Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
File: XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft (raw, json)
Hash identifier: BR9fEQwVuYmF8YI9x09/ZEF9Ixvrw6G5CzP1RcmSPOM=
Subject key identifier: 7C:57:6F:AE:91:AA:33:0C:B2:7F:B1:3C:5E:ED:46:84:DB:92:E7:DC
Authority key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
Certificate issuer: /CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Certificate serial: 019659149E38C794045FD9F2C5A4CD98FC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
Manifest number: 090C
Signing time: Mon 21 Apr 2025 16:00:45 +0000
Manifest this update: Mon 21 Apr 2025 16:00:45 +0000
Manifest next update: Tue 22 Apr 2025 16:00:45 +0000
Files and hashes: 1: XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl (hash: 4RGuKt/Zijkndl00NpOLYMka9Q/yO96vVhGIaSUp5f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:9e:38:c7:94:04:5f:d9:f2:c5:a4:cd:98:fc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55
Validity
Not Before: Apr 21 16:00:45 2025 GMT
Not After : Apr 22 16:00:45 2025 GMT
Subject: CN=7c576fae91aa330cb27fb13c5eed4684db92e7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:45:0b:80:df:df:4e:b8:f6:66:45:35:f8:
ba:80:26:fd:e8:af:3b:cb:1d:73:37:c7:0f:29:7d:
91:19:0a:34:df:1c:31:e4:2c:a9:92:52:bb:b1:e4:
1b:de:14:3a:60:68:c0:8e:44:f4:8b:96:61:cd:96:
e4:ad:74:d0:a4:8d:1a:73:3b:fb:a4:1b:89:22:9e:
01:bf:1f:5b:f9:90:00:a2:93:13:d1:bc:05:a7:3f:
55:a3:c1:9b:5b:da:c0:3c:fb:84:78:fd:d3:14:48:
b4:76:53:05:23:94:89:06:d6:47:86:0a:76:ca:04:
22:14:fa:7e:be:e0:23:a0:60:6b:d3:a0:18:e8:55:
23:47:f1:43:04:76:17:86:80:16:fb:a4:1f:28:58:
69:6c:29:cb:13:d3:7e:68:8a:50:f8:c8:6a:fd:3b:
e3:a3:d3:6c:ce:9b:0b:b5:ec:34:0d:90:3e:0e:7e:
e6:72:4c:ed:8e:75:9a:17:5b:9f:96:f9:cc:dd:10:
e6:49:b7:15:03:9a:fd:bb:40:d0:06:7a:54:97:81:
e4:55:a0:a4:c0:b7:ee:4d:3a:cd:e0:d7:20:99:11:
62:40:bf:7e:f9:7f:05:96:7b:6c:65:45:d7:35:27:
74:9a:9b:ed:80:e7:65:bf:46:92:9f:6e:80:d3:89:
56:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:57:6F:AE:91:AA:33:0C:B2:7F:B1:3C:5E:ED:46:84:DB:92:E7:DC
X509v3 Authority Key Identifier:
keyid:5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:33:bf:a2:93:37:23:7b:74:bb:8f:6d:01:1c:ac:d0:08:75:
03:85:80:38:bc:f4:9a:da:e4:8e:60:1d:6a:0c:7b:b9:d8:a3:
75:4a:48:73:9e:3e:dd:60:70:ae:d8:1a:fb:f0:7f:b8:bc:05:
a9:74:08:91:79:2c:cc:59:04:d0:42:4a:07:9f:b4:bc:c7:86:
30:f9:fa:78:f4:06:50:1b:00:f7:5a:43:ff:52:b1:39:b9:06:
2d:5d:43:3f:f7:54:ae:e7:02:c7:46:2d:aa:b5:6f:a4:79:6a:
a1:a8:fe:06:df:a0:f0:bb:e4:9e:94:3b:d1:e3:57:eb:52:1f:
91:cb:ce:ef:a3:ca:0c:87:09:ef:fd:b7:8a:22:b4:c3:b9:c8:
67:7a:41:f4:33:d0:61:8b:97:c9:2e:0a:30:bc:18:85:b9:d4:
61:fc:86:9b:7c:27:b1:22:e6:64:27:6a:6c:d2:24:8d:7d:73:
0e:6b:3f:3e:f7:72:b5:5e:4c:79:ef:2b:88:5a:d9:b4:c4:60:
6b:f5:d5:eb:2c:63:ba:b2:84:7a:e7:b1:31:07:c7:f6:40:33:
2f:3a:00:00:31:f1:a1:35:cd:43:e1:1a:cf:5d:73:22:e0:4e:
68:49:ae:26:bb:fa:fc:e8:50:f2:60:f4:1a:e9:c1:e5:95:0b:
69:98:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:14:11 2025 by rpki-client