Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
File: xuqBSpkqcfWiqb7872b8YiDxePc.mft (raw, json)
Hash identifier: CH75dqOeW2zPBfE0056WIqcT/uCXpIVIvNyrwDd+N24=
Subject key identifier: B1:4E:E6:00:E3:41:13:40:52:39:C6:2C:87:09:55:A8:C4:72:E9:A0
Authority key identifier: C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
Certificate issuer: /CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Certificate serial: 01964BFDEED07601221F2AA9C59874355BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
Manifest number: 10E0
Signing time: Sat 19 Apr 2025 03:00:55 +0000
Manifest this update: Sat 19 Apr 2025 03:00:55 +0000
Manifest next update: Sun 20 Apr 2025 03:00:55 +0000
Files and hashes: 1: xuqBSpkqcfWiqb7872b8YiDxePc.crl (hash: Jd6vgUDc1qUzTjx/wGKGOITFqUDfXZVSXlF/hQYZx6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:ee:d0:76:01:22:1f:2a:a9:c5:98:74:35:5b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Validity
Not Before: Apr 19 03:00:55 2025 GMT
Not After : Apr 20 03:00:55 2025 GMT
Subject: CN=b14ee600e34113405239c62c870955a8c472e9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:13:7f:ed:53:32:8d:50:b1:b6:57:e4:1f:
4a:87:f2:27:49:2e:b2:b1:7d:f8:62:c2:e2:f1:38:
4d:9f:76:b2:34:9c:d0:1e:40:12:73:6d:30:ed:c3:
b6:0f:05:f4:31:f9:b5:d7:2a:8a:36:7e:04:9e:b0:
88:b7:0d:94:21:9e:2e:56:83:59:2a:32:0a:77:22:
7e:ca:54:c3:15:51:b2:42:39:33:db:03:8e:00:f4:
ba:d6:47:e0:c6:ee:4d:0d:2f:f4:5c:19:70:99:83:
c4:f4:37:5d:e3:5e:06:43:56:1f:b7:06:0b:7c:68:
87:eb:ba:f0:23:11:12:4a:22:24:e1:7a:ef:df:db:
f9:f0:d4:b2:ca:0c:b1:81:4e:b4:51:0a:3f:92:fc:
4e:2e:16:d4:d5:f5:7d:73:9d:6b:a0:12:26:65:18:
2b:31:01:ff:d3:89:3c:71:52:6b:7e:18:a1:9f:71:
5d:d1:d7:10:9b:8a:57:f1:ca:76:4b:71:1c:24:b1:
af:6c:4e:c5:34:52:e8:f4:ab:5f:7b:33:e4:a5:16:
e3:18:b5:fb:30:be:69:35:a0:9e:11:3d:60:1d:85:
d0:95:d9:9b:bb:8b:2c:24:72:50:59:69:dd:96:a7:
fc:c1:8d:c5:60:a6:0a:bc:c1:37:06:6e:86:9a:7a:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4E:E6:00:E3:41:13:40:52:39:C6:2C:87:09:55:A8:C4:72:E9:A0
X509v3 Authority Key Identifier:
keyid:C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:57:43:aa:98:c0:f6:18:5c:8d:88:71:d6:7e:05:7b:d7:fb:
05:85:9b:23:9f:0d:2a:75:ff:3f:1d:58:90:e7:6b:00:f8:45:
83:75:9a:ed:31:71:55:c9:02:de:d9:2f:e9:e7:df:46:52:c0:
ce:f0:cd:86:6b:30:10:ba:d1:2d:d0:b6:29:ac:bc:a9:a1:d5:
25:77:9d:ef:84:42:13:56:11:c7:e5:d5:0e:a9:ff:e1:19:e0:
6d:91:b8:1b:bf:67:c6:47:7c:d2:cc:51:6a:c7:32:38:7d:c8:
1c:f2:ce:10:f9:8b:70:2b:92:c0:ae:3c:8f:b1:a1:d8:f7:fd:
ba:d1:b0:4e:0c:b0:b7:a8:e2:ca:7a:76:6f:50:84:ee:99:ae:
c5:d7:5c:78:5d:0c:bc:89:d4:4a:f7:ae:a6:de:62:9f:95:b5:
12:42:b0:21:9c:9a:fa:4f:dc:99:6f:85:b3:8a:9b:6e:1e:ce:
9c:4a:b0:07:cc:e1:c0:57:4e:77:df:2b:fc:2e:69:eb:08:bc:
6c:58:32:d4:97:db:c7:45:9e:00:b6:ed:90:77:67:4e:61:6c:
4f:5f:34:27:69:80:56:1d:f2:dd:ab:89:19:ec:11:fa:ab:84:
a2:bb:36:96:eb:7f:7f:32:4d:0d:df:66:00:05:67:90:4c:3e:
32:42:6e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:36:05 2025 by rpki-client