Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File: XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier: aguKuZ42ZMo7i/W7/ADTuizeVqfkppIGINgCcupCArU=
Subject key identifier: 9C:DC:BC:82:67:D8:BD:AB:12:9E:A8:00:32:CB:83:2E:6B:CC:D9:8C
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer: /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial: 01967679DFC4798027EB21038916795C3DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 09:00:20 +0000
Manifest this update: Sun 27 Apr 2025 09:00:20 +0000
Manifest next update: Mon 28 Apr 2025 09:00:20 +0000
Files and hashes: 1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: gz8J69kJm79MbWafSGof+ZQ15+DL4Qzs7maI+xpUyuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:df:c4:79:80:27:eb:21:03:89:16:79:5c:3d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Validity
Not Before: Apr 27 09:00:20 2025 GMT
Not After : Apr 28 09:00:20 2025 GMT
Subject: CN=9cdcbc8267d8bdab129ea80032cb832e6bccd98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:6f:08:b9:e0:4f:50:9d:b8:79:7d:67:94:
1b:c4:db:b1:b2:d1:28:61:b7:5c:1b:b4:51:6f:02:
ac:b7:c5:bc:dc:2d:38:8e:49:59:10:ed:e6:f5:d5:
1e:42:aa:bb:42:e1:f2:a4:5f:83:6f:49:a0:7a:f6:
62:13:ae:ea:12:5f:96:9f:a4:19:93:7b:1d:cc:39:
12:94:3f:a2:01:f3:fe:f1:02:a9:b4:2e:8c:10:a4:
ba:12:35:33:b8:87:5d:e2:8c:8f:f9:b4:39:5c:78:
d6:96:62:f7:40:fa:e0:84:d6:42:62:29:af:f4:99:
31:8a:22:c6:cb:e3:2e:2a:a2:f5:19:99:2e:b5:44:
f1:e1:17:85:43:3e:57:49:b3:b9:56:82:2a:ac:53:
0e:ed:cb:38:92:3a:21:ee:2d:36:1c:ef:c1:51:c9:
3a:fb:44:d5:f9:29:99:a8:5e:05:a7:5a:7b:62:e1:
17:34:4f:8a:8f:ed:e8:e1:50:1a:9c:88:41:ae:2c:
7b:62:f2:7d:41:1f:c8:8e:05:00:2a:9e:11:8d:8b:
2a:13:00:d6:dc:7a:ad:13:44:cd:9e:d4:8a:f3:7a:
b9:51:36:6f:46:42:18:59:d8:0e:b1:2f:3f:15:da:
78:59:e4:80:b9:45:3f:42:93:c7:d2:bb:47:c6:ef:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DC:BC:82:67:D8:BD:AB:12:9E:A8:00:32:CB:83:2E:6B:CC:D9:8C
X509v3 Authority Key Identifier:
keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b6:e3:c8:ea:f4:d4:f8:43:19:1b:dc:c6:c1:0d:66:ca:87:
f1:bf:59:b8:4c:02:72:8c:d4:78:91:6b:d9:ca:7d:90:ef:12:
3d:31:59:2d:60:15:19:be:c1:5d:3c:bf:3f:e5:8c:99:87:ef:
1b:ad:ca:bf:12:91:3a:b2:5f:8e:69:a5:12:cf:65:73:00:47:
07:95:72:53:e8:36:10:08:6a:be:07:c3:cc:57:89:f5:45:04:
8f:c0:30:ab:72:08:a5:54:0b:24:bd:4c:eb:f7:68:03:f9:e0:
5b:4c:fc:c0:50:d7:27:ea:db:ff:22:39:b4:0b:d1:e0:4a:47:
5d:f8:d6:f6:e6:8b:54:6f:f4:54:a8:3b:39:63:b1:52:56:a8:
44:84:75:4b:c4:17:55:c5:0b:de:0a:7e:23:5c:73:44:c8:36:
06:de:77:90:d0:fe:ab:77:a2:e6:aa:bb:60:cf:2f:c7:ff:72:
03:ab:ef:2c:fd:20:c7:86:d2:1b:b3:04:6d:39:41:f5:f1:1f:
16:f3:bf:b1:46:69:5d:73:56:00:c9:a3:30:f4:a2:60:6d:73:
81:c0:44:1a:27:09:49:54:ea:2e:84:1a:ef:48:d9:1d:6e:0d:
0d:ae:e4:e3:f1:7c:a7:35:92:5a:49:2b:05:e1:fc:e0:ea:14:
5d:ee:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:11:43 2025 by rpki-client