Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier: CiDKMEonU5O4NS10vjrQM8TnTXUUaBZTJJEbyoIlCCE=
Subject key identifier: 5B:E8:8D:64:B6:79:6F:7A:A8:09:8B:49:F3:B3:6F:91:01:C2:73:5C
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial: 0196760BFE3AD4B70E828315E8AD29A2C587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number: 0FE8
Signing time: Sun 27 Apr 2025 07:00:19 +0000
Manifest this update: Sun 27 Apr 2025 07:00:19 +0000
Manifest next update: Mon 28 Apr 2025 07:00:19 +0000
Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: FUbFycK0OMQNJSmfHXVw4MFfZJfwb6iPJ3U9TbPo4Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:fe:3a:d4:b7:0e:82:83:15:e8:ad:29:a2:c5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Validity
Not Before: Apr 27 07:00:19 2025 GMT
Not After : Apr 28 07:00:19 2025 GMT
Subject: CN=5be88d64b6796f7aa8098b49f3b36f9101c2735c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:56:b1:56:9a:3d:c3:7a:23:46:73:9b:c6:
03:27:16:4c:4e:74:4a:59:89:30:cd:26:0d:78:67:
73:55:b8:e7:e6:32:36:02:a9:12:5f:c5:4d:51:50:
3c:77:17:74:9d:79:06:30:b1:f0:48:03:6c:f7:66:
6f:73:17:2f:dc:ed:07:cf:02:7e:84:5f:e1:16:90:
68:6d:02:1f:bc:54:5e:29:50:ad:ab:cd:93:2a:90:
f6:f2:37:e0:41:96:40:a0:ce:52:96:d8:32:eb:c5:
8c:0c:ac:a5:64:71:76:4f:63:d3:5c:27:77:92:2a:
c5:22:9e:57:8a:f7:f8:f7:11:5d:c0:4a:58:9c:a9:
c6:f9:80:f1:cc:da:a4:ec:0f:5f:57:8f:17:bb:92:
d8:fa:21:eb:09:aa:5e:e5:ae:20:98:54:07:ba:50:
02:b7:bb:1a:ec:60:70:3d:69:c7:da:e8:7a:b1:07:
0d:a7:45:6d:30:7e:77:79:65:a5:97:90:79:0b:1d:
36:d7:0f:20:75:c6:eb:06:61:08:1e:0c:f0:be:c5:
39:68:0e:c7:9e:e8:35:d3:e3:14:7e:8a:09:d4:a8:
2f:72:94:04:fa:cb:1f:69:1d:16:9e:af:b9:e9:b9:
ec:f6:ae:c7:c4:db:2a:23:0d:60:77:fd:1e:00:aa:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E8:8D:64:B6:79:6F:7A:A8:09:8B:49:F3:B3:6F:91:01:C2:73:5C
X509v3 Authority Key Identifier:
keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ac:84:c6:ae:d5:3e:6c:a3:b5:ca:52:0c:bd:78:4f:9c:3d:
38:ba:fa:2f:a8:f9:e5:4e:90:f8:10:38:bd:60:62:f2:5f:ab:
1a:01:05:c8:d6:6b:9d:a1:1e:71:93:ea:b8:3f:8a:9e:6a:f0:
cc:39:33:57:49:3f:0e:ec:36:6b:8b:ce:ea:a9:d6:f9:d3:82:
bc:a8:a5:87:2c:57:ff:e9:05:b8:13:bf:c5:15:0d:82:be:e8:
1e:f1:02:1f:cc:e2:64:5a:9a:a4:da:41:f1:85:4c:83:e5:ac:
0c:24:df:14:d8:c5:38:99:96:da:44:f4:47:f2:fc:3b:61:0c:
2c:55:59:b8:29:57:a2:e8:e5:b6:73:29:58:60:e3:39:df:bf:
8b:e7:a1:05:95:4c:26:46:d3:93:b2:65:73:c4:a7:92:71:6b:
d3:ea:c0:ef:ff:6f:5a:31:d4:1d:f2:43:d1:41:95:a1:c0:93:
16:0b:24:97:11:6a:9f:2a:98:50:9e:e5:10:e1:a2:4a:8a:dd:
06:2c:59:a7:39:f7:b5:be:75:09:c0:1f:b3:34:30:10:fc:00:
2f:2e:18:85:84:5d:12:fe:92:c2:88:4c:d7:be:1d:06:1d:28:
ff:60:d1:c2:3d:01:84:66:1d:14:f9:45:cc:56:0d:f8:99:17:
30:57:08:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:58:37 2025 by rpki-client