Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
File: XWU9B97R6Nf08uoEvTaELFsS8V4.mft (raw, json)
Hash identifier: rXe1FzSo4L2hZS+dJBGiK7qCuS9q7EA7QrcTQokjuvM=
Subject key identifier: 34:6A:3C:73:33:88:6A:44:25:8E:37:9B:CF:CF:E8:A7:A4:7E:FC:49
Authority key identifier: 5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
Certificate issuer: /CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Certificate serial: 019676B0F5419B196C6834A550CFA908A2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
Manifest number: 0D37
Signing time: Sun 27 Apr 2025 10:00:30 +0000
Manifest this update: Sun 27 Apr 2025 10:00:30 +0000
Manifest next update: Mon 28 Apr 2025 10:00:30 +0000
Files and hashes: 1: XWU9B97R6Nf08uoEvTaELFsS8V4.crl (hash: jrSPCePlEyIPr1dP4CbTiugcBuDuq7UD7UQifRtJt9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:f5:41:9b:19:6c:68:34:a5:50:cf:a9:08:a2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Validity
Not Before: Apr 27 10:00:30 2025 GMT
Not After : Apr 28 10:00:30 2025 GMT
Subject: CN=346a3c7333886a44258e379bcfcfe8a7a47efc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:56:5f:c4:b7:90:d0:62:53:a8:ab:ae:73:a4:
bd:e7:a3:73:bd:82:2b:86:7e:e0:67:7c:0c:29:c8:
05:46:41:26:e2:9f:29:66:ea:fd:1b:08:cb:6a:6d:
56:17:b0:5b:e0:98:20:95:56:be:af:ec:3e:1a:32:
21:8e:98:27:70:3b:7f:68:0c:0c:e6:77:99:8b:a4:
6f:1a:c8:19:de:c7:56:c7:86:4d:cb:cb:8e:21:38:
dc:f2:74:ba:32:16:bd:0a:7c:fb:e7:d3:a6:69:32:
ad:c4:87:b5:2c:1a:c9:c3:83:cb:bb:ad:4d:85:58:
b4:da:81:76:c8:f9:3e:1a:a0:6c:ca:13:d4:c8:4d:
2d:eb:6f:af:91:0d:87:40:b4:8e:8b:1e:0f:06:c0:
e3:39:7d:b6:dd:03:e5:95:4a:2c:11:7d:08:2f:b5:
f3:33:ed:99:7f:51:f2:4f:75:d0:9b:7a:8c:e6:77:
7d:94:ac:70:cf:6f:be:70:b6:36:82:02:6a:fe:67:
ad:6b:02:47:9b:6c:06:54:8d:5f:52:79:81:2a:27:
42:4f:74:ca:2d:a1:ff:eb:32:59:5b:ad:a4:c3:74:
e0:69:89:1c:3c:2a:23:a8:42:14:47:67:96:6b:7e:
0b:9e:6a:f3:51:6a:5c:15:cd:57:1c:00:c5:b0:da:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:3C:73:33:88:6A:44:25:8E:37:9B:CF:CF:E8:A7:A4:7E:FC:49
X509v3 Authority Key Identifier:
keyid:5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2b:b0:70:39:ac:7f:9d:af:56:82:e8:36:1d:a1:12:c5:f5:
09:fb:48:95:5e:39:ac:0d:b5:f5:4c:f2:f7:9f:e6:b5:c4:ef:
a6:a1:dc:6e:57:52:79:01:b9:49:2e:85:95:89:c8:62:f9:a8:
4b:da:b0:81:12:c3:f3:0e:99:d4:f1:4e:b3:80:08:0b:5c:f0:
c4:dc:df:7c:e0:ef:c0:1a:71:7d:a6:e3:20:fc:2a:2d:4e:ea:
a7:d6:33:8d:48:5e:31:ac:f8:c4:16:ad:83:27:e2:5a:e5:7d:
7d:ae:cd:b8:5a:fc:60:e5:c0:3d:d7:cc:70:80:4b:fe:49:fb:
c6:43:9b:83:23:c6:32:45:27:5a:19:f7:58:fc:31:cb:e7:2d:
15:ee:90:24:0c:2a:d4:5f:d0:c8:74:e6:04:b2:e2:11:dd:63:
74:f6:13:6c:1e:28:43:9c:76:97:59:25:c2:ec:84:2e:bc:18:
5d:bb:16:a9:86:9e:df:28:5d:95:bf:ea:31:d6:af:9b:20:01:
c2:83:ee:2e:49:bc:42:b3:29:33:63:76:13:cc:9c:d8:a9:7a:
f5:fd:e3:c8:07:d5:11:6c:29:60:98:66:c0:f7:61:82:25:f3:
86:63:29:ae:ab:02:61:02:3f:aa:c0:8c:90:f2:6d:14:89:12:
b2:e6:87:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:11:12 2025 by rpki-client