Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
File: xsfkNpOlMtPW70EYbXDXpsVfut4.mft (raw, json)
Hash identifier: Yna9fMpi18xc6DMOq/G3pBSt6U2+Kn19qpHrvXzrwTY=
Subject key identifier: A2:81:86:14:0E:C3:52:47:A3:BB:1D:62:1B:C4:8F:3A:AF:CF:4C:6B
Authority key identifier: C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
Certificate issuer: /CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Certificate serial: 01962D866BDF0E40C3ED85A5B69EB602BBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
Manifest number: 1077
Signing time: Sun 13 Apr 2025 05:01:45 +0000
Manifest this update: Sun 13 Apr 2025 05:01:45 +0000
Manifest next update: Mon 14 Apr 2025 05:01:45 +0000
Files and hashes: 1: xsfkNpOlMtPW70EYbXDXpsVfut4.crl (hash: QtPKOlT450UnHXUqp5ibQUJ1qH/ntaOUbtgu2XrzBbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:86:6b:df:0e:40:c3:ed:85:a5:b6:9e:b6:02:bb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Validity
Not Before: Apr 13 05:01:45 2025 GMT
Not After : Apr 14 05:01:45 2025 GMT
Subject: CN=a28186140ec35247a3bb1d621bc48f3aafcf4c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:a9:5e:7a:c4:f9:23:5e:41:0e:f2:dc:b1:
1f:94:74:71:36:a1:83:11:48:78:9e:9e:bc:c1:ea:
9a:75:b4:f7:d9:48:a0:a4:55:20:fb:8d:27:d8:15:
c5:88:52:ee:4e:ea:44:6c:3a:af:74:6b:1d:35:c1:
fa:ff:8a:aa:8f:bd:7b:4d:9a:8d:79:32:3a:c2:aa:
93:65:bf:0b:93:0b:0e:a2:55:bb:23:35:c2:a7:99:
88:93:b1:89:d8:40:e7:e4:97:3f:50:7d:c1:2d:38:
c3:1c:9e:5b:4a:a1:ea:2c:0c:03:1c:f6:94:0c:20:
4f:75:70:fa:34:b0:16:69:37:b3:53:23:c0:89:d6:
9b:15:59:9f:87:a4:cd:c0:af:a8:f3:54:31:02:45:
7c:83:1c:2d:7f:6c:65:19:67:61:0f:d1:50:44:42:
9c:9c:f2:43:85:29:e0:98:79:2a:5e:24:1d:16:fe:
80:8b:02:a1:ca:26:df:e8:0e:6c:51:35:f3:e4:8e:
23:aa:85:9a:5a:bc:ee:77:b5:c0:be:69:f3:4c:c5:
2c:e8:ab:97:78:84:57:40:d3:7f:e0:12:03:c9:5a:
7a:17:d1:d8:78:12:c0:38:d7:bd:69:88:5e:c5:9a:
ee:25:bc:69:e5:58:8f:73:9f:0b:ce:ae:c4:a6:9a:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:81:86:14:0E:C3:52:47:A3:BB:1D:62:1B:C4:8F:3A:AF:CF:4C:6B
X509v3 Authority Key Identifier:
keyid:C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b6:8e:da:5e:41:f7:92:bb:7b:19:06:d1:1d:bc:7d:41:cc:
c5:86:6c:4b:cf:e0:86:70:bf:ab:3e:66:7f:29:12:3f:7d:4c:
2c:03:fd:b3:be:7c:38:81:fa:a5:55:71:1e:8b:9b:86:8f:7d:
2e:6c:83:6b:e0:1a:11:fd:ee:1f:ff:9f:e0:cc:bb:1f:4e:bb:
02:45:31:d2:d9:be:2c:d7:fe:2f:d9:66:a5:b5:20:5e:ae:b0:
e6:7c:d7:7f:b7:c2:45:8e:1d:dd:43:0e:d6:d2:58:ef:31:c5:
11:04:8f:09:31:fe:c4:af:47:42:65:90:26:53:2c:b8:01:ac:
03:95:cd:79:cf:d8:06:14:22:b3:4c:3f:c5:aa:5c:44:c9:a0:
0e:7e:bd:21:2e:f0:5e:ee:17:13:7d:00:7a:34:a1:fc:b3:9d:
80:97:03:6f:99:97:97:e5:42:d2:fd:b3:bb:c6:1a:06:d1:15:
77:0e:6d:0e:69:a1:9d:8d:c5:6f:69:a1:f1:00:28:e7:a2:0d:
8b:57:77:14:10:ba:38:2c:d9:6d:95:89:fb:62:e5:cf:a9:d3:
a7:67:1f:51:51:4f:78:8e:dd:60:50:ed:14:da:13:91:a7:19:
8a:04:52:4d:b2:3c:51:d0:23:b1:db:22:a1:78:d5:ae:3a:22:
72:8f:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:22:28 2025 by rpki-client