Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
File: xQkxs_iAn_sx6V_THf8pd6xAgHk.mft (raw, json)
Hash identifier: Eytx4bxBD2ZcIWsGBqsQczdrnAEODzE587XQF9GOENE=
Subject key identifier: 65:3A:54:A0:94:CB:D1:41:A0:01:48:79:C5:A5:BE:D6:D3:A9:18:62
Authority key identifier: C5:09:31:B3:F8:80:9F:FB:31:E9:5F:D3:1D:FF:29:77:AC:40:80:79
Certificate issuer: /CN=c50931b3f8809ffb31e95fd31dff2977ac408079
Certificate serial: 0196C6BAD05F405EC4BD3CD0D16EABF18E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
Manifest number: 040F
Signing time: Mon 12 May 2025 23:00:53 +0000
Manifest this update: Mon 12 May 2025 23:00:53 +0000
Manifest next update: Tue 13 May 2025 23:00:53 +0000
Files and hashes: 1: xQkxs_iAn_sx6V_THf8pd6xAgHk.crl (hash: Dw9yxkLyvWdlTkgiHLJBwL4LA0nnDYTrwnHF3sq86DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:ba:d0:5f:40:5e:c4:bd:3c:d0:d1:6e:ab:f1:8e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50931b3f8809ffb31e95fd31dff2977ac408079
Validity
Not Before: May 12 23:00:53 2025 GMT
Not After : May 13 23:00:53 2025 GMT
Subject: CN=653a54a094cbd141a0014879c5a5bed6d3a91862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:32:99:bd:57:4b:cc:4f:74:8a:2e:be:4b:
c1:24:67:4a:60:77:c6:56:1c:80:3b:5a:75:23:66:
ec:78:06:4c:63:39:3c:75:56:a2:d9:1f:5d:72:42:
3d:60:b6:9e:fb:79:6d:a2:b2:61:ac:7e:6c:74:dc:
4f:41:88:de:5b:ad:b8:ee:aa:34:08:09:fc:f0:41:
71:8a:45:5d:94:b5:df:1d:9b:68:92:11:d4:cc:37:
3e:c1:5c:32:65:21:d4:80:f8:3c:07:29:9d:94:b1:
44:00:a2:3c:c6:8c:f1:3d:5a:b9:a0:e7:6c:c0:5d:
52:1a:1d:b5:f3:61:f0:70:df:15:ca:12:58:48:a3:
d4:c5:f2:db:12:d9:e9:c4:dc:6e:bf:f4:85:0c:28:
80:d5:65:fa:4d:df:7b:74:c6:92:d8:50:4e:d3:3a:
ab:ad:6a:ef:49:91:83:0a:fc:89:a3:9b:c4:cc:46:
de:52:01:38:63:d4:d8:93:c6:5a:43:b5:0f:c3:2e:
d0:44:4a:49:e6:6a:92:b0:a5:d3:27:02:0a:09:c2:
63:29:f4:85:30:7d:ee:ed:bb:bf:46:8d:b9:30:e3:
27:41:c1:cc:48:8d:be:1b:75:b7:13:e9:56:b8:8c:
fa:5d:72:42:c4:08:35:b1:24:c8:de:e7:13:5b:4d:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3A:54:A0:94:CB:D1:41:A0:01:48:79:C5:A5:BE:D6:D3:A9:18:62
X509v3 Authority Key Identifier:
keyid:C5:09:31:B3:F8:80:9F:FB:31:E9:5F:D3:1D:FF:29:77:AC:40:80:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQkxs_iAn_sx6V_THf8pd6xAgHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3b9bea-3323-47c8-940a-edd7f90c1140/1/xQkxs_iAn_sx6V_THf8pd6xAgHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5c:fc:18:cb:6e:1d:38:aa:32:5d:81:99:6e:b7:cf:01:0f:
5d:3a:19:8f:8b:10:65:e0:8b:fb:eb:5f:ed:1c:c5:f5:b9:1e:
62:ca:ed:be:ae:ec:c1:ee:a3:ae:2c:8e:32:a2:17:b3:46:7b:
a8:78:b0:e6:f6:dc:1b:f5:7d:ac:11:1f:91:6a:9b:a4:48:95:
66:05:1d:6a:3c:07:27:fc:c7:59:46:78:ca:be:1e:e8:bb:db:
59:67:13:c0:8c:77:01:f8:f3:8c:80:8a:db:22:bf:a4:2c:dc:
31:5d:9f:24:9d:80:41:b7:b5:d6:32:84:da:2c:04:d0:07:d7:
4a:e2:f3:36:b9:23:de:2d:23:a7:63:b3:41:bb:b3:f0:bf:53:
f1:86:33:d0:b0:68:a1:7a:b9:46:da:47:7f:80:b0:d3:42:e6:
76:fe:de:71:3a:35:fc:b6:77:2f:a3:47:d4:f4:50:0b:f3:22:
43:b8:18:d4:07:84:4d:a7:8c:7d:e5:b2:8e:80:9e:a5:c2:a0:
5f:f5:2b:ce:f6:ed:8a:c4:7e:6d:ea:66:a4:97:c3:c3:7f:a2:
fd:37:09:83:ed:45:3c:75:f2:97:08:5b:d3:82:a9:14:7c:b0:
b6:46:ea:04:a6:1b:cd:42:36:89:79:28:1a:23:81:bc:b0:b2:
f2:65:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:25:31 2025 by rpki-client