Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
File: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft (raw, json)
Hash identifier: z37LGbJfek4rYUNPVdgZKHEbmMIaRcndU/kRboi/rsM=
Subject key identifier: 8E:D0:4D:71:44:75:2B:52:20:12:63:D4:81:66:44:92:83:B5:B5:07
Authority key identifier: 5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
Certificate issuer: /CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Certificate serial: 01965048A0CE9B02D85BAE1A4F48C36FFC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
Manifest number: 0908
Signing time: Sat 19 Apr 2025 23:00:59 +0000
Manifest this update: Sat 19 Apr 2025 23:00:59 +0000
Manifest next update: Sun 20 Apr 2025 23:00:59 +0000
Files and hashes: 1: XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl (hash: ehzeWRNQKZCnQ9Txig8qH4zKgqzVeut2Edv8Fv12jdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:a0:ce:9b:02:d8:5b:ae:1a:4f:48:c3:6f:fc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eecd203107a6e4c0962ed5ac41809e8c92fd6b7
Validity
Not Before: Apr 19 23:00:59 2025 GMT
Not After : Apr 20 23:00:59 2025 GMT
Subject: CN=8ed04d7144752b52201263d48166449283b5b507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:74:b6:56:7d:d7:66:39:30:ff:8b:a9:55:
6c:e6:28:84:a7:d4:e2:d0:21:2d:a8:c6:62:97:7a:
71:10:3f:6c:48:3b:74:d7:3e:44:88:58:1b:a8:62:
99:ef:25:d6:37:f2:8b:28:e2:f0:bd:1a:e7:fb:47:
b7:34:07:0c:81:7f:82:4e:e0:41:7b:f3:1e:79:77:
fb:16:bc:e8:d6:d5:1f:f3:c6:6a:78:cf:c6:00:37:
8b:62:22:97:0a:2b:21:c3:ac:a6:01:12:cc:19:ef:
ee:1a:1f:d7:1e:05:78:52:16:25:5e:3e:12:f1:c4:
c5:89:59:2a:ae:31:6d:72:24:e0:a7:c2:68:ec:45:
56:9c:c0:65:2b:72:61:96:ca:0e:d5:06:31:4d:18:
42:71:06:70:8b:2a:e9:7b:2e:40:40:66:43:49:bc:
cd:64:7d:8a:b1:49:f4:07:20:33:8d:b9:52:13:09:
0f:c8:d0:66:0d:4c:4d:13:86:b3:4e:4f:1f:94:8e:
02:df:63:96:be:94:fd:96:20:66:4d:7d:13:42:17:
a2:7b:15:fb:8a:4c:ff:f3:af:9e:a1:f8:ba:f6:d9:
d9:04:38:cf:81:98:21:82:73:a7:b8:30:0d:23:e5:
c0:79:4c:80:81:fe:12:f7:ca:3e:99:55:d3:03:54:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D0:4D:71:44:75:2B:52:20:12:63:D4:81:66:44:92:83:B5:B5:07
X509v3 Authority Key Identifier:
keyid:5E:EC:D2:03:10:7A:6E:4C:09:62:ED:5A:C4:18:09:E8:C9:2F:D6:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5310b5-b671-416f-bad2-517b95b1625c/1/XuzSAxB6bkwJYu1axBgJ6Mkv1rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4f:ec:0c:9d:d6:df:40:1e:64:ea:b3:9a:fa:ee:d0:d3:ca:
b6:87:9d:7c:0d:f9:41:c2:fd:d0:7b:5a:49:e4:20:9e:0b:f1:
6b:19:6f:61:9a:50:9b:70:18:6b:a6:3f:d4:4f:e1:f4:3c:50:
54:ba:0d:31:fb:62:27:8c:34:9f:e1:97:6b:c9:54:88:c3:0a:
51:da:9c:c7:3a:6c:14:41:81:30:3a:fc:9a:44:65:de:24:d9:
29:a4:cc:85:f8:c4:01:e5:ce:2d:05:d3:e4:06:e2:e0:a6:d5:
86:44:73:29:7b:54:d9:41:f0:c5:0f:b8:ec:26:26:2c:e1:08:
e4:58:65:5b:61:8a:21:e6:83:71:89:87:4c:a2:91:2a:4c:76:
64:4a:42:28:bc:f9:50:dc:f3:c4:21:3a:07:65:97:f1:97:41:
e5:fb:c9:77:0d:e6:71:ae:4a:18:ff:35:23:47:94:26:59:88:
ac:c1:2a:57:f9:30:d6:af:ae:a3:e1:28:f5:86:8d:b7:37:8f:
d2:b5:63:84:11:13:69:35:27:76:08:17:a6:0c:5a:b2:7e:f2:
c5:f0:b8:10:56:0d:bd:65:4a:f5:35:0a:e4:9e:c0:1b:ca:37:
b4:27:8d:c2:16:c2:ff:11:70:21:2e:5b:c6:95:9e:f8:cb:f8:
e8:f0:0b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:06:23 2025 by rpki-client