Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
File: XlTVGjJHsX9vlqDM4lMBktyfdCI.mft (raw, json)
Hash identifier: lZQJG8AIhCaPSRdxd29DYF5Ei2TvnxrGw25Pfn7nQZ0=
Subject key identifier: CA:16:DF:A4:B9:FD:86:7C:42:23:9A:2D:21:25:B8:47:21:84:DF:9A
Authority key identifier: 5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
Certificate issuer: /CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Certificate serial: 0196444491655530761A498A10C6CF70859D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
Manifest number: 04C6
Signing time: Thu 17 Apr 2025 15:01:06 +0000
Manifest this update: Thu 17 Apr 2025 15:01:06 +0000
Manifest next update: Fri 18 Apr 2025 15:01:06 +0000
Files and hashes: 1: XlTVGjJHsX9vlqDM4lMBktyfdCI.crl (hash: eRIYYg7PuNesPIXo5NT/qtwzOJk99po99jADRHKNrSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:91:65:55:30:76:1a:49:8a:10:c6:cf:70:85:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e54d51a3247b17f6f96a0cce2530192dc9f7422
Validity
Not Before: Apr 17 15:01:06 2025 GMT
Not After : Apr 18 15:01:06 2025 GMT
Subject: CN=ca16dfa4b9fd867c42239a2d2125b8472184df9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:aa:e4:36:e4:f9:a2:8e:bc:a6:f7:e6:60:
dd:81:fe:1d:f4:58:a6:11:22:d7:cc:04:d4:aa:68:
dc:10:ac:2c:93:2b:a1:79:54:39:c1:b8:10:b2:e1:
35:44:b4:eb:25:7a:60:34:5f:82:51:63:71:92:83:
cb:58:08:b8:03:4d:7a:7b:ea:1f:1a:2b:48:41:2b:
78:3b:46:91:f2:21:71:8a:fe:7e:11:ab:b4:3f:4c:
2f:77:5f:e6:1a:2d:62:d1:9c:8f:e3:8c:4b:f8:4b:
8e:2f:a1:9c:17:42:ac:ee:44:6b:82:c8:ec:94:4e:
84:19:e3:74:f0:50:9b:6b:36:d3:03:aa:e9:74:e4:
a0:29:bb:c3:e9:88:82:2f:35:7a:6a:71:37:bc:4c:
ac:b0:ce:60:9c:01:97:30:a2:f0:52:a8:f2:80:86:
00:d5:ba:e9:5a:6a:b0:c8:c5:84:98:42:ef:2c:94:
24:fa:a6:de:b8:e0:6d:6e:6d:9e:4c:1d:71:a2:4e:
16:73:7f:46:4f:2f:c5:21:df:65:34:39:1e:3a:b2:
7b:35:a9:29:cd:45:88:e6:c4:de:0e:1c:a8:75:77:
49:ba:41:c7:af:f2:b5:2a:83:f1:78:fd:23:b8:95:
f3:f5:9b:b0:62:79:06:5b:ff:af:bd:b8:6e:06:4a:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:16:DF:A4:B9:FD:86:7C:42:23:9A:2D:21:25:B8:47:21:84:DF:9A
X509v3 Authority Key Identifier:
keyid:5E:54:D5:1A:32:47:B1:7F:6F:96:A0:CC:E2:53:01:92:DC:9F:74:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlTVGjJHsX9vlqDM4lMBktyfdCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/6524f6-5320-4686-a5c3-72e1fc4a306e/1/XlTVGjJHsX9vlqDM4lMBktyfdCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:39:b7:94:fd:65:ca:f0:07:47:d3:71:6d:82:5c:bb:1f:18:
7b:91:e5:9f:52:0e:08:b1:d8:1f:49:ca:95:29:09:2b:d8:96:
3a:40:f5:d8:a8:d7:b9:39:b9:3b:8d:3e:a1:8d:d0:24:97:b5:
08:9b:94:16:bc:c2:51:99:ad:da:1c:79:5b:ee:d3:fa:3c:63:
04:82:5d:15:99:8d:cf:f8:c0:1f:f3:56:02:31:0a:01:f7:42:
71:1c:0e:5d:26:3c:64:54:37:ed:e6:a4:92:62:a3:96:45:59:
2a:76:46:e1:4e:39:73:cd:be:41:2b:f8:80:6d:7f:ad:1d:18:
ac:7e:ab:58:b1:10:02:c8:c4:ae:07:db:2b:13:9f:f2:22:f5:
22:f1:b5:a5:9e:0f:bd:6a:51:62:0b:2f:85:73:4e:1b:e5:75:
c9:d7:42:11:25:13:bc:a6:cd:32:1c:1a:ec:b7:01:03:09:63:
0c:b1:11:07:31:d1:6a:35:86:a5:40:98:7a:65:de:75:87:5e:
e5:64:78:85:85:4b:4f:ad:81:bd:f2:18:22:20:4f:2a:62:02:
98:d9:fd:c5:d2:24:b9:a3:c3:30:5b:75:c0:e3:c6:11:7a:08:
15:30:49:29:44:2a:0b:2b:8e:99:08:79:80:dd:67:2b:b2:67:
4a:06:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:53 2025 by rpki-client