Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: Bu+wJMa0/mRccmeWDZgTPoEpKGmbW2vSPDCcMIES+1E=
Subject key identifier: A0:89:18:64:7F:E8:F0:5B:78:9F:84:5B:16:80:27:BC:DC:B6:32:C4
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 01968058E0050D93272CAB83379159DD5FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 0926
Signing time: Tue 29 Apr 2025 07:00:30 +0000
Manifest this update: Tue 29 Apr 2025 07:00:30 +0000
Manifest next update: Wed 30 Apr 2025 07:00:30 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: bIaSWGklv6sPbQ7ANBUgsJTR05yyy/gRlD3+iTa7Udk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:e0:05:0d:93:27:2c:ab:83:37:91:59:dd:5f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: Apr 29 07:00:30 2025 GMT
Not After : Apr 30 07:00:30 2025 GMT
Subject: CN=a08918647fe8f05b789f845b168027bcdcb632c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:a8:45:e3:7b:11:b2:15:c3:16:5f:1f:1a:
0f:0a:18:40:09:b0:a5:6c:43:54:2a:ad:bc:73:20:
8b:fd:db:06:4d:0d:f6:3b:97:0d:4f:a3:24:36:15:
16:10:88:bc:06:fc:b6:a0:6d:cd:57:e0:9b:94:c9:
09:1f:33:d0:35:f0:f8:c6:a3:19:27:f8:e5:af:f1:
ce:77:bb:3d:1b:57:ea:00:aa:5b:7c:b1:b6:a8:7b:
ac:49:c3:dd:4d:85:f7:43:9f:3e:2e:17:09:b0:9f:
6e:1b:6f:e6:6e:76:1f:2b:3a:48:66:e2:53:7e:74:
25:0f:7e:af:c9:2c:97:4d:52:12:5e:bd:56:52:2b:
e5:6e:c9:47:f9:35:28:05:8a:83:d4:f5:12:2a:a2:
77:31:10:ab:21:dc:7b:fa:bc:93:a8:f8:46:ec:bc:
41:70:80:9a:ae:3e:40:22:5b:52:fb:df:48:02:c4:
31:22:a8:67:f8:c3:27:6c:b3:78:2b:12:0f:2d:e2:
63:48:51:c3:9a:65:9b:7e:dd:d4:0b:04:d7:4f:39:
e3:15:43:d9:07:b4:97:ab:9e:1f:33:5b:af:1d:23:
00:75:74:b3:f0:cf:69:1c:81:98:56:49:5b:05:82:
90:43:d5:91:05:cc:84:9a:a6:41:c8:61:72:cb:35:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:89:18:64:7F:E8:F0:5B:78:9F:84:5B:16:80:27:BC:DC:B6:32:C4
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8d:81:32:6f:8a:ea:49:bd:4f:b1:92:8a:fc:0a:b8:03:44:
f2:32:9a:68:4d:c8:71:3b:e2:b7:2d:1e:ee:b2:14:83:2d:83:
df:3c:14:bf:a7:03:ab:df:c2:ac:14:91:2b:bc:20:ba:5e:a3:
36:8f:d3:5e:37:7f:6f:96:76:29:9a:e5:6c:bc:50:06:53:3b:
a9:0a:17:54:c2:af:78:e1:90:98:ab:73:cc:c5:eb:12:09:f4:
a2:57:ef:25:45:22:9a:37:60:76:95:b0:7c:a1:b2:3c:f0:eb:
05:14:db:1b:59:45:48:7e:12:f1:a3:6b:ab:85:4f:2f:6a:d7:
f0:50:80:b8:43:f0:a6:77:8a:b8:ed:da:27:bb:f1:39:32:73:
2f:42:58:c6:5f:3a:0d:8f:76:79:7a:b8:fc:bb:41:01:36:36:
e0:3b:24:55:12:1d:94:49:0d:2a:95:b3:97:97:f4:de:2b:cb:
26:62:20:a7:8d:88:2d:30:07:54:54:68:3e:76:ed:10:0b:52:
07:ea:b3:ed:7d:14:b6:b8:5c:30:f9:6c:b8:57:f3:6a:76:6c:
cb:cd:a0:80:7a:69:ce:45:ec:6b:76:99:77:d7:da:73:c6:ea:
49:fa:11:c0:33:2d:15:1b:7d:8f:e9:23:c0:8e:2d:59:12:41:
fc:ba:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:59:56 2025 by rpki-client