Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
File: Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft (raw, json)
Hash identifier: /t4FxfgYDz8yUxU/A44sRgT/0bav0A8HMvki9KzP6Kk=
Subject key identifier: AB:4D:9E:15:51:0F:B8:8C:02:E0:00:BE:59:7B:8A:28:16:43:98:7B
Authority key identifier: 5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
Certificate issuer: /CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Certificate serial: 01958EBC874F7E9DEE5EE1BB98DFBF65CD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
Manifest number: 07F6
Signing time: Thu 13 Mar 2025 09:01:14 +0000
Manifest this update: Thu 13 Mar 2025 09:01:14 +0000
Manifest next update: Fri 14 Mar 2025 09:01:14 +0000
Files and hashes: 1: Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl (hash: BmhDGGVxLOAwSd0g8toS89S745Igrn7099Kc7FE5mX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bc:87:4f:7e:9d:ee:5e:e1:bb:98:df:bf:65:cd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e
Validity
Not Before: Mar 13 09:01:14 2025 GMT
Not After : Mar 14 09:01:14 2025 GMT
Subject: CN=ab4d9e15510fb88c02e000be597b8a281643987b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:b3:e9:94:5e:f1:9b:a8:dd:78:c3:00:11:
9b:c7:38:df:b3:69:2e:5f:bf:29:15:de:ea:9c:a1:
32:e3:97:2e:c0:b3:f8:fd:47:85:94:1d:20:f1:27:
4f:c8:20:cb:90:1d:ce:75:8d:b7:9f:55:09:04:33:
20:2b:71:2a:97:be:67:7f:7c:83:02:a2:58:f8:58:
59:73:7e:bc:f8:a6:ce:50:a4:ad:ab:fb:aa:2d:20:
b1:0d:6d:f7:5e:1a:e8:57:e0:01:aa:4e:e5:8b:fe:
4a:62:bb:48:6e:29:30:53:ae:33:42:3f:6a:5f:f3:
f6:e0:64:96:49:f3:e2:c2:70:9e:f1:75:0b:0a:b7:
9d:73:bd:df:7c:1c:19:24:4d:23:e5:3a:2e:27:8c:
6a:e7:e3:33:06:18:25:f0:86:36:29:7b:10:a7:ca:
f4:26:7d:a0:8a:4f:1e:b7:0d:1e:cf:bb:e6:e8:5b:
ef:41:58:a1:94:5a:88:fa:98:94:59:fc:67:c9:7e:
80:e0:e5:36:4f:37:8d:18:f9:43:9c:9c:b1:0b:97:
6d:a1:a9:34:4d:4b:c5:81:07:35:20:cd:f8:0d:ad:
cd:49:15:9d:61:b4:c9:63:26:ae:10:1b:8a:ed:3b:
94:c2:0b:f2:55:aa:4e:3c:0f:36:9a:fa:99:93:97:
8e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4D:9E:15:51:0F:B8:8C:02:E0:00:BE:59:7B:8A:28:16:43:98:7B
X509v3 Authority Key Identifier:
keyid:5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bf:fc:2c:c0:43:a7:92:2e:4d:88:c5:9c:3d:e1:c0:c3:10:
7c:7f:cc:80:03:f3:87:89:82:b4:c8:02:75:92:b8:fd:67:fc:
99:b8:92:fd:5a:df:54:b2:92:93:a0:ae:ab:be:78:82:95:ce:
d5:9f:f6:2d:16:e8:9d:94:3a:86:39:3a:f4:32:78:07:e0:9b:
5d:be:84:d6:59:57:67:9f:9b:03:6b:cc:f1:90:82:ab:1f:bf:
b1:32:4e:80:73:67:76:d0:31:2f:3a:cd:0f:4f:50:e7:49:20:
fe:1b:7c:58:e1:88:6e:de:7a:18:1b:64:66:3f:99:e5:99:e6:
3d:63:51:37:93:1a:73:50:99:a5:61:69:f7:86:5c:2e:25:1d:
f0:da:d5:0d:6e:49:66:f8:33:6d:e6:ff:26:2b:23:2b:02:ee:
ce:88:ac:5d:89:6c:dc:87:e1:51:7d:d7:54:b7:b7:4d:b3:73:
33:1f:53:cf:05:28:1b:b2:1d:03:e2:15:b7:af:14:1b:f3:00:
74:12:18:c5:c8:5b:c2:f4:f1:7e:72:b8:44:f4:0b:57:4d:73:
9e:a8:10:3f:b0:e3:b2:95:7f:f5:b9:fd:c2:6a:ce:00:b7:e0:
0d:2d:38:7a:b7:25:ce:2c:05:d3:d5:76:5e:d7:99:ef:e4:0d:
64:1e:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:00:15 2025 by rpki-client