Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
File: XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft (raw, json)
Hash identifier: b5i0edeNM7pJJNvyObPPpZDhD8A0me27P+xf8h/8Vac=
Subject key identifier: 59:91:1C:57:6D:68:0C:5E:E4:A0:39:F5:6A:E7:E5:82:56:0C:51:50
Authority key identifier: 5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
Certificate issuer: /CN=5db79275659dd961c742bf21d8dca184a4430d85
Certificate serial: 01964F6CA859DB0F60F9038C95F946BD6539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
Manifest number: 0B77
Signing time: Sat 19 Apr 2025 19:00:43 +0000
Manifest this update: Sat 19 Apr 2025 19:00:43 +0000
Manifest next update: Sun 20 Apr 2025 19:00:43 +0000
Files and hashes: 1: XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl (hash: jf9wrpTMgRHnzsGBB5K5RmaXhYyhAGmz7mFGqoDfwvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:a8:59:db:0f:60:f9:03:8c:95:f9:46:bd:65:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db79275659dd961c742bf21d8dca184a4430d85
Validity
Not Before: Apr 19 19:00:43 2025 GMT
Not After : Apr 20 19:00:43 2025 GMT
Subject: CN=59911c576d680c5ee4a039f56ae7e582560c5150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:4a:80:3d:8f:da:fa:4d:05:1b:8e:fb:08:
32:d7:a6:50:4c:fd:c6:c4:3a:3c:9e:5e:c1:ff:57:
fd:a8:7e:cc:55:eb:fc:af:59:41:d7:20:31:ac:30:
6c:27:b1:1b:fd:64:d3:c0:f2:35:b9:2f:41:c1:d0:
7d:b6:6a:e8:db:a6:1c:4c:57:60:55:94:99:0e:b6:
16:46:4d:a0:c3:15:52:06:b0:b9:4b:1f:52:32:49:
9c:e2:18:ce:fa:c9:03:4b:fb:0f:e8:f7:5c:17:db:
60:30:53:2b:ae:b1:6e:92:95:3d:a9:ed:22:45:d8:
4a:83:9b:b8:ba:b4:55:b4:5b:64:b4:69:f1:5f:00:
8d:ea:fa:8a:b4:49:8a:a6:a0:20:a1:40:e1:72:8f:
d7:27:bb:77:52:9d:12:46:82:d1:00:b0:0a:0d:37:
e0:61:c5:18:1a:92:1b:55:0a:f1:38:18:c9:b5:f3:
d3:40:52:38:77:3c:aa:ae:90:d1:d1:c2:ae:37:d6:
0c:ba:a8:8a:6f:41:00:79:29:14:8d:cd:4e:03:97:
27:fb:09:c3:1c:dd:f7:cd:c1:36:e6:f2:e0:c0:79:
e8:19:57:3b:2c:82:45:69:9d:08:fc:de:2f:1d:27:
2b:a6:0d:bf:85:c1:d9:5f:d5:19:e8:22:dc:d5:6c:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:91:1C:57:6D:68:0C:5E:E4:A0:39:F5:6A:E7:E5:82:56:0C:51:50
X509v3 Authority Key Identifier:
keyid:5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7f:a3:98:2b:a8:e4:39:22:c2:d3:95:13:88:86:08:71:7a:
e5:f7:1b:05:a4:43:22:47:92:ee:6c:cc:e9:5b:38:1a:45:d0:
ba:8d:09:00:ea:37:c7:18:d1:1c:51:dc:67:cd:19:14:88:6d:
1a:3c:21:bc:ea:93:44:33:33:4a:bc:f0:fe:9d:52:81:8c:0b:
71:a7:d7:e2:e3:c6:80:95:5b:7c:97:8a:6a:cb:2d:9b:12:13:
72:7c:18:da:76:97:93:de:db:f6:06:8f:c7:78:69:fa:24:f7:
ea:af:30:95:63:a6:12:91:8a:70:4d:df:6b:78:8e:e4:12:13:
d5:2e:4b:5d:f5:74:0d:8c:fd:cd:10:49:7f:6e:b4:14:fd:f5:
52:02:ce:42:0d:33:28:4b:5b:67:bb:d8:68:52:c2:9a:09:1e:
70:75:a8:29:d6:06:7a:da:39:47:87:c4:a5:70:5c:7d:46:fe:
90:95:b8:11:f8:c7:6f:6b:7c:1a:eb:69:59:66:1e:62:d8:92:
b8:5f:65:06:d8:64:ab:eb:51:57:c3:ac:d7:11:97:e1:60:39:
bd:de:40:61:3c:ad:9d:c2:4f:c3:eb:1d:45:da:4d:7a:7d:2d:
cc:f9:2f:6d:cd:52:2e:f7:89:21:01:6a:04:c4:24:c2:47:a4:
fc:42:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:22 2025 by rpki-client