Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
File: xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json)
Hash identifier: JYbZFYkGRGg1kJVsm4z8+hFbtJfMfH/HwuSUZZ90osc=
Subject key identifier: 9C:7F:12:99:25:78:E6:80:40:CB:4B:E6:E9:82:46:0A:78:C0:16:3A
Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Certificate issuer: /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Certificate serial: 01964BC66D1CCDD23247113344BEEDE20640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
Manifest number: 04C8
Signing time: Sat 19 Apr 2025 02:00:17 +0000
Manifest this update: Sat 19 Apr 2025 02:00:17 +0000
Manifest next update: Sun 20 Apr 2025 02:00:17 +0000
Files and hashes: 1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: BNldyXkplgTBbl9lXSfOWhAde121w0gophc0goaT5sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:6d:1c:cd:d2:32:47:11:33:44:be:ed:e2:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Validity
Not Before: Apr 19 02:00:17 2025 GMT
Not After : Apr 20 02:00:17 2025 GMT
Subject: CN=9c7f12992578e68040cb4be6e982460a78c0163a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:2a:eb:6e:71:24:5b:80:14:36:4f:c7:de:
68:0e:fe:30:c0:5c:32:56:d1:39:94:b8:28:f1:7a:
be:b5:91:2a:83:38:01:1b:d1:67:ee:ab:07:bf:d9:
27:4c:36:ba:55:02:6a:16:da:ef:1a:98:88:f4:0c:
9d:84:1a:21:25:98:67:b2:0b:34:f1:18:2b:17:02:
7d:00:5a:f2:c9:d8:2b:22:8b:32:e7:ef:9a:47:3a:
c2:ab:bc:d6:3d:50:f3:82:55:7c:40:de:97:2b:f2:
2a:11:ea:98:94:d1:1b:ce:74:64:fa:08:26:d5:2c:
50:f3:d5:e8:e7:55:a6:89:22:49:fe:46:4f:15:c1:
c1:2d:5f:15:b2:41:44:35:24:ef:e8:f3:d2:4d:d6:
97:a0:70:75:46:86:45:54:86:3a:39:99:f4:b8:e1:
c1:03:98:f1:95:12:40:ad:77:a1:9b:66:b7:1a:64:
67:2e:a0:d1:93:26:53:ae:82:6e:0c:e1:ff:4e:e0:
e0:f2:2a:29:d6:e7:d9:44:6d:8f:ff:f7:68:e5:9a:
63:db:c6:9d:cb:8f:2c:1b:5e:50:10:ef:f2:2f:37:
ac:75:bc:ff:d0:1a:80:5f:d7:a6:48:b4:29:0b:15:
f8:fc:6f:a3:cd:33:c3:39:02:a8:c2:93:9f:fb:f5:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7F:12:99:25:78:E6:80:40:CB:4B:E6:E9:82:46:0A:78:C0:16:3A
X509v3 Authority Key Identifier:
keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:33:83:3c:dd:1d:db:de:98:9e:5a:a0:5c:5b:df:bc:69:07:
df:e9:f5:07:89:a4:20:02:25:71:b0:ed:6c:6b:a5:96:79:4a:
11:df:79:fc:6f:f5:64:79:b0:4d:9e:e6:15:ab:f4:78:5b:50:
07:85:d9:dc:a2:f2:99:e4:c3:d2:3a:5c:28:85:da:65:2d:64:
c4:e5:50:19:8f:e6:c5:c8:54:ae:0d:90:ec:6d:3d:c4:13:d1:
ad:73:65:ba:5d:f2:c4:4f:5b:bd:e4:81:78:13:df:0c:85:59:
9b:04:5e:fd:56:c2:2a:46:6e:60:fe:5e:2e:0a:57:e5:85:10:
41:eb:df:ca:fd:cb:97:cf:85:51:1c:e5:27:95:00:0b:54:38:
a9:d8:89:98:94:b9:3a:33:11:25:cb:3a:82:1c:eb:5c:83:a6:
49:8b:89:c3:62:a5:56:82:5d:6c:72:7b:6b:76:3e:d9:43:f0:
30:ba:6b:ce:8b:ff:86:25:f2:1f:89:13:30:1a:e7:e6:09:f1:
8e:66:83:99:85:3a:7c:88:36:46:e9:d7:44:ae:f9:f7:36:c4:
28:35:8c:dd:b7:43:07:c7:ea:10:04:f1:eb:23:4a:01:33:29:
a1:d6:78:c9:39:3e:38:b6:c0:89:ac:99:40:ac:7b:80:6e:94:
35:28:a0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:50:33 2025 by rpki-client