Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
File: xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json)
Hash identifier: GQ3lDwYT4keeFXu5Dj+ARgEgD4uMqqnPbGv+K2ESZFk=
Subject key identifier: 89:C7:D7:6B:1F:C2:42:72:78:35:6C:83:17:9F:3D:F4:86:E9:07:6A
Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
Certificate issuer: /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Certificate serial: 01963B09EBA7AF6454E318B21EC7C24DB57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
Manifest number: 054F
Signing time: Tue 15 Apr 2025 20:00:27 +0000
Manifest this update: Tue 15 Apr 2025 20:00:27 +0000
Manifest next update: Wed 16 Apr 2025 20:00:27 +0000
Files and hashes: 1: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: BPX4GQVYF01z02Dp4s+9nowcQeDEkdggTufAGygrrX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:09:eb:a7:af:64:54:e3:18:b2:1e:c7:c2:4d:b5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Validity
Not Before: Apr 15 20:00:27 2025 GMT
Not After : Apr 16 20:00:27 2025 GMT
Subject: CN=89c7d76b1fc2427278356c83179f3df486e9076a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:12:10:e0:81:b0:71:04:e7:c8:ff:3f:54:76:
b2:37:d0:35:fd:3f:4b:19:5d:3a:16:35:9e:80:da:
33:88:8a:06:c7:4b:22:1b:66:10:16:66:ee:3f:ee:
e9:66:93:31:3a:e0:2f:47:ca:ea:90:1a:7c:db:3a:
ff:d5:ee:66:70:17:01:f8:e9:22:26:e2:76:d3:3d:
1e:c1:7b:0a:4c:2d:76:90:50:bd:bc:85:f9:ec:a3:
4c:59:b4:fc:ad:84:45:e0:39:cf:80:f7:39:09:4e:
e2:f7:18:7f:24:a3:b5:26:ee:b8:6d:15:7c:f3:77:
62:04:dd:53:64:76:9f:f3:0a:ae:2d:dd:61:65:6b:
c6:44:e6:9b:81:0d:8f:68:79:71:5c:27:bc:f7:41:
7b:f4:81:20:1a:1b:ff:c3:b5:c5:ca:9e:64:74:0d:
cf:2f:f2:36:3f:67:a8:0c:60:4d:25:d2:bd:30:f7:
03:e2:04:87:4c:fa:fa:94:82:97:b3:00:d0:d9:be:
e8:cc:f7:2f:2a:17:c0:f5:85:f6:2c:5f:e9:ae:2b:
1e:62:4a:e4:93:65:5a:2c:46:83:2e:4a:e1:34:05:
d4:b5:bf:8f:7c:26:f0:02:6f:7d:27:63:36:a1:74:
8e:a6:fc:12:5d:c5:9f:32:c5:f1:4b:e0:9b:40:70:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C7:D7:6B:1F:C2:42:72:78:35:6C:83:17:9F:3D:F4:86:E9:07:6A
X509v3 Authority Key Identifier:
keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3e:0e:19:b3:df:be:b1:28:37:0c:3e:0a:3f:22:bb:41:84:
96:fb:f9:2c:0b:25:42:64:52:f2:89:69:d5:54:4f:2f:b3:95:
a1:5d:9a:c9:87:64:be:70:1c:55:01:52:e4:57:77:61:03:e1:
54:68:28:24:6b:1d:f1:7b:9c:a2:d4:f8:57:d4:ae:f0:4a:c1:
6c:e5:23:e2:75:cf:50:65:5b:a6:8e:64:19:a0:62:0b:ab:99:
84:af:4c:99:9b:b3:91:be:00:b4:87:4a:7c:05:ba:45:38:66:
7b:f1:6f:df:d4:af:4b:86:28:31:56:74:92:05:98:77:68:fd:
5a:31:8d:45:1b:81:d5:4a:60:63:80:54:d1:a9:0d:7e:fb:0d:
53:7e:bc:cd:54:60:96:9d:bc:b1:6b:55:d8:8e:84:f4:9c:c4:
57:64:35:69:22:e0:3f:66:21:49:80:ec:75:61:0b:80:96:ae:
94:0a:7c:ff:aa:44:e3:15:70:b0:cf:69:bd:c5:24:e9:84:65:
d2:05:93:17:e7:ca:82:20:6d:e9:01:ff:fb:6e:a4:3f:dd:cd:
53:b2:67:8e:c1:58:a2:f1:b9:cd:5e:66:8a:aa:b2:8a:b1:82:
64:3c:f4:1e:55:86:d5:0f:69:79:90:61:f6:f4:f2:46:54:5e:
c2:26:3f:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY7Ceunr2RU4xiyHsfCTbV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2ZhMmZjNGYyZWU5ZWJjODNiZTc5MzY2YjBhZTk0ZDFm
MmJmYzcwHhcNMjUwNDE1MjAwMDI3WhcNMjUwNDE2MjAwMDI3WjAzMTEwLwYDVQQD
Eyg4OWM3ZDc2YjFmYzI0MjcyNzgzNTZjODMxNzlmM2RmNDg2ZTkwNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hIQ4IGwcQTnyP8/VHayN9A1/T9L
GV06FjWegNoziIoGx0siG2YQFmbuP+7pZpMxOuAvR8rqkBp82zr/1e5mcBcB+Oki
JuJ20z0ewXsKTC12kFC9vIX57KNMWbT8rYRF4DnPgPc5CU7i9xh/JKO1Ju64bRV8
83diBN1TZHaf8wquLd1hZWvGROabgQ2PaHlxXCe890F79IEgGhv/w7XFyp5kdA3P
L/I2P2eoDGBNJdK9MPcD4gSHTPr6lIKXswDQ2b7ozPcvKhfA9YX2LF/priseYkrk
k2VaLEaDLkrhNAXUtb+PfCbwAm99J2M2oXSOpvwSXcWfMsXxS+CbQHBS1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInH12sfwkJyeDVsgxefPfSG6QdqMB8GA1UdIwQY
MBaAFMTPovxPLunryDvnk2awrpTR8r/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmIt
N2M1NzNiNmUwMGVhLzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmItN2M1NzNiNmUwMGVh
LzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOz4OGbPf
vrEoNww+Cj8iu0GElvv5LAslQmRS8olp1VRPL7OVoV2ayYdkvnAcVQFS5Fd3YQPh
VGgoJGsd8XucotT4V9Su8ErBbOUj4nXPUGVbpo5kGaBiC6uZhK9MmZuzkb4AtIdK
fAW6RThme/Fv39SvS4YoMVZ0kgWYd2j9WjGNRRuB1UpgY4BU0akNfvsNU368zVRg
lp28sWtV2I6E9JzEV2Q1aSLgP2YhSYDsdWELgJaulAp8/6pE4xVwsM9pvcUk6YRl
0gWTF+fKgiBt6QH/+26kP93NU7JnjsFYovG5zV5miqqyirGCZDz0HlWG1Q9peZBh
9vTyRlRewiY/Sg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:43:38 2025 by rpki-client