Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File: xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier: 52B/TIg0eKZQwzFs8Obcuuv/BVmdYuT6ultXEdiXzug=
Subject key identifier: 22:A7:76:6E:F7:3E:09:A6:B6:0D:A9:E3:3D:00:B5:E8:5A:B6:06:74
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer: /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial: 019676B1166C71EA542713B8FC77BFB9BF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number: 0509
Signing time: Sun 27 Apr 2025 10:00:39 +0000
Manifest this update: Sun 27 Apr 2025 10:00:39 +0000
Manifest next update: Mon 28 Apr 2025 10:00:39 +0000
Files and hashes: 1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: 0Z/xmatQE53QbFknCsxKahFNyAz4isYWJ+4NIq9S4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:16:6c:71:ea:54:27:13:b8:fc:77:bf:b9:bf:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
Validity
Not Before: Apr 27 10:00:39 2025 GMT
Not After : Apr 28 10:00:39 2025 GMT
Subject: CN=22a7766ef73e09a6b60da9e33d00b5e85ab60674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d8:52:4a:86:8c:8a:b6:c5:a3:a6:a6:75:b3:
51:e6:39:e5:27:46:f1:2f:28:08:fe:14:68:39:6e:
3c:91:f1:b7:f8:cb:b2:70:ea:e4:53:85:39:f9:0e:
c1:3b:09:00:61:5c:2d:6f:6f:62:3e:e7:c0:a9:51:
4f:1c:43:05:22:4c:9b:f1:6f:e6:a7:94:a6:90:75:
3b:47:f5:50:00:b9:cc:0a:0e:27:c2:b8:c3:21:53:
bf:6d:1b:f3:b2:69:f1:48:b1:d5:e5:35:ce:a6:d6:
7b:bf:83:3e:f3:37:e9:86:52:fa:3e:57:47:45:e9:
89:31:63:39:88:94:54:37:e8:d5:e0:c2:d5:0c:fb:
14:c6:70:49:ed:3d:e3:9d:30:aa:b4:8f:61:58:82:
b2:fe:e0:72:b0:0e:11:c6:a6:4f:7c:5b:79:a8:97:
a5:33:a0:a8:7a:6c:7b:0c:d6:87:bc:81:7d:a0:5c:
ce:05:f2:e7:c6:b8:cf:ba:d7:17:ca:1e:fb:74:ba:
6c:94:54:39:10:97:4f:20:9e:0b:9f:07:25:4e:54:
ce:f3:11:f7:5d:5c:08:58:bc:e3:40:f2:a4:a5:c6:
0e:2d:c6:ba:31:fe:a4:fe:16:48:01:98:64:a9:99:
31:7a:bc:a8:bc:bb:53:cc:45:f3:a5:a1:ce:c6:e2:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A7:76:6E:F7:3E:09:A6:B6:0D:A9:E3:3D:00:B5:E8:5A:B6:06:74
X509v3 Authority Key Identifier:
keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:04:11:7d:23:cc:7d:f9:12:06:d2:a0:81:14:59:61:03:31:
24:78:da:d7:9b:0f:ff:42:66:01:93:ba:ac:3f:48:b2:f7:a4:
5d:4d:32:49:50:9a:84:91:fd:2c:61:06:43:22:b0:52:8f:0e:
3f:5f:3b:8e:fb:0a:1d:d5:0b:66:d5:d5:d4:b3:33:9e:7b:64:
30:18:b1:cd:dc:d6:1c:cb:5a:f2:d9:4f:e7:97:3a:00:b7:2c:
7f:a4:e9:48:c7:8e:e0:a6:91:e5:5c:42:9a:86:2b:38:cb:c7:
1a:64:a3:b1:70:14:f2:33:1d:e5:08:fc:d4:4a:9c:36:9c:5d:
57:72:53:2e:23:8f:06:6b:e9:28:b6:00:9c:ea:57:eb:ab:de:
ff:63:65:2f:db:58:24:92:10:6b:c7:75:60:d8:4e:c0:33:49:
7a:f8:9a:3e:be:3c:bb:a1:ff:17:aa:0b:1a:c3:75:b9:eb:63:
c0:f4:9f:bf:bf:a3:e3:d0:3b:40:7d:06:07:89:ba:f0:ed:fd:
fe:25:05:f7:5d:c3:5a:78:d1:0e:f4:1b:d7:00:b5:ae:c6:ff:
35:2e:09:29:82:76:ad:a0:9d:5e:4a:4a:a4:31:ce:b5:21:5f:
3d:07:df:79:f4:29:93:09:de:1e:dd:f3:6d:74:9b:ad:c4:98:
ed:e8:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:34:34 2025 by rpki-client