Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
File: XsApKzJbgsdEucIBMrg7M7Uv_5c.mft (raw, json)
Hash identifier: OgJudGgGHzxfwC+J1K7PYaa2icWaBamo6054jS19wsU=
Subject key identifier: 0A:19:7F:76:F8:25:0E:72:3F:F6:DC:28:72:55:D9:E7:69:51:D4:6A
Authority key identifier: 5E:C0:29:2B:32:5B:82:C7:44:B9:C2:01:32:B8:3B:33:B5:2F:FF:97
Certificate issuer: /CN=5ec0292b325b82c744b9c20132b83b33b52fff97
Certificate serial: 019651C8A019BA56DF82F9857ED6AA019147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
Manifest number: 03BD
Signing time: Sun 20 Apr 2025 06:00:24 +0000
Manifest this update: Sun 20 Apr 2025 06:00:24 +0000
Manifest next update: Mon 21 Apr 2025 06:00:24 +0000
Files and hashes: 1: XsApKzJbgsdEucIBMrg7M7Uv_5c.crl (hash: QhjDKgsyOZI/zgEi9VklIVFHQkSO/SUNEcefW0KxTxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:a0:19:ba:56:df:82:f9:85:7e:d6:aa:01:91:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec0292b325b82c744b9c20132b83b33b52fff97
Validity
Not Before: Apr 20 06:00:24 2025 GMT
Not After : Apr 21 06:00:24 2025 GMT
Subject: CN=0a197f76f8250e723ff6dc287255d9e76951d46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:8a:ab:33:ef:6e:1b:c8:15:cf:30:16:84:
7e:ff:ac:f2:fd:38:e8:30:5d:75:4e:fa:17:32:bb:
a0:32:6f:85:20:3a:4d:e9:f8:d2:cc:3e:db:4b:a2:
76:2c:c3:cc:76:d4:36:56:f5:89:f2:96:ea:41:dc:
37:2e:b4:5d:66:fa:af:ef:f1:24:c0:0b:5a:44:c6:
70:64:b5:f3:de:77:c8:48:d4:dd:9e:50:b7:a8:8d:
3c:3f:36:50:6c:44:a8:e5:c9:43:42:52:af:13:80:
90:f2:b6:92:67:14:66:ab:68:c0:c2:7e:ca:72:0e:
e6:84:0f:51:c2:19:cb:01:a0:33:02:30:65:14:15:
46:fd:5a:42:05:05:dc:c1:52:88:4a:0a:d5:1b:4a:
8e:02:ba:2b:b0:b6:fe:25:b5:20:a9:2b:c5:01:24:
34:54:dc:90:0b:bc:10:4b:16:1a:37:7e:23:57:ae:
10:10:be:05:8b:dd:63:5c:9d:1f:a2:fa:af:ef:18:
33:9e:9f:33:d5:7d:9f:96:9c:1d:d7:7e:3f:00:41:
0c:e4:ea:d1:64:3f:e9:ff:3d:93:59:2c:22:69:a8:
22:f5:29:8f:7c:50:d8:57:aa:e8:75:1a:c7:31:05:
f2:ca:e6:89:90:79:87:73:4d:68:65:6e:0e:fa:ca:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:19:7F:76:F8:25:0E:72:3F:F6:DC:28:72:55:D9:E7:69:51:D4:6A
X509v3 Authority Key Identifier:
keyid:5E:C0:29:2B:32:5B:82:C7:44:B9:C2:01:32:B8:3B:33:B5:2F:FF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsApKzJbgsdEucIBMrg7M7Uv_5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/15cbdc-3323-4713-9937-f91f67682d27/1/XsApKzJbgsdEucIBMrg7M7Uv_5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9f:68:04:65:ca:35:a6:0c:46:f6:db:3d:d8:8c:e6:f5:60:
08:49:d3:f8:19:47:82:be:82:91:44:2e:ff:84:80:54:4b:76:
1a:52:da:f8:4e:a6:ee:3e:fd:98:1a:7f:56:58:be:80:32:76:
83:5a:e9:e9:9b:5c:8a:d2:58:e4:30:87:b3:86:d5:9c:be:f9:
df:f8:fc:9e:68:20:15:32:cd:e2:2e:a8:49:f3:ed:70:59:f5:
7c:e0:22:ab:b9:ea:40:a8:52:d5:22:6a:92:f0:74:15:d3:c1:
dd:bb:1a:87:63:53:04:0b:42:ae:6e:78:cf:c4:bc:c9:56:86:
0d:33:86:69:59:cb:46:79:2c:27:f7:88:eb:c6:bd:e3:c7:53:
4a:f4:d1:d8:87:b3:87:87:bb:f8:af:8a:91:c5:b5:85:00:3c:
29:33:48:65:4a:ba:a6:bc:8c:1f:6c:2e:4c:3b:7f:35:41:ab:
2e:ea:3d:31:18:4b:ea:03:78:bd:5d:2f:83:37:64:70:e9:a8:
19:6d:33:fb:c3:fe:e5:fb:bc:48:9c:6d:4c:0d:f0:ef:98:94:
26:46:31:95:c4:77:d7:bf:94:28:4a:4d:9d:1b:a2:6f:70:36:
35:bc:96:de:7f:79:e4:92:09:d6:1b:4f:c5:06:65:bb:7f:0d:
bb:31:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:21 2025 by rpki-client