Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: 1DFB4B38pUgmyqpZ50HYa32REGnKzy2f4vu57vl6TXo=
Subject key identifier: 97:79:E3:96:77:9B:71:C3:D0:D3:CC:53:E3:B4:D6:F2:45:08:3E:3C
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 019655DCC7063564AFCD36D0EE8059EEE266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 02E3
Signing time: Mon 21 Apr 2025 01:00:54 +0000
Manifest this update: Mon 21 Apr 2025 01:00:54 +0000
Manifest next update: Tue 22 Apr 2025 01:00:54 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: nQGnl5IpZtdZezagnqNISsua3ZVuG9HSnpQCgEVzB3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:c7:06:35:64:af:cd:36:d0:ee:80:59:ee:e2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Apr 21 01:00:54 2025 GMT
Not After : Apr 22 01:00:54 2025 GMT
Subject: CN=9779e396779b71c3d0d3cc53e3b4d6f245083e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:a3:66:aa:0c:a0:32:36:17:c0:ce:9c:39:
23:d3:da:53:f4:21:28:a7:fd:fe:46:6d:e9:a1:74:
5b:2a:5a:37:e4:5d:9b:ae:73:e6:47:1f:51:73:ad:
a8:b7:81:39:e0:e4:7e:77:2d:44:ea:10:9a:31:93:
c1:f3:dd:04:5f:65:b1:1c:8d:27:5e:c6:16:c3:16:
84:2a:fe:7d:b2:f9:04:ae:3f:cf:63:12:a7:93:26:
45:ec:35:f5:c6:e9:ed:49:86:fe:9b:d7:0b:f0:f0:
93:d5:ac:fa:66:fc:2a:e2:b5:c4:fa:b3:ff:36:f8:
bf:55:3d:b7:fa:c3:b6:0e:ac:d4:1c:26:6b:35:d9:
af:0d:61:e5:49:7a:8a:ff:db:ca:7e:dd:70:c0:bf:
e9:e2:f6:d3:62:06:c4:51:3f:5e:4c:2d:32:e5:b0:
92:30:c1:4d:a6:79:36:a8:ed:c5:9e:70:28:7a:fd:
39:92:ee:9e:45:96:85:6b:9b:d3:eb:4b:69:68:85:
0b:6e:54:85:bd:aa:dd:a9:39:39:80:16:93:81:e1:
73:76:73:22:fb:d1:14:2f:c1:da:06:3b:19:fe:42:
cc:8b:99:7e:d0:b7:f6:90:2b:4f:a0:e9:c1:4a:21:
2f:2b:f7:66:01:d6:84:53:22:6a:b5:07:63:0c:bd:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:79:E3:96:77:9B:71:C3:D0:D3:CC:53:E3:B4:D6:F2:45:08:3E:3C
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:00:3a:df:8a:50:90:18:35:5c:8d:63:a2:c4:76:a8:e6:27:
64:4e:01:b2:64:4c:64:96:32:88:33:99:f8:e7:b0:14:c7:d4:
4c:2b:87:e9:e0:eb:96:aa:46:0d:f6:80:7e:4b:42:68:de:b7:
44:31:10:29:70:d2:ae:ed:15:af:2c:67:c6:c8:53:52:4e:5b:
60:12:e2:4f:4f:b2:d7:b3:4b:1f:48:35:70:d0:fc:63:00:2f:
25:c4:7e:8d:d2:4b:f2:a8:d9:f9:34:3c:a7:33:ee:81:b4:fa:
25:8d:44:18:ce:b2:48:a5:9b:43:cf:e1:8f:45:8a:47:8d:b6:
40:81:86:c5:c7:21:b2:d5:de:0f:00:0b:37:32:49:d7:ea:4e:
b4:ee:77:4a:30:00:f5:c6:49:12:22:60:7e:b5:9f:f9:06:2e:
a2:04:af:05:39:bf:31:5a:1f:5a:af:d0:d3:59:89:55:ab:c0:
a6:33:cc:ce:be:d0:67:84:96:f1:f4:31:9c:f9:1d:0d:44:ce:
7c:ab:c7:68:8f:11:11:36:99:63:99:a8:44:34:04:12:49:9d:
7c:cc:f5:97:d7:d8:6f:13:99:5b:90:96:d9:77:41:a4:a1:a0:
63:72:6b:2b:fc:76:1f:34:58:03:66:a1:61:9b:e5:34:5d:d0:
8e:93:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:47:12 2025 by rpki-client