Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
File: xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json)
Hash identifier: XmYUdoRCbhCNYd/5t0YCUkDyjLt0EkpWlVf1cFVn6q8=
Subject key identifier: BA:F1:E7:C5:54:8B:CE:F4:FE:FF:CB:7C:3C:91:6D:86:7D:97:08:CC
Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
Certificate issuer: /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Certificate serial: 01958B166485863C96154658B6491635AFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
Manifest number: 06A5
Signing time: Wed 12 Mar 2025 16:00:55 +0000
Manifest this update: Wed 12 Mar 2025 16:00:55 +0000
Manifest next update: Thu 13 Mar 2025 16:00:55 +0000
Files and hashes: 1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: /tJPJbOslbMxZ2WnHkefygZlV/9V+HNH9oOnwuS+IOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:64:85:86:3c:96:15:46:58:b6:49:16:35:af:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Validity
Not Before: Mar 12 16:00:55 2025 GMT
Not After : Mar 13 16:00:55 2025 GMT
Subject: CN=baf1e7c5548bcef4feffcb7c3c916d867d9708cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:3b:4e:ea:24:2a:09:8e:82:4f:1a:9b:a3:
9e:0e:94:aa:24:1a:92:6e:32:c2:37:7a:88:61:36:
fd:70:53:29:11:3e:fe:51:40:4c:99:f1:70:5e:b1:
b6:95:d3:ed:1d:4f:7e:57:38:b7:c9:58:db:91:e1:
0e:e8:42:00:4d:b0:9c:27:0b:47:3e:2b:c8:5b:00:
02:7c:21:3a:87:04:f0:9c:dd:55:e1:ec:14:16:4b:
2f:36:c2:83:0c:d2:49:10:9f:51:c6:33:08:8d:55:
85:8f:9f:02:9c:7f:dd:42:78:cd:93:5a:d0:47:b9:
f0:4a:4a:36:24:a2:38:44:fa:b3:05:a1:54:b3:d1:
50:73:9d:70:a6:53:c2:d8:e4:bf:e4:b6:d7:c2:aa:
6b:1a:e7:8b:4c:de:3f:c4:4e:b7:40:bc:8c:d8:be:
d6:a9:b4:2b:fe:b2:61:df:97:ec:27:59:1e:17:9d:
d7:88:dd:b5:55:6c:81:7e:30:18:67:cc:f5:00:d0:
f8:8d:99:fa:d1:b7:06:41:99:e1:74:70:b8:3d:60:
a8:61:88:4c:17:80:8e:03:cd:b3:26:b2:51:67:a8:
ce:af:f3:dc:6a:75:84:80:03:67:e5:2c:82:13:b4:
d5:06:88:9f:d1:79:6b:ca:8b:12:a1:1d:f9:4a:31:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F1:E7:C5:54:8B:CE:F4:FE:FF:CB:7C:3C:91:6D:86:7D:97:08:CC
X509v3 Authority Key Identifier:
keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b1:77:c9:ff:97:dd:77:b9:e0:86:ff:94:0c:db:28:e4:a7:
5d:a9:03:1c:80:dc:9d:8c:4b:71:cd:d2:9f:54:1b:27:00:35:
cb:35:1f:90:1e:70:18:3a:43:58:bd:32:b1:f6:0e:b2:12:7f:
09:7a:29:98:fd:b4:76:24:e6:12:39:fc:7e:b3:1e:4e:a7:37:
5d:10:67:f5:8c:2d:bd:80:41:1d:50:78:13:97:d1:40:c0:6a:
ca:39:9e:48:f6:dd:46:0e:ed:da:04:7a:3d:c0:1b:63:65:a4:
a7:b3:b7:2b:7f:24:b7:a1:4a:34:d7:38:11:18:32:c6:c0:f7:
e8:b6:73:f2:ee:16:15:29:a0:5d:ce:18:78:00:08:d0:54:5f:
3b:d1:0d:71:b3:fd:67:3d:04:d6:5e:c7:ab:65:1f:80:1d:2d:
62:ad:ae:7b:3c:2e:43:6f:4e:9e:a5:1f:7f:bc:5e:f8:fa:45:
89:92:fc:7d:73:ab:d8:58:ed:37:1a:d9:8d:fe:7b:4a:39:00:
4c:c4:9a:00:1f:6d:7a:79:95:35:22:5a:f9:fd:c1:aa:19:f6:
f9:a0:0b:0a:fd:dd:b4:8d:88:21:84:dd:54:9c:b4:65:58:f0:
3d:63:36:ee:61:d6:fa:2b:53:7f:91:62:e0:49:a1:b9:10:ae:
c5:f2:6a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:00 2025 by rpki-client