Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
File: Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json)
Hash identifier: qWDUFJZCma9rP16iylG4OOGLDCQGEoqTuZjZ2artkfM=
Subject key identifier: AD:6D:8F:04:E9:A1:9A:0C:F8:6A:92:43:D3:05:EC:6C:10:A1:22:34
Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
Certificate issuer: /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Certificate serial: 01967DC5A9293B5D16C58A4CF51B9891F887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
Manifest number: 0114
Signing time: Mon 28 Apr 2025 19:00:27 +0000
Manifest this update: Mon 28 Apr 2025 19:00:27 +0000
Manifest next update: Tue 29 Apr 2025 19:00:27 +0000
Files and hashes: 1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: UvqAI16DIo6O9f80Z3j2FT9SSC2xIRPDUcgSuq/qeJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:a9:29:3b:5d:16:c5:8a:4c:f5:1b:98:91:f8:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5
Validity
Not Before: Apr 28 19:00:27 2025 GMT
Not After : Apr 29 19:00:27 2025 GMT
Subject: CN=ad6d8f04e9a19a0cf86a9243d305ec6c10a12234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ce:b9:73:f7:dc:4a:ce:6c:71:be:3c:8f:b7:
a8:3d:96:ec:4d:8b:f1:93:64:67:61:8a:01:b5:9b:
9c:ce:fb:df:71:f4:93:00:26:ae:9c:d9:86:40:0c:
8a:be:b4:ca:d2:a9:91:6a:b0:0c:80:c4:0e:dc:7a:
a7:7b:08:d3:f0:19:11:96:91:ff:83:51:27:5e:31:
7c:9b:d7:62:a9:62:6c:9f:1e:a9:7e:e4:d9:9a:67:
b8:25:09:e9:4b:0c:be:1a:cc:c1:ee:65:93:44:aa:
6f:f7:b5:f9:cc:73:7b:c3:2d:48:f9:d8:fd:c9:dd:
36:4f:72:90:d9:a7:ce:be:2e:6e:a7:de:78:2a:b5:
34:db:8a:4f:e8:63:60:20:c7:f3:58:60:76:e7:fe:
13:81:90:eb:ed:b5:27:9b:ee:3a:e4:f1:8a:c2:8e:
85:f8:1d:f8:83:7a:58:e2:21:ab:dd:25:e9:15:e1:
1a:32:64:31:d9:17:9d:51:e3:80:2a:21:7b:48:23:
ce:6c:eb:ea:a2:f4:3a:a4:52:d2:92:db:a5:72:b3:
00:48:50:d7:57:8b:46:24:e5:20:38:89:77:e9:1a:
39:9a:f8:96:08:04:4e:83:15:26:0b:5b:5e:68:53:
35:14:b6:a6:4d:88:1f:ca:f3:cd:e6:bb:20:66:76:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6D:8F:04:E9:A1:9A:0C:F8:6A:92:43:D3:05:EC:6C:10:A1:22:34
X509v3 Authority Key Identifier:
keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f5:7a:b8:ce:c4:22:20:49:92:f2:4f:4c:6a:da:ba:d6:14:
e6:de:85:dc:8d:8a:c5:c0:2f:ce:36:7c:73:1f:df:67:9b:4e:
4a:28:67:36:39:6e:c4:18:e1:9e:f2:8d:d5:ef:48:b1:10:3b:
4e:50:fd:f4:52:99:26:5e:41:09:fc:9f:a6:3b:58:b5:3b:d5:
37:c1:20:7c:da:fb:98:32:ab:c1:41:f9:d7:95:e3:f9:30:0b:
76:13:61:21:bf:ae:79:9e:e0:25:d7:f5:a0:c9:1b:d3:cf:8d:
29:4b:f5:7b:30:e8:59:53:8c:d8:6a:ff:1a:5f:89:64:6c:11:
19:cf:bf:42:ac:ce:07:07:2d:1f:61:0b:f9:00:b5:4b:60:13:
72:0c:df:e1:98:07:2b:4f:ee:18:33:28:b8:ba:9c:d9:61:d8:
bf:84:6a:c7:cc:9b:21:00:2a:0f:c1:d8:54:04:16:20:3d:09:
c9:29:d6:22:42:21:18:df:e9:db:6d:3e:de:ae:db:6b:44:45:
9c:e2:ca:a7:03:d1:4a:da:50:d1:39:f6:7e:11:83:2f:13:6b:
2e:13:84:0c:76:27:3a:0d:be:e5:15:87:8e:e1:c3:2f:05:54:
46:d8:aa:5c:1c:56:c8:83:07:b7:fa:58:46:4a:08:c8:70:a2:
33:3e:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:08:59 2025 by rpki-client