Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File: xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier: 1QDh+J9R3dpZz+WQbZew/qx13LXkhyL/4RVrYYPFKmI=
Subject key identifier: 8B:60:5D:40:21:35:1A:7A:04:53:42:6D:B8:C6:DA:07:81:B8:96:FE
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer: /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial: 01969039FA4E54783C702C0DDAD4FFF8E1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number: 1519
Signing time: Fri 02 May 2025 09:00:40 +0000
Manifest this update: Fri 02 May 2025 09:00:40 +0000
Manifest next update: Sat 03 May 2025 09:00:40 +0000
Files and hashes: 1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: 8QiO/aA3sEmrtNWbi1gqZz/hn9l76C6vRriYNBhCqOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:39:fa:4e:54:78:3c:70:2c:0d:da:d4:ff:f8:e1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
Validity
Not Before: May 2 09:00:40 2025 GMT
Not After : May 3 09:00:40 2025 GMT
Subject: CN=8b605d4021351a7a0453426db8c6da0781b896fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:87:9f:a8:15:61:65:97:2c:d4:80:ab:ce:
57:bc:7c:86:d7:0c:bd:01:c2:6c:dc:46:8f:d6:98:
0d:87:a3:56:ea:b0:d2:9a:67:5d:a2:c6:3f:b0:77:
f4:58:f8:64:da:67:72:a4:d9:4b:d2:f3:7c:5c:20:
2a:2e:f0:ef:0c:ac:fd:6e:bb:f5:5e:1a:14:06:8a:
b3:a5:4d:75:ab:44:3d:68:a7:42:3a:bd:66:b0:f8:
ee:ab:8d:6e:de:c6:99:b2:29:22:f9:95:94:80:38:
8f:6d:dc:ae:bc:e8:30:fd:1f:cc:fd:50:b9:dc:67:
4c:25:73:04:12:06:0c:38:d9:b7:10:af:22:53:a2:
a0:46:f3:54:e4:a3:3c:b4:b4:c1:4a:e6:62:a0:41:
08:23:7c:32:b0:4f:bc:c1:43:ea:bd:54:a0:cc:fc:
44:5e:21:03:a0:01:0e:67:31:14:09:26:b0:b4:be:
00:1e:e8:83:44:4a:9f:bc:41:3d:ba:87:1c:c7:58:
17:19:9d:ce:cb:79:7c:b8:33:03:a4:c6:05:fc:12:
a1:da:77:99:d4:4c:bc:a6:e8:ea:2e:5f:10:a6:5a:
b7:df:6d:cb:e7:0f:c4:5f:c6:26:65:0c:f2:f6:77:
4e:3b:62:c3:f1:9c:b7:cf:77:ca:b9:c4:43:c4:40:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:60:5D:40:21:35:1A:7A:04:53:42:6D:B8:C6:DA:07:81:B8:96:FE
X509v3 Authority Key Identifier:
keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fc:38:9c:2c:af:31:f6:5e:84:73:1e:f2:e4:0d:e9:86:51:
35:a8:54:22:75:6c:b1:5f:b3:5f:3f:fb:36:e9:e6:22:c5:65:
df:51:ad:24:05:13:cf:e5:40:34:0e:9f:71:fb:6f:58:d0:79:
39:d9:66:01:33:fc:1c:b2:f6:12:8a:6d:7d:b1:fc:ba:32:d7:
fb:ac:09:ea:5a:07:b0:ea:72:2b:36:00:08:8d:e5:68:86:05:
25:e4:33:c4:2a:c7:4b:01:28:de:03:ba:a8:98:f6:0f:ca:51:
f3:b8:16:13:9e:06:95:70:36:60:01:31:0f:9c:86:38:7c:5e:
c6:43:04:d9:47:64:04:b6:94:98:17:21:d0:f4:d7:8d:55:74:
a8:25:ce:a8:df:ad:20:09:ae:8f:56:26:62:ca:40:bb:8c:92:
44:54:c6:5e:c9:5e:e5:1f:be:db:2c:c2:69:7a:00:42:a0:e6:
6e:b2:ee:bb:01:5c:1c:fe:7f:ee:c9:4a:04:6a:5d:30:5b:ea:
ca:53:a3:57:1f:f7:4f:b2:53:77:d9:6d:55:ea:52:c9:2b:a9:
69:70:3f:d2:e7:64:7d:dd:fb:1d:f6:b1:db:24:ed:e4:89:d9:
2c:ff:32:37:5d:52:34:9e:6d:1a:ad:f9:68:f3:f7:56:34:7b:
ee:06:41:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:00:55 2025 by rpki-client