Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
File: xfFStqDQBGJ9KF2Hmqg-WEYast8.mft (raw, json)
Hash identifier: 1Z/QHVfgysa3WKsCqK3nFyBGuhHS28Vw3Ng4mztG4bE=
Subject key identifier: 69:99:3D:F8:0D:00:59:62:9E:27:E1:CA:1A:01:44:43:74:39:9A:E1
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 019681A3632ECDBD3F1063EF6A32BEDBFD81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
Manifest number: 1135
Signing time: Tue 29 Apr 2025 13:01:30 +0000
Manifest this update: Tue 29 Apr 2025 13:01:30 +0000
Manifest next update: Wed 30 Apr 2025 13:01:30 +0000
Files and hashes: 1: xfFStqDQBGJ9KF2Hmqg-WEYast8.crl (hash: /tubtSRH5ILdBuHYojHijVy6P2jEmwR8V26bjWqDzO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:63:2e:cd:bd:3f:10:63:ef:6a:32:be:db:fd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Apr 29 13:01:30 2025 GMT
Not After : Apr 30 13:01:30 2025 GMT
Subject: CN=69993df80d0059629e27e1ca1a01444374399ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:39:6b:f1:f8:e4:af:04:e9:13:a6:87:25:
b3:f1:53:25:b2:50:cd:34:3e:2a:f9:83:65:9d:72:
63:56:dd:fe:fc:e8:b0:1b:b1:c4:3c:89:fe:e9:1f:
17:b4:fe:3b:c9:80:dc:31:63:ee:e5:e4:72:26:0e:
72:37:8d:1a:8d:4c:2a:32:00:09:29:30:b3:0e:d4:
23:9a:70:37:5a:37:2d:25:a3:c5:f7:27:c6:b2:ab:
69:3d:97:b9:09:fb:a0:68:0c:e8:bc:06:33:fd:f6:
46:f6:d3:5c:23:d5:88:5d:90:9c:08:c0:4a:1e:16:
c7:0e:98:bf:1e:10:1f:42:72:4b:1c:b1:d4:34:9e:
4f:55:d2:ff:80:24:0d:95:8f:a1:7b:d8:70:3d:66:
9f:ff:1b:6f:a4:5f:56:a6:31:7b:64:de:a8:5a:30:
60:58:9e:39:5d:c7:88:71:bd:91:c4:9d:7b:2d:1f:
31:f5:8a:e2:00:90:60:d0:4e:bb:74:d3:ef:6d:0f:
6d:5d:5d:be:ba:92:3b:59:6f:23:f0:b2:35:6b:03:
3a:ba:51:17:6a:e3:4a:cb:b1:13:90:7c:72:c1:84:
3f:3b:3b:78:cd:0d:dd:41:7d:66:e2:db:17:e8:08:
0e:c9:d2:2c:c2:2e:38:d2:a4:49:c0:b6:f5:ee:b3:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:99:3D:F8:0D:00:59:62:9E:27:E1:CA:1A:01:44:43:74:39:9A:E1
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:35:d5:d1:86:96:f7:0a:ee:a5:20:b6:d9:62:09:98:63:78:
b8:7a:19:63:ba:bb:4b:43:d0:52:c9:80:1c:ee:43:78:87:63:
ed:7f:4f:f3:9c:da:f1:57:f0:43:58:77:d1:1e:e2:d1:e5:a1:
89:27:2b:0a:79:b1:9d:19:bb:e7:89:7a:c8:7a:28:79:a8:4a:
e9:16:1f:e9:9a:65:de:e4:f4:b1:4e:a9:c2:4e:c4:ba:5b:33:
61:f7:58:9f:c8:39:8e:a9:ec:81:f4:01:ee:3c:70:dd:82:c4:
ef:16:91:af:5d:13:ed:68:f5:c1:fc:05:bf:48:df:d9:56:ca:
02:68:f2:4a:4f:36:87:ec:82:37:53:85:a0:0f:7c:5c:96:4e:
11:7a:e7:ae:83:6e:69:f9:c9:bd:a3:bb:9f:44:6b:eb:77:a2:
31:7d:cb:56:07:92:7c:7b:27:fc:18:95:a4:02:60:e2:10:9c:
cd:3e:76:9f:30:8e:d3:c0:ae:8b:76:66:ee:dd:f1:de:a2:1a:
93:74:8e:ed:35:7a:1a:e8:a1:2f:2c:ab:0e:2b:6c:5e:71:40:
a7:95:19:3a:ff:3f:bc:0e:f1:86:60:47:ec:9b:5c:ae:6d:8b:
dc:42:52:cb:1e:5b:17:2b:20:dc:d0:b2:3d:2c:c4:f9:e8:23:
ff:84:63:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:15:34 2025 by rpki-client