Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
File: XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json)
Hash identifier: xWvW4nXT3sJ3kNvJQSE+JfCWxsG+ugs5ktpEkb/U9rA=
Subject key identifier: CE:33:97:40:2D:A0:2F:2E:D9:1A:99:29:B6:8D:C7:43:D9:52:7F:8A
Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
Certificate issuer: /CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Certificate serial: 019579B4C54358ABD1555F7EBFDB935F2E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
Manifest number: 0264
Signing time: Sun 09 Mar 2025 07:00:44 +0000
Manifest this update: Sun 09 Mar 2025 07:00:44 +0000
Manifest next update: Mon 10 Mar 2025 07:00:44 +0000
Files and hashes: 1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: VmSnGx4VhzGYs6VfG3PWiotsP/c8Yev3VFNCfquqI4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:b4:c5:43:58:ab:d1:55:5f:7e:bf:db:93:5f:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Validity
Not Before: Mar 9 07:00:44 2025 GMT
Not After : Mar 10 07:00:44 2025 GMT
Subject: CN=ce3397402da02f2ed91a9929b68dc743d9527f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:37:f7:c8:5f:04:ca:a0:fc:21:16:55:2c:
dd:30:d5:ad:69:04:56:e9:1a:28:71:2c:9f:85:46:
10:51:bf:d6:f1:36:56:5b:71:9a:86:ed:05:bd:32:
aa:1e:e7:52:1e:33:b1:77:c1:d5:69:e3:05:ed:22:
54:9e:ce:e5:ed:c8:0e:d3:8c:c0:f0:8b:9f:eb:5c:
ee:9d:87:a8:2b:e8:bc:f5:ca:42:ad:8f:2f:8c:d6:
8b:c2:6f:09:d8:ab:d8:1a:c8:78:50:74:01:12:86:
6e:98:09:38:fa:18:40:fa:38:d9:ac:b3:93:56:c6:
ee:94:70:d2:e1:de:4e:58:a2:15:ad:d0:4e:7b:f6:
fe:cb:22:75:d8:96:56:76:44:3b:66:25:9d:b4:1e:
63:08:62:8e:68:22:e6:1c:c7:d7:e5:45:77:83:1d:
df:de:f8:2c:8e:6d:71:ee:84:71:b9:3e:3f:47:62:
67:0d:bf:4f:af:66:96:7a:f3:c0:ae:43:6f:a8:ef:
4c:17:c1:4a:49:0c:98:e8:9d:d3:5f:5b:c3:a2:46:
7f:a1:b9:56:2d:99:cd:6c:95:a7:7a:2c:f7:21:d7:
84:29:f4:b2:50:db:42:f4:62:d8:ac:1b:86:07:26:
26:85:68:61:7b:31:a7:8f:cd:e0:87:89:bb:08:2e:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:33:97:40:2D:A0:2F:2E:D9:1A:99:29:B6:8D:C7:43:D9:52:7F:8A
X509v3 Authority Key Identifier:
keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:63:ea:e3:78:a9:48:58:d1:c5:28:68:9e:6e:d7:49:54:1e:
10:b8:95:6e:cb:3f:96:7f:d2:38:e7:fe:0a:77:fc:87:c6:4a:
a5:09:7b:a0:c1:19:84:0d:4c:c3:e8:0c:3e:4d:a1:49:30:91:
bc:fa:95:fb:46:d8:e9:20:8a:23:cb:d6:be:89:b8:1b:ae:89:
ca:88:ad:9d:a9:97:37:2a:4a:e5:a7:ba:8f:86:39:e3:eb:88:
61:a4:b1:9e:e1:06:3d:5e:ee:e6:6c:d6:5d:19:58:8a:f0:99:
9d:76:ab:d9:ef:3e:05:47:ee:5c:d6:41:a8:d6:00:01:06:94:
89:9c:08:df:4f:b0:ff:f6:44:c4:89:40:52:2c:e1:1d:df:d7:
03:62:11:c2:59:4e:6a:51:2f:18:09:59:09:66:57:9f:68:ef:
a4:6c:2a:ce:b5:6f:cf:b7:fd:f4:21:cd:cc:00:44:2c:68:e2:
f4:46:66:68:3a:66:a0:85:53:f6:7f:df:98:a2:50:b2:f6:4b:
a2:4b:a1:e0:7f:65:96:90:a6:60:19:bc:a4:2d:44:c0:c8:7d:
a9:50:56:cd:f0:80:29:f4:4b:67:0b:cb:da:67:3a:11:95:d6:
2c:d6:74:5f:3e:9f:58:99:73:af:fe:14:9f:ce:b2:49:fa:c5:
b6:25:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:16:42 2025 by rpki-client