Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier: dGlD9IhgCh4V/iIFw0qoCca5W04apmf2A0Ql0RSVJRE=
Subject key identifier: D2:28:07:F3:09:EA:29:89:01:2D:37:73:B9:9D:F9:26:A5:CF:31:02
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial: 01975DCBBA2F7EE2BD2AF017681C02FE4941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number: 1516
Signing time: Wed 11 Jun 2025 07:02:01 +0000
Manifest this update: Wed 11 Jun 2025 07:02:01 +0000
Manifest next update: Thu 12 Jun 2025 07:02:01 +0000
Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: a86mPfddxuLQ1BKvJUm4ra2e7qJYZFMAJP/yyE0wSng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:ba:2f:7e:e2:bd:2a:f0:17:68:1c:02:fe:49:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Validity
Not Before: Jun 11 07:02:01 2025 GMT
Not After : Jun 12 07:02:01 2025 GMT
Subject: CN=d22807f309ea2989012d3773b99df926a5cf3102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:c5:62:82:91:ff:52:b4:10:c4:84:24:85:
41:8c:b0:b3:a0:24:bd:4b:be:53:25:42:1c:51:32:
50:19:01:28:fc:e6:4c:66:92:ef:60:8a:7e:fb:45:
ed:54:9a:57:61:32:49:89:c7:82:92:2c:6a:3d:dd:
95:fa:05:69:a7:5d:b5:47:13:58:f1:54:f4:c6:3e:
5f:ec:e0:c2:2e:d6:2d:38:57:0e:f9:5b:62:28:73:
b2:85:fc:ef:af:6b:8b:73:cb:dd:7e:30:22:3f:07:
53:f6:24:b6:f6:77:ea:57:c4:bc:42:30:1c:4f:e9:
07:13:1b:f8:42:6c:e8:71:2a:b0:aa:04:d5:f0:e3:
b0:94:94:30:b7:fe:23:a4:87:75:30:cd:98:54:b2:
14:3e:9a:65:84:5d:0a:3b:0c:81:10:d6:16:fd:62:
9f:bd:09:57:30:54:db:c1:49:99:11:3b:e7:a0:8b:
75:c0:14:dc:21:32:f8:e0:08:85:a7:43:fc:b8:8f:
70:2a:29:d1:39:37:df:15:e0:39:69:7a:2d:9d:42:
0c:e4:0b:08:08:0d:11:3c:75:f2:40:38:6e:7e:76:
ec:66:87:89:e9:8f:38:ea:5c:51:65:e2:8b:36:8b:
b3:7b:24:ac:e3:39:a5:a7:44:cd:24:04:31:95:7c:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:28:07:F3:09:EA:29:89:01:2D:37:73:B9:9D:F9:26:A5:CF:31:02
X509v3 Authority Key Identifier:
keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c4:7a:76:2f:67:c7:b0:3e:18:64:02:0c:55:94:81:61:ad:
ac:e0:44:45:96:5f:7f:17:0c:7e:af:ef:2e:d9:ad:9d:a9:50:
e9:b7:64:cb:41:90:1b:2d:e1:b2:52:c8:b3:ac:31:d3:f4:f7:
ce:86:62:8d:22:96:1e:be:83:31:af:a8:85:f1:66:b0:6c:80:
e1:f3:6d:4e:1e:07:05:8d:38:d4:12:ba:ae:30:0a:7a:f2:ca:
0c:32:98:14:33:61:71:75:6b:66:c6:8d:0b:28:cf:8e:84:45:
80:58:05:fe:ae:ed:df:e9:3b:52:90:20:ad:21:2e:11:78:ec:
57:55:1f:8b:d2:fc:eb:27:03:ff:7b:19:82:cf:4a:92:9f:1b:
0d:e9:fa:26:04:7f:08:13:45:aa:e0:b9:1c:5f:11:56:dd:18:
e4:91:47:08:07:dc:74:c7:fe:6b:71:64:9a:5f:7b:bc:6f:98:
3a:a5:ed:1d:6e:1c:ae:7a:86:c9:3e:2a:6f:7d:40:fb:7e:47:
62:c5:a2:27:ed:23:bd:f2:40:33:fe:d0:52:d4:4b:ef:3d:54:
c2:37:e9:3f:44:c8:87:33:f1:13:aa:af:c7:f8:92:a8:8e:84:
52:91:cc:3e:50:cc:2c:d1:46:03:70:e4:a7:21:61:35:ce:c3:
e9:8d:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:25:07 2025 by rpki-client