Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json)
Hash identifier: tVs2H5TiWq0m8XcCdhGIbLmWDHiShwIlnSjTwYa8rsI=
Subject key identifier: 56:EE:E0:EE:91:07:BE:A6:2D:87:E9:41:89:F8:82:32:3E:D4:96:DA
Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Certificate serial: 01968359D2A910D22CB8391A732D0A71D6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
Manifest number: 0889
Signing time: Tue 29 Apr 2025 21:00:23 +0000
Manifest this update: Tue 29 Apr 2025 21:00:23 +0000
Manifest next update: Wed 30 Apr 2025 21:00:23 +0000
Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: P7hli83Z8gDQ8oTh50nGuiyIpvtz3MqeKWfuBAZbbUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:d2:a9:10:d2:2c:b8:39:1a:73:2d:0a:71:d6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4
Validity
Not Before: Apr 29 21:00:23 2025 GMT
Not After : Apr 30 21:00:23 2025 GMT
Subject: CN=56eee0ee9107bea62d87e94189f882323ed496da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:8c:cb:ed:3b:c5:6e:6d:2f:3e:f3:ee:22:
4e:3f:ae:45:eb:53:11:d2:28:80:4e:cc:29:4a:cb:
8f:17:69:de:17:bb:52:1c:03:94:d0:38:82:cc:1c:
ab:13:af:a3:17:22:fb:58:32:71:02:d9:f2:1f:62:
c2:5a:2f:62:c0:80:af:e4:c5:2c:c7:04:02:fe:cf:
4f:52:14:dd:46:a9:ab:fa:ce:0b:c5:8f:bb:c1:45:
f8:da:32:d6:9a:e7:6a:05:b0:e5:77:21:cf:e2:1a:
ea:cc:0a:eb:e4:49:75:1b:35:42:3b:d7:74:f4:17:
b6:9a:4c:c8:2c:3b:ee:3c:c6:55:25:13:af:aa:71:
e9:a5:78:f6:11:dc:81:e2:c2:52:1f:ed:2a:65:0a:
71:ed:04:4b:d6:ad:66:98:ca:39:ec:f3:c8:61:d3:
10:6b:9a:f6:49:f7:07:91:f8:96:14:10:42:6b:7d:
36:e6:e1:5a:22:f6:b7:cf:69:b8:a5:ec:55:6c:d8:
ec:02:4c:fc:84:fb:b3:0b:16:52:9a:8e:8d:81:bd:
1d:5a:dd:87:8a:96:68:32:16:fa:66:0a:79:81:b5:
00:e1:ae:03:69:49:b0:89:dd:ac:20:7f:4f:71:cf:
5a:65:b0:f6:84:96:60:c9:d8:d1:db:93:68:e5:53:
4b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EE:E0:EE:91:07:BE:A6:2D:87:E9:41:89:F8:82:32:3E:D4:96:DA
X509v3 Authority Key Identifier:
keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:78:0a:f2:98:0a:d4:6f:db:f1:40:ed:68:65:93:10:56:46:
d3:fe:e8:28:85:b1:36:2b:51:52:64:e0:dd:f6:50:21:c0:13:
37:16:75:04:21:56:87:5a:f3:90:3c:10:83:16:78:dc:fd:da:
50:e8:d3:94:57:c4:e4:94:ab:a3:3d:f3:cd:1c:5b:b8:3f:36:
10:74:ae:4c:6d:1a:8e:38:b1:6c:e6:cb:16:04:d2:a1:cd:8e:
fb:6e:2a:7b:76:b6:a2:0c:f1:59:5f:07:ac:12:03:04:3c:02:
d2:0d:f3:48:63:84:1c:75:a7:50:f4:7e:45:56:6a:81:6c:10:
ef:98:b9:8a:c4:cd:ca:56:e2:bc:b8:6f:19:1e:b2:b3:f6:c6:
27:0a:63:05:e0:4c:c0:94:a1:b7:3e:55:85:92:86:44:f3:d9:
0c:e0:78:3e:2a:f6:ae:8a:0f:6a:80:6d:f6:59:bb:39:4d:c8:
d6:00:1c:ba:c1:26:95:9b:d0:b4:70:65:3f:b6:69:6c:f6:21:
c7:9e:94:8b:2e:7d:31:0b:90:46:f0:38:19:70:18:df:df:ee:
69:8f:ec:74:31:b8:33:77:8e:34:e6:ef:d1:6c:f6:f5:95:51:
bf:03:3c:e2:f1:05:57:58:4d:9f:d9:ba:af:84:df:3a:a4:9b:
e0:ea:6b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:45:24 2025 by rpki-client