Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
File: Xl5k_r-lZnT03hZCn13eSdnOk2g.mft (raw, json)
Hash identifier: nhf/yO4laVP4T3qAqnHwHudBan137vkq7ItXhJSyB/8=
Subject key identifier: 96:D5:DE:0C:C3:63:29:C2:49:73:63:71:4D:A9:65:3D:BC:36:4A:51
Authority key identifier: 5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
Certificate issuer: /CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Certificate serial: 01967D20C40BF54314DFBB7586AFFD5B8E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
Manifest number: 11A4
Signing time: Mon 28 Apr 2025 16:00:21 +0000
Manifest this update: Mon 28 Apr 2025 16:00:21 +0000
Manifest next update: Tue 29 Apr 2025 16:00:21 +0000
Files and hashes: 1: Xl5k_r-lZnT03hZCn13eSdnOk2g.crl (hash: 24bJDPZJ1BBv6Rq3SgkJ3GYtNlDzqW2YBmjp/yGJJJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:c4:0b:f5:43:14:df:bb:75:86:af:fd:5b:8e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5e64febfa56674f4de16429f5dde49d9ce9368
Validity
Not Before: Apr 28 16:00:21 2025 GMT
Not After : Apr 29 16:00:21 2025 GMT
Subject: CN=96d5de0cc36329c2497363714da9653dbc364a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:37:fe:e9:49:17:44:bc:f3:57:be:85:42:
46:89:84:27:13:db:fb:1a:8c:02:7a:a5:85:9f:df:
34:c0:21:7f:67:19:d3:d3:a5:cf:ec:e8:7e:ed:12:
d8:56:65:6c:66:26:cc:4c:0a:ff:c0:82:bc:0b:a9:
4a:04:92:4a:a3:b7:9f:ca:b3:7a:0c:60:fb:a5:31:
92:c4:dc:59:c1:54:dc:47:49:8d:64:ad:da:bf:46:
78:ff:bb:5f:e0:64:21:f2:fa:dc:4a:43:07:e3:45:
19:16:82:06:46:10:be:bb:ad:b2:0e:2e:f6:43:02:
67:f4:91:d1:8e:91:d2:84:a6:52:f5:bb:7c:c2:bd:
19:36:26:a3:65:53:9b:85:ba:04:12:a1:2f:72:34:
e7:c8:0b:fb:46:56:31:2f:ff:56:8c:c5:d0:ad:cd:
42:e7:86:44:3d:3a:f3:0c:08:c1:f4:78:44:0d:74:
5c:e7:64:b8:02:5a:20:93:1a:bc:97:76:b1:3b:1a:
34:2b:7d:61:ce:82:b3:77:8a:92:2c:7a:dd:a3:1a:
8f:6c:5e:9e:e7:6b:bd:eb:c2:79:97:71:c4:b7:08:
53:01:f5:18:1f:04:d7:b2:43:4a:e0:5e:6a:34:db:
b0:db:05:ad:de:f8:46:7a:97:5f:42:0f:a5:b1:b5:
b8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D5:DE:0C:C3:63:29:C2:49:73:63:71:4D:A9:65:3D:BC:36:4A:51
X509v3 Authority Key Identifier:
keyid:5E:5E:64:FE:BF:A5:66:74:F4:DE:16:42:9F:5D:DE:49:D9:CE:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xl5k_r-lZnT03hZCn13eSdnOk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/85fc11-e23a-4942-b0de-22f8d4a027ae/1/Xl5k_r-lZnT03hZCn13eSdnOk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6c:e6:5a:42:9f:5d:54:dd:13:ab:4c:30:82:a5:cb:fd:93:
2e:7a:f5:8c:d6:53:e1:a8:c7:bd:50:0b:98:71:fe:9b:25:c6:
78:24:20:6d:6e:a5:22:a3:43:56:74:28:0b:73:d0:e2:e7:dc:
6a:57:51:fc:d3:7a:f0:86:70:09:df:43:f7:fe:5a:25:63:e8:
68:cc:55:a9:47:23:e1:60:c5:1c:12:4c:22:ce:d6:1d:05:c5:
7c:84:e7:15:bc:b2:80:1e:a5:b1:96:7b:44:57:d9:57:a6:28:
2a:da:c2:d7:b8:c3:0f:0f:19:cb:6a:99:b5:80:e6:52:fc:d5:
2f:b4:5d:0b:54:6d:97:9f:d0:bd:5a:67:07:38:7e:ea:e1:56:
d3:ba:b1:cf:18:e6:af:12:4f:38:07:0b:7c:71:75:b4:4c:97:
10:ce:ad:c1:c5:8c:0e:b9:ae:8e:df:e9:3d:24:5c:dd:3f:20:
7a:62:9b:a0:55:fe:a5:14:d5:d7:de:1b:79:e3:49:a2:05:48:
43:e2:41:94:8a:09:7c:2c:89:f9:51:f5:7d:0b:e1:f1:41:85:
10:bd:ed:87:5a:8b:e9:41:e8:fd:45:60:50:aa:f0:9e:5e:9a:
85:73:9a:69:b0:c8:52:8b:d6:48:ce:f2:f1:f3:a1:23:f4:3a:
9f:e4:92:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9IMQL9UMU37t1hq/9W454MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNWU2NGZlYmZhNTY2NzRmNGRlMTY0MjlmNWRkZTQ5ZDlj
ZTkzNjgwHhcNMjUwNDI4MTYwMDIxWhcNMjUwNDI5MTYwMDIxWjAzMTEwLwYDVQQD
Eyg5NmQ1ZGUwY2MzNjMyOWMyNDk3MzYzNzE0ZGE5NjUzZGJjMzY0YTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+83/ulJF0S881e+hUJGiYQnE9v7
GowCeqWFn980wCF/ZxnT06XP7Oh+7RLYVmVsZibMTAr/wIK8C6lKBJJKo7efyrN6
DGD7pTGSxNxZwVTcR0mNZK3av0Z4/7tf4GQh8vrcSkMH40UZFoIGRhC+u62yDi72
QwJn9JHRjpHShKZS9bt8wr0ZNiajZVObhboEEqEvcjTnyAv7RlYxL/9WjMXQrc1C
54ZEPTrzDAjB9HhEDXRc52S4Alogkxq8l3axOxo0K31hzoKzd4qSLHrdoxqPbF6e
52u968J5l3HEtwhTAfUYHwTXskNK4F5qNNuw2wWt3vhGepdfQg+lsbW49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbV3gzDYynCSXNjcU2pZT28NkpRMB8GA1UdIwQY
MBaAFF5eZP6/pWZ09N4WQp9d3knZzpNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGw1a19yLWxablQwM2haQ24xM2VTZG5PazJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84NWZjMTEtZTIzYS00OTQyLWIwZGUt
MjJmOGQ0YTAyN2FlLzEvWGw1a19yLWxablQwM2haQ24xM2VTZG5PazJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84NWZjMTEtZTIzYS00OTQyLWIwZGUtMjJmOGQ0YTAyN2Fl
LzEvWGw1a19yLWxablQwM2haQ24xM2VTZG5PazJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmzmWkKf
XVTdE6tMMIKly/2TLnr1jNZT4ajHvVALmHH+myXGeCQgbW6lIqNDVnQoC3PQ4ufc
aldR/NN68IZwCd9D9/5aJWPoaMxVqUcj4WDFHBJMIs7WHQXFfITnFbyygB6lsZZ7
RFfZV6YoKtrC17jDDw8Zy2qZtYDmUvzVL7RdC1Rtl5/QvVpnBzh+6uFW07qxzxjm
rxJPOAcLfHF1tEyXEM6twcWMDrmujt/pPSRc3T8gemKboFX+pRTV194beeNJogVI
Q+JBlIoJfCyJ+VH1fQvh8UGFEL3th1qL6UHo/UVgUKrwnl6ahXOaabDIUovWSM7y
8fOhI/Q6n+SSbg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:01:39 2025 by rpki-client