Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
File: XtXKWxx3mVWyVz2isQzXxZH57hs.mft (raw, json)
Hash identifier: a6kFez3AiVfeCzKusL2ByWk4dRBu3sCWIzVktuIcf3c=
Subject key identifier: 29:EE:A8:13:FD:EA:E9:95:FF:AB:9B:23:E3:E7:23:00:52:3F:48:C1
Authority key identifier: 5E:D5:CA:5B:1C:77:99:55:B2:57:3D:A2:B1:0C:D7:C5:91:F9:EE:1B
Certificate issuer: /CN=5ed5ca5b1c779955b2573da2b10cd7c591f9ee1b
Certificate serial: 01965EDFC2167EC7661BE46F7B2189F232C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
Manifest number: 0A44
Signing time: Tue 22 Apr 2025 19:00:44 +0000
Manifest this update: Tue 22 Apr 2025 19:00:44 +0000
Manifest next update: Wed 23 Apr 2025 19:00:44 +0000
Files and hashes: 1: XtXKWxx3mVWyVz2isQzXxZH57hs.crl (hash: BBnNSf+ecpGtVSyqB5r74h/EptQPhlEgjQgUp4Ta6Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:c2:16:7e:c7:66:1b:e4:6f:7b:21:89:f2:32:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed5ca5b1c779955b2573da2b10cd7c591f9ee1b
Validity
Not Before: Apr 22 19:00:44 2025 GMT
Not After : Apr 23 19:00:44 2025 GMT
Subject: CN=29eea813fdeae995ffab9b23e3e72300523f48c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:8d:c4:91:35:35:14:ae:8d:e4:ef:36:70:
5a:1b:3a:9b:4c:3e:4c:78:07:db:da:a6:89:b6:34:
fb:14:9f:d5:e9:d0:d6:31:c6:ba:f5:7b:a5:b6:81:
ba:9d:5b:fc:22:a1:2b:de:e2:e0:75:5f:d1:93:9b:
5e:ab:68:4f:19:63:6c:dd:c4:a4:3a:64:e3:a4:21:
60:fa:56:2f:d2:3a:1d:65:c0:da:ee:be:c8:27:73:
c6:4a:80:56:52:64:a1:77:19:0a:f0:bb:21:02:16:
59:6c:23:52:4e:96:dd:cc:d1:4d:c2:a3:ba:ea:74:
5f:2e:92:7d:c2:24:32:57:8d:b5:f7:47:1b:d9:76:
4b:77:6f:41:20:9e:ce:06:80:4c:e9:96:b6:0b:e4:
6c:14:d9:cd:f0:44:ac:4c:7c:22:1c:98:05:eb:a6:
c2:5e:88:b3:42:01:e9:03:e5:62:84:18:f9:5e:e3:
d4:74:65:94:1c:95:a7:fa:f5:2a:da:6f:3b:66:d0:
a3:66:0e:d8:ad:57:78:26:c7:6f:20:ee:dc:bf:cf:
32:21:9b:f8:6a:10:78:60:1a:fe:ac:ed:b0:8a:10:
8d:32:4e:d1:95:46:c1:38:f3:1f:45:35:54:d4:60:
94:54:6a:d4:5f:31:32:a2:f7:f2:e1:f3:41:5d:fa:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EE:A8:13:FD:EA:E9:95:FF:AB:9B:23:E3:E7:23:00:52:3F:48:C1
X509v3 Authority Key Identifier:
keyid:5E:D5:CA:5B:1C:77:99:55:B2:57:3D:A2:B1:0C:D7:C5:91:F9:EE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtXKWxx3mVWyVz2isQzXxZH57hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/fc2ea6-728d-4e85-8d0b-b48f184f6def/1/XtXKWxx3mVWyVz2isQzXxZH57hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:08:7d:95:a6:23:a8:6a:6c:97:ea:e0:8e:1c:da:85:37:1a:
b0:88:20:59:09:d7:14:01:82:ba:0b:fb:30:2b:cb:82:fc:8e:
50:b9:a8:9c:48:0f:20:06:cb:cf:f3:cd:34:70:ed:9d:66:00:
87:c2:d6:a6:cb:e0:bf:15:22:c3:af:d7:62:3b:de:9e:56:a9:
da:e6:f5:d5:39:39:64:51:f5:63:67:84:3f:27:ef:a5:56:b4:
a1:9a:29:b6:9f:37:cd:74:f9:4c:51:a5:3e:50:78:e8:a4:1d:
05:f5:04:b1:af:f6:aa:34:c2:13:5d:08:94:70:38:85:58:46:
53:a9:8f:cf:0b:dd:8f:9e:58:f1:39:74:1c:de:43:7b:7f:4f:
4c:5c:03:d8:28:1a:51:35:3e:8e:68:50:aa:b6:85:e3:4d:97:
fe:ce:50:74:fc:f4:db:74:c0:f1:f9:b5:b3:cc:58:21:72:5c:
33:ca:a5:e9:9d:ea:cd:90:39:3d:04:83:b5:29:c7:ad:70:0a:
d7:93:0c:a7:81:db:07:78:c9:28:3f:47:96:67:a5:d4:b0:75:
fd:75:75:18:79:5f:30:93:8e:25:59:35:1d:47:0f:47:4f:ee:
93:d8:1b:f6:3d:80:11:f9:35:18:6c:55:20:2f:3d:a6:4c:83:
34:0a:1b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:04:31 2025 by rpki-client