:51:14:75:
12:2f:b2:42:bc:bb:d3:31:21:e6:ad:51:d2:4c:90:
2c:86:66:d1:79:14:34:c5:32:f3:98:00:96:1b:2e:
ac:f0:1e:aa:b1:c7:97:a8:c8:33:5f:32:12:9a:17:
53:3d:03:e2:33:84:ad:2e:9a:da:89:b4:96:b9:dc:
22:1b:88:e7:2e:42:b7:ea:d2:5a:ba:c9:5b:68:de:
e5:d1:73:3c:18:66:33:06:e7:03:d2:08:a0:95:80:
d6:f1:c9:5f:57:1a:fd:ab:c5:a2:39:d9:cf:68:9d:
dd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2C:87:EB:57:77:47:5A:6C:61:1C:F7:B8:F1:C6:97:76:EC:E3:C7
X509v3 Authority Key Identifier:
keyid:C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b8:bb:d5:e6:a6:0e:fd:93:82:be:a5:e5:c8:d8:7d:26:05:
51:f9:29:15:96:e3:c8:30:7b:8d:fe:f8:b0:b1:d8:83:28:6d:
97:f9:69:92:e3:b1:8e:87:0b:f1:2d:e6:72:62:86:f5:b3:25:
3f:f6:cf:df:a6:68:ba:89:d7:f5:03:e9:17:51:9b:5c:58:ab:
ee:07:fa:66:60:76:ef:5d:72:aa:15:1d:01:21:11:44:74:9c:
3c:69:d1:29:ad:79:36:05:b3:f3:0f:66:ba:cb:a2:1d:ba:a9:
fb:fb:aa:55:f8:27:0f:7a:ff:5d:2b:c9:d0:ed:02:6c:ef:ee:
70:c6:0f:df:db:5c:b2:f4:5e:00:bd:f2:f9:df:28:79:5f:e4:
80:c1:8d:f9:19:4d:71:90:ce:e3:a1:37:1a:63:21:01:76:76:
f9:c6:0e:5f:01:a4:a8:ac:ca:43:b1:82:10:53:26:5f:70:eb:
e5:00:ec:82:f0:d6:0c:5a:23:49:76:93:72:2b:bd:eb:82:61:
57:22:39:35:81:62:fd:c0:ca:bf:d5:c1:00:03:d6:7e:08:b1:
f0:5f:99:cd:08:dc:f2:ea:83:92:53:40:77:99:0e:bf:12:91:
94:31:a6:cb:be:5d:9e:4f:bd:02:f5:46:fb:bc:52:00:c9:dd:
ec:97:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:53 2025 by rpki-client