Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json)
Hash identifier: kaxp6kBTsMXF1vmijsZfSVirg7f9dkNo4vhHED56Btc=
Subject key identifier: 18:11:3A:BC:B8:C9:B3:0C:0E:2D:3F:02:1A:E0:B7:BF:03:13:8A:A2
Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610
Certificate serial: 0196572614CD266EDE88811F4BC9F89A5CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
Manifest number: 0BDF
Signing time: Mon 21 Apr 2025 07:00:35 +0000
Manifest this update: Mon 21 Apr 2025 07:00:35 +0000
Manifest next update: Tue 22 Apr 2025 07:00:35 +0000
Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: MIEjh5GOu+uBMRIeI5h2xhcX1fm4CS2ZXUgqkzeM/Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:14:cd:26:6e:de:88:81:1f:4b:c9:f8:9a:5c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610
Validity
Not Before: Apr 21 07:00:35 2025 GMT
Not After : Apr 22 07:00:35 2025 GMT
Subject: CN=18113abcb8c9b30c0e2d3f021ae0b7bf03138aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ab:17:73:83:e8:81:06:cc:21:b4:17:6f:9d:
f5:d7:66:4f:43:c6:25:1a:a1:76:15:06:1e:f1:ef:
93:f8:44:10:ca:92:9d:31:9f:49:a2:81:af:ed:48:
71:38:e0:32:14:90:a2:30:3b:bd:9f:06:10:da:85:
3e:d3:8c:9b:cc:a9:60:0e:32:18:11:50:59:1a:04:
ae:58:80:0d:d7:21:98:e2:be:4b:b9:e6:60:99:f9:
41:c3:94:b3:1c:72:e4:c8:14:6c:0a:64:35:f7:0c:
8a:4f:f8:12:c3:5f:99:ed:9a:1f:4f:2a:8b:66:26:
cd:b4:02:c7:f6:b9:88:31:8b:37:86:e0:02:a1:86:
7f:4b:38:9e:f9:a6:cd:fa:c5:e3:c8:0f:95:be:24:
3f:75:38:f1:20:73:3c:ea:33:19:19:a7:9a:8a:b5:
0b:a6:53:12:d0:7c:11:c0:16:e2:99:3e:2c:f5:54:
d0:71:5e:7f:ea:98:12:81:7b:ce:6b:8f:91:a1:5f:
f2:d6:ac:1e:0d:a7:55:71:33:46:ff:0e:0a:19:02:
07:03:39:b4:db:07:e3:cb:aa:3a:71:47:a5:93:73:
41:ef:37:fa:6a:89:6d:04:3c:00:e7:61:2a:a5:ea:
d1:39:ce:1a:87:10:95:97:a8:d8:05:0f:75:52:e7:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:11:3A:BC:B8:C9:B3:0C:0E:2D:3F:02:1A:E0:B7:BF:03:13:8A:A2
X509v3 Authority Key Identifier:
keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bc:95:6a:c3:c3:0c:20:df:2c:5d:ac:98:81:a0:51:4a:eb:
02:47:38:c7:5c:1c:a9:f1:b4:4c:94:a1:f8:f7:6a:09:37:9d:
d5:72:9e:c0:3b:30:29:f8:4c:8d:19:1e:2b:28:2c:78:bd:a6:
5b:06:bf:6c:f9:58:ce:29:43:7a:4f:84:50:74:3b:1d:23:21:
5a:9e:71:2c:6f:d0:01:f5:83:08:65:19:9d:8c:3c:65:4a:7b:
64:06:27:da:78:32:59:9d:30:ab:a6:48:0b:50:a1:1a:d3:94:
1d:86:61:e0:b3:41:53:83:db:a0:35:7c:22:8b:a3:63:06:f0:
7d:41:b5:8f:43:c4:9d:05:36:49:08:bd:3a:d9:4b:10:62:b6:
fe:90:9b:b9:ed:0c:24:af:cb:31:e3:2c:65:cf:68:f9:82:75:
6d:12:cc:a7:95:17:d5:da:34:91:e1:7b:bb:2f:5e:f7:48:93:
58:7a:9f:85:b9:20:8d:fc:b4:db:a1:a1:c8:1b:9e:0e:20:f9:
8e:bc:b4:c5:94:69:c8:a0:27:3c:a7:39:d6:c5:f5:f1:95:ed:
f5:49:c9:c7:39:0e:03:a6:00:15:19:56:48:73:54:c0:fb:d5:
1d:bd:58:ae:12:2d:e9:bc:d0:c2:ed:1d:4a:fb:6e:97:be:3b:
fa:17:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:29 2025 by rpki-client