Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
File: XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json)
Hash identifier: uyOnAEmMukW7p7oUgQOle/C4aeL2HHSN/O5TnrKCyqQ=
Subject key identifier: 22:8A:83:8A:E1:30:CB:34:C4:00:C1:C9:E9:72:EC:5F:35:3A:F5:8D
Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
Certificate issuer: /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Certificate serial: 019645C484D6D8CD01B6FC7502F68FF034C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
Manifest number: 0784
Signing time: Thu 17 Apr 2025 22:00:28 +0000
Manifest this update: Thu 17 Apr 2025 22:00:28 +0000
Manifest next update: Fri 18 Apr 2025 22:00:28 +0000
Files and hashes: 1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: 3NRWI6tLtiZOOShgAXjdr4K6k6e+RKKnQKISk94MDaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:84:d6:d8:cd:01:b6:fc:75:02:f6:8f:f0:34:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Validity
Not Before: Apr 17 22:00:28 2025 GMT
Not After : Apr 18 22:00:28 2025 GMT
Subject: CN=228a838ae130cb34c400c1c9e972ec5f353af58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:08:30:f8:b2:0e:15:f5:d2:5f:56:4a:ba:
67:7b:39:74:ff:24:41:0a:43:75:ad:ce:e8:6e:6f:
e9:48:14:fb:53:a8:46:fa:5d:1e:77:4e:6f:75:57:
d6:93:85:f7:0e:22:75:91:b2:f3:f1:7c:fa:ea:39:
8f:6b:a1:79:d3:18:c6:a9:48:b1:d2:49:96:23:3a:
85:93:22:43:73:69:00:8d:2c:ee:98:d6:e0:0b:60:
df:c6:57:9a:4d:d1:85:06:49:83:32:48:48:c6:b9:
53:00:dd:ae:4b:ec:5c:a7:a4:8f:d2:84:97:e3:d3:
8f:59:36:64:89:cc:ca:2d:67:49:f2:e9:1f:74:cc:
11:7e:19:9d:b8:36:69:d4:19:47:51:a3:50:51:dd:
de:07:ea:1f:b3:53:69:b1:1f:48:43:ca:1b:46:5a:
d3:24:28:77:54:59:ab:53:87:67:89:f1:e3:69:ae:
46:8d:33:35:37:5c:75:e1:3d:16:78:6c:6a:10:ae:
23:5f:da:8d:9b:b8:9a:1a:16:d9:55:18:77:e5:7c:
9b:49:25:9b:02:37:fd:41:24:31:34:8b:c4:62:8d:
39:16:ce:7b:f9:6a:89:3a:38:2e:02:4c:a2:12:5c:
92:8f:6b:3d:52:9e:25:26:c3:a9:39:79:02:f2:64:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8A:83:8A:E1:30:CB:34:C4:00:C1:C9:E9:72:EC:5F:35:3A:F5:8D
X509v3 Authority Key Identifier:
keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:22:c5:a5:e3:c9:b3:3a:aa:8d:4c:de:56:4c:07:97:ab:f9:
7c:76:80:63:d8:37:db:21:31:9c:38:6d:2a:10:a9:19:7e:0e:
04:a4:20:28:fb:b8:63:7c:43:03:ef:b6:bb:c8:df:12:9b:10:
c3:98:13:48:94:3b:eb:bb:cd:1a:93:b6:01:21:88:9f:6b:6f:
a7:1c:2d:4b:1e:e3:47:cd:56:73:43:aa:da:40:50:79:77:20:
78:22:32:f1:5c:89:6e:de:1d:d0:b9:5a:f1:e0:58:e0:02:ce:
df:6b:eb:c2:ba:ae:b8:c2:2c:5f:2c:63:32:1c:e5:2b:fc:42:
46:10:6d:b6:32:03:23:77:e3:c9:fb:78:40:fb:91:fd:4c:af:
4b:dd:ee:58:d2:55:17:a9:8a:e6:9f:d0:81:8f:7f:ea:3d:92:
e9:40:82:e8:d4:5b:a6:94:a0:62:69:32:12:0f:ca:f6:19:98:
9f:9c:76:91:13:9a:81:48:db:7c:7f:58:5d:f3:9f:87:08:3e:
8c:79:aa:35:27:60:82:18:73:66:b2:95:36:32:5f:b8:e4:88:
76:cf:e3:53:c9:54:8e:46:3c:ef:a5:93:14:ff:97:66:a0:36:
54:76:91:b8:8d:ef:63:9b:9f:da:2c:ec:f6:a4:fc:35:fe:d0:
b5:f4:bf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:21:00 2025 by rpki-client