Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: AiYuyotMRuO4r7PNxAUuzrLqaleIDITjnlJWJufKoRI=
Subject key identifier: 0F:7E:61:45:F4:7F:AE:B8:A3:42:99:78:A9:7D:A4:8B:D6:3B:22:64
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 019641E88ECA68EC4820D7ED2C327A2854F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 08B0
Signing time: Thu 17 Apr 2025 04:01:21 +0000
Manifest this update: Thu 17 Apr 2025 04:01:21 +0000
Manifest next update: Fri 18 Apr 2025 04:01:21 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: jmszzzYnY6QabortwnneujbTADEiJqXjRLfXaV/yzhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:e8:8e:ca:68:ec:48:20:d7:ed:2c:32:7a:28:54:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Apr 17 04:01:21 2025 GMT
Not After : Apr 18 04:01:21 2025 GMT
Subject: CN=0f7e6145f47faeb8a3429978a97da48bd63b2264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e8:ac:ac:94:0c:aa:40:b4:7f:0e:db:7b:93:
85:9f:31:9f:45:8d:94:6c:fa:14:94:07:a5:f6:e2:
eb:c0:c6:56:a1:8b:cd:d9:75:9a:cc:86:ac:fd:be:
10:57:06:30:a0:2d:9b:f0:22:bf:11:ae:cc:8f:a7:
fd:6e:bf:c0:66:00:48:20:31:27:c4:7d:11:4c:56:
2d:49:09:2d:33:e1:94:7a:be:0b:19:ab:df:65:58:
04:91:16:9a:7d:98:f4:f2:18:00:55:98:4e:22:d7:
59:ec:90:98:28:fe:50:b0:59:2b:70:5e:5e:5a:57:
2d:2e:e4:76:ee:3d:30:fd:c4:59:0b:a3:45:84:f1:
88:aa:98:2b:9c:96:50:a6:d4:bb:5c:23:4d:ad:37:
6e:86:c4:40:43:a0:d9:a3:44:c2:69:2b:c7:5f:e0:
29:99:ae:61:27:89:35:3b:fa:ff:7e:97:2f:c5:6e:
03:a3:7d:68:ff:27:95:4f:36:be:1e:7b:94:1c:c3:
32:71:03:fb:d2:a6:15:1b:e4:9f:13:9c:67:1e:fb:
01:a6:33:0d:2c:06:cc:07:3f:c8:39:bc:e6:c8:33:
80:ff:4c:12:df:41:47:05:0e:61:6a:2c:df:bc:65:
8d:68:65:02:6d:95:f3:94:9d:5b:4a:5e:d1:41:52:
5c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7E:61:45:F4:7F:AE:B8:A3:42:99:78:A9:7D:A4:8B:D6:3B:22:64
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cd:f2:87:31:43:ac:9c:2a:11:1b:84:d6:05:61:5d:a3:8c:
7d:ca:ef:ec:84:d8:30:df:e4:60:77:78:e3:d7:1c:89:f4:37:
76:1a:f1:fc:e1:cd:26:d1:87:25:25:b9:5c:d3:19:03:22:92:
c3:95:42:8e:33:7a:48:72:c2:c6:60:9f:1c:72:ec:fc:ee:7d:
39:1c:55:a5:16:6b:66:54:54:cf:e4:73:3d:6e:33:23:ce:0f:
07:3f:7b:c1:80:26:0c:c4:c8:bb:75:a5:64:06:bc:57:57:b7:
22:e0:74:87:49:56:c3:fc:4c:0f:09:44:db:20:45:50:ba:43:
67:e3:9a:d0:c1:c5:fa:5b:09:55:f7:c1:6d:89:89:8f:aa:07:
e5:f3:de:0c:86:4f:da:f5:d3:44:cf:5e:c8:d9:0c:91:df:14:
7c:e0:3b:73:0a:c3:f2:34:1a:95:e3:1b:ed:65:23:73:9e:ad:
b4:a7:d4:6b:2d:db:cc:4f:02:69:cb:93:7f:77:af:50:2e:f0:
b1:9d:48:d1:61:13:6b:6b:f6:c0:29:a9:26:c2:85:17:72:47:
4a:9c:7e:bf:9c:75:0d:2a:ce:2b:b1:ad:f3:6d:2f:1f:2b:9d:
09:84:35:62:45:ce:1d:cd:78:28:ce:c6:b7:b7:52:2b:d1:7c:
b4:3c:48:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:26:50 2025 by rpki-client