Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
File: xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft (raw, json)
Hash identifier: j5K6jNJOrXwIo0k3k6Ty+yuS79G2Nb6Rx3Q6rmGrM+k=
Subject key identifier: 46:96:D3:DC:A5:F4:CA:C4:40:BA:EB:D1:D1:2F:FC:1E:EE:92:DD:AB
Authority key identifier: C5:99:38:89:B7:34:01:8D:B7:50:94:5B:FB:45:67:FD:AD:86:C4:98
Certificate issuer: /CN=c5993889b734018db750945bfb4567fdad86c498
Certificate serial: 01957910650A70D5822DE0282410A8A6949A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZk4ibc0AY23UJRb-0Vn_a2GxJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
Manifest number: 1048
Signing time: Sun 09 Mar 2025 04:01:12 +0000
Manifest this update: Sun 09 Mar 2025 04:01:12 +0000
Manifest next update: Mon 10 Mar 2025 04:01:12 +0000
Files and hashes: 1: xZk4ibc0AY23UJRb-0Vn_a2GxJg.crl (hash: kz/gLZKZsqLBmTLPIyZxFvtpTFQHCPRHIe2tavgcCO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZk4ibc0AY23UJRb-0Vn_a2GxJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:10:65:0a:70:d5:82:2d:e0:28:24:10:a8:a6:94:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5993889b734018db750945bfb4567fdad86c498
Validity
Not Before: Mar 9 04:01:12 2025 GMT
Not After : Mar 10 04:01:12 2025 GMT
Subject: CN=4696d3dca5f4cac440baebd1d12ffc1eee92ddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:c8:8b:3c:6d:af:5e:ba:4a:6d:eb:fc:d8:
76:b6:60:64:52:fd:d7:cb:5a:8b:6d:3a:76:fe:9f:
4d:f2:3b:fa:a2:98:05:19:e6:39:53:b7:ef:e2:1a:
75:4c:20:5e:99:6d:62:66:41:87:d2:ad:9c:22:ec:
65:c2:29:47:79:20:66:11:37:f6:f2:26:b4:cc:8f:
a8:92:0a:75:e2:b6:48:c3:83:ca:36:f1:24:cd:f1:
c0:c2:7a:1a:b3:00:de:15:80:95:5e:18:a2:0f:a9:
e7:8f:0b:2a:1f:0f:86:6f:73:3a:ff:f2:b3:0d:93:
1c:20:3d:71:4a:2c:82:6b:19:51:4d:f7:92:92:d0:
3c:e6:b1:45:7b:8a:66:d6:64:ab:89:3d:36:51:bf:
ac:5b:4d:3a:f8:d1:f0:7b:f8:6f:db:74:a7:b1:90:
58:c4:43:a7:ae:44:b5:ff:31:39:96:3f:c3:2f:58:
ce:7d:6f:a2:4b:93:45:29:6d:aa:20:cc:7b:8e:b4:
23:17:7e:37:92:a4:9a:41:14:82:d8:9c:67:f7:ed:
05:cd:2c:a3:0d:bf:98:da:31:ea:ba:d6:3d:b7:95:
27:0e:41:ae:6e:70:d9:5a:66:6c:1e:de:d6:c4:c7:
d8:c2:73:b7:2c:c9:ab:58:0f:81:f4:ab:ba:4f:d3:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:96:D3:DC:A5:F4:CA:C4:40:BA:EB:D1:D1:2F:FC:1E:EE:92:DD:AB
X509v3 Authority Key Identifier:
keyid:C5:99:38:89:B7:34:01:8D:B7:50:94:5B:FB:45:67:FD:AD:86:C4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZk4ibc0AY23UJRb-0Vn_a2GxJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/119fe2-a991-40e4-a75a-f4c0871d9dcc/1/xZk4ibc0AY23UJRb-0Vn_a2GxJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fc:75:d2:49:46:e0:5c:31:92:af:d6:de:e8:01:2a:25:b4:
28:38:ab:74:11:93:fc:2e:5a:42:0a:ea:1c:47:92:0d:3c:d2:
21:0c:05:74:96:6b:26:35:0e:9b:76:68:7c:31:b1:18:41:94:
4e:3c:fa:cb:c3:38:48:b0:46:5f:95:ab:11:74:83:09:cc:45:
ae:d9:d0:e5:d0:ce:ea:07:ab:80:84:ad:9b:b4:4b:05:bb:9e:
92:97:b0:79:7f:ae:8c:23:ff:be:ca:cb:71:7c:7c:9e:b4:e5:
bd:ba:22:8e:4d:3c:3c:ac:b4:89:b8:c1:9b:13:63:f8:ca:1a:
ec:5e:d8:b7:e9:a5:95:77:99:0c:e8:67:e6:eb:0d:5c:9a:59:
3c:e2:28:4f:54:11:cf:f7:68:f7:a4:14:24:d8:83:0a:1c:ad:
2a:fe:4e:ed:be:a4:f0:5a:3b:fc:69:64:73:c2:c5:e7:e9:82:
af:74:6b:5b:d8:44:44:15:e0:62:59:0f:ec:a2:3e:a3:ba:4e:
93:76:b0:ee:64:84:1f:0d:5f:57:d3:f7:e1:ff:f0:ab:86:c0:
b9:5a:2b:47:f8:e7:76:7a:83:c1:06:21:ba:6f:4a:c7:4c:eb:
36:d3:fb:bd:ef:c2:0f:38:2e:63:b1:fd:93:b0:cf:42:45:42:
ea:e8:2a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:35:20 2025 by rpki-client