Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
File: xGglzBDkwis4XEo3r5DzC2iBQRo.mft (raw, json)
Hash identifier: RTtY2y+zrndvOEPV9qyrGXUvc2xJ0Ui+hMosVpQudAQ=
Subject key identifier: 14:68:F9:63:8A:A0:48:43:8F:81:50:51:0D:87:FE:A9:4C:F8:0E:AB
Authority key identifier: C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
Certificate issuer: /CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Certificate serial: 01962B9763E3943189C4A0CC6E292D731E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
Manifest number: 05C2
Signing time: Sat 12 Apr 2025 20:01:03 +0000
Manifest this update: Sat 12 Apr 2025 20:01:03 +0000
Manifest next update: Sun 13 Apr 2025 20:01:03 +0000
Files and hashes: 1: xGglzBDkwis4XEo3r5DzC2iBQRo.crl (hash: EmXiM26fkW4IZ/uyzsslUH85oe5mcSfmoLT35OeN9wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:97:63:e3:94:31:89:c4:a0:cc:6e:29:2d:73:1e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Validity
Not Before: Apr 12 20:01:03 2025 GMT
Not After : Apr 13 20:01:03 2025 GMT
Subject: CN=1468f9638aa048438f8150510d87fea94cf80eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dc:6e:5c:cc:31:8c:e6:4d:88:2f:08:71:78:
fc:80:a9:9d:35:f0:7a:30:35:07:f0:ad:e4:20:41:
ab:f4:e9:13:d9:50:f5:67:d3:21:29:5f:9b:64:c3:
d8:1e:bb:a7:5e:4f:ed:4b:72:ba:6f:87:d0:de:2f:
97:82:db:33:ba:97:7d:4f:27:4b:9b:11:44:c0:73:
60:9b:ac:f7:15:07:df:80:9d:ed:43:f0:3f:dd:63:
4d:65:ae:d6:13:5d:03:1a:71:e4:09:be:32:09:0d:
b6:6b:15:71:54:36:7a:62:94:8d:a7:d4:73:37:0d:
ee:8f:f1:9d:5a:1a:1e:58:d7:11:f6:1d:5a:e4:c7:
ea:e3:13:56:c4:a4:93:66:cb:21:9f:4e:f0:d0:fb:
92:97:08:d3:66:ed:88:dd:56:da:d8:20:a7:30:94:
8a:89:e1:a2:93:e7:dc:52:b2:48:df:5e:01:f6:08:
0f:24:76:9e:00:76:e7:5f:1a:45:9d:4b:c2:8b:8e:
70:d1:89:44:f6:7e:ab:a0:3f:d6:89:d7:3c:32:af:
f9:ec:3f:a8:48:2b:07:f9:33:f1:1e:84:73:99:95:
ae:29:e6:a1:e5:d9:3a:6f:63:c1:b5:df:59:21:ad:
a7:98:83:0f:2a:20:57:7d:8a:d1:56:2f:8c:5d:67:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:68:F9:63:8A:A0:48:43:8F:81:50:51:0D:87:FE:A9:4C:F8:0E:AB
X509v3 Authority Key Identifier:
keyid:C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:82:71:28:c9:cd:11:12:69:24:fe:55:59:9b:62:bd:0a:11:
a0:5e:38:a0:60:46:d2:98:de:8e:52:4f:cf:de:73:87:1d:49:
95:dd:7a:48:3d:85:48:31:4c:ac:08:28:52:db:62:1b:1d:87:
9b:f8:da:c0:50:9d:ee:25:1a:79:8a:71:a7:b2:96:c1:2c:aa:
e4:cf:13:01:c7:73:55:b9:00:d4:84:2e:36:b7:65:40:e4:2d:
69:dc:fa:27:80:a2:61:4a:1e:12:f1:d9:16:b8:fd:46:6a:e0:
76:11:98:65:e1:f7:d8:d0:a6:ee:87:dd:34:cc:ae:56:7b:57:
ec:a8:63:04:ee:21:c4:92:56:ad:7c:2d:2b:4b:df:14:a5:a4:
c2:72:dd:a9:07:63:d2:8a:17:bb:68:fa:3c:36:ad:b4:da:df:
b6:2d:35:44:9e:60:a4:66:af:13:13:e9:ce:f6:5b:4c:15:3e:
4a:5c:0d:11:f1:b3:27:00:aa:2d:85:04:e3:9c:24:bd:8f:77:
e2:06:22:f0:5b:ae:3b:8b:55:30:79:1a:5f:4d:66:19:e7:07:
e2:80:0e:07:dd:f1:0c:85:c4:23:ee:36:65:1f:07:11:44:9c:
1d:73:0c:10:6b:ba:4c:ba:04:17:c6:de:9b:80:ad:f0:2f:60:
bc:dd:b1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:00:15 2025 by rpki-client