Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json)
Hash identifier: 7qf30t8NDE4042pKiS7nPFrjdv7/MDMEXxP/L3HsEzE=
Subject key identifier: 98:54:D9:7C:59:51:E7:2D:3B:12:62:D0:4A:FB:62:20:FE:7D:42:29
Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be
Certificate serial: 0196138F502D87710BF9AB8473F56B8CE44A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
Manifest number: 14D9
Signing time: Tue 08 Apr 2025 04:01:21 +0000
Manifest this update: Tue 08 Apr 2025 04:01:21 +0000
Manifest next update: Wed 09 Apr 2025 04:01:21 +0000
Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: efGb9DI07+sZ25+EXs6anUNzsi3p3NRYw9XqJHKooFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:50:2d:87:71:0b:f9:ab:84:73:f5:6b:8c:e4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be
Validity
Not Before: Apr 8 04:01:21 2025 GMT
Not After : Apr 9 04:01:21 2025 GMT
Subject: CN=9854d97c5951e72d3b1262d04afb6220fe7d4229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:77:ec:05:9b:a2:1f:86:87:93:ee:d3:5c:db:
1b:66:a8:0b:a9:d1:ab:93:89:99:c7:d1:44:a6:ec:
53:27:c5:d3:15:28:05:3d:47:dc:17:c5:1d:8b:44:
86:4b:cb:09:83:25:52:40:e3:3f:22:90:12:ef:cd:
46:8f:68:9b:ca:11:68:ff:7c:1f:4d:00:45:a1:b1:
62:53:c0:84:12:ce:87:52:26:ea:bf:fc:ed:49:8b:
9b:75:33:56:ba:73:3e:4b:1d:cd:3b:d5:68:45:3b:
a0:49:ba:ff:35:4d:77:b2:48:8c:91:9a:84:48:eb:
76:6b:05:26:92:5f:f8:cc:d3:c0:4e:4b:19:1d:6e:
af:25:4b:60:3d:40:bd:81:32:d1:d6:c0:6b:12:9b:
2e:23:91:9b:98:18:1c:e4:23:ae:57:0f:8b:a1:c0:
64:ac:4b:2b:7b:df:85:0f:63:e9:df:8d:ed:d1:82:
c9:ec:18:71:c9:94:24:74:c4:27:88:4f:00:fb:09:
12:79:68:f6:c9:d4:bf:4f:fb:61:4d:8c:d5:2e:da:
70:62:11:e1:cf:17:d2:ea:04:a7:bb:25:d4:8d:7a:
3b:f7:47:c7:52:9b:8d:0e:cf:6f:e1:0b:48:d2:bf:
97:fb:34:6d:c5:7d:16:aa:1d:df:e5:b2:3c:ff:ae:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:54:D9:7C:59:51:E7:2D:3B:12:62:D0:4A:FB:62:20:FE:7D:42:29
X509v3 Authority Key Identifier:
keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e8:75:b1:6b:42:70:34:0c:ba:17:76:3a:03:f1:d7:57:24:
63:74:94:a0:25:db:00:ef:c1:07:7c:98:f8:ac:22:af:2f:03:
fe:66:34:29:6d:92:da:3d:de:0b:44:58:d6:ef:87:4b:e5:ac:
ce:d0:eb:7b:07:a3:0d:0e:58:88:e8:7f:d0:ca:5e:f4:57:4d:
ff:f9:8f:81:2d:cf:3c:19:e0:ae:52:4c:c2:92:55:14:34:39:
f2:a7:bf:d3:4e:bb:53:e3:e7:91:0d:34:f0:dd:d2:ad:e8:cc:
6a:66:04:66:ae:95:fa:f5:3c:c9:b8:b4:3d:6b:c7:fe:68:de:
07:f4:d5:c2:7f:36:38:c4:ec:fd:6c:ff:6d:02:9c:df:7b:d9:
8a:9a:de:d4:c5:ea:0f:ad:6a:f4:ca:92:46:92:6b:66:1b:35:
4f:ef:ae:4f:10:82:57:12:df:f3:fd:ce:85:b0:d3:21:2d:54:
f6:c9:41:68:ba:9b:4f:5f:e2:60:7b:7f:da:1c:15:7b:1f:c2:
52:e9:65:9b:4a:8e:c8:fa:e3:76:c4:67:34:67:c7:09:24:e3:
cd:77:cd:cf:e6:81:4e:87:93:8f:04:5e:48:57:9a:eb:9a:6e:
a9:51:67:af:ca:57:d8:87:df:c5:77:d6:42:1f:b7:07:34:7b:
63:27:eb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:07:25 2025 by rpki-client