Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
File: xxovfXzIw2N0bpa8P8yLBflgb-o.mft (raw, json)
Hash identifier: ZOZ8rVDwEdAn25iiDyUCBeDolbjiTMMq7pWb+GetVmQ=
Subject key identifier: 6E:B4:E3:BE:75:2A:C8:D8:FE:6D:E1:9F:38:37:D4:1F:34:82:66:49
Authority key identifier: C7:1A:2F:7D:7C:C8:C3:63:74:6E:96:BC:3F:CC:8B:05:F9:60:6F:EA
Certificate issuer: /CN=c71a2f7d7cc8c363746e96bc3fcc8b05f9606fea
Certificate serial: 0196756752267CFC1D988F1324BB810BA309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 04:00:27 +0000
Manifest this update: Sun 27 Apr 2025 04:00:27 +0000
Manifest next update: Mon 28 Apr 2025 04:00:27 +0000
Files and hashes: 1: xxovfXzIw2N0bpa8P8yLBflgb-o.crl (hash: lwibILy/FCq6ie3fHLfWl9K69xHoviM8EXb1vKJoadg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:52:26:7c:fc:1d:98:8f:13:24:bb:81:0b:a3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71a2f7d7cc8c363746e96bc3fcc8b05f9606fea
Validity
Not Before: Apr 27 04:00:27 2025 GMT
Not After : Apr 28 04:00:27 2025 GMT
Subject: CN=6eb4e3be752ac8d8fe6de19f3837d41f34826649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:d5:9d:e6:53:7b:d6:fb:85:3c:d4:78:fb:
b8:bf:7f:b9:63:f3:cb:dc:bc:f5:d5:d9:61:c7:24:
1b:74:42:43:0b:5e:42:68:6b:f8:c5:98:4c:f3:9f:
6f:fa:b2:b3:74:51:2e:5e:e2:02:97:99:dd:3f:e2:
62:c4:4a:d0:72:66:20:0e:2d:26:e8:69:60:62:dd:
00:ec:3c:f8:84:16:fd:40:8a:ee:6e:b4:5e:23:83:
38:2b:37:37:4b:8f:4e:79:97:8b:f3:a5:73:32:ea:
2a:36:46:08:03:30:bb:d8:7f:24:5a:34:48:6f:1b:
5a:92:6c:98:10:0f:65:64:54:98:48:f8:63:a7:52:
29:e9:4c:b3:6a:05:56:93:4b:82:b9:2f:9d:5d:30:
21:e7:d3:15:ae:1a:18:3c:df:54:61:5c:72:69:5c:
ba:4f:39:dd:96:6c:89:c8:d9:1b:b8:a6:6f:19:3e:
56:2e:f0:d7:12:fa:11:19:5c:f5:b7:9f:6d:92:c4:
cb:09:11:79:bc:72:d5:9a:91:49:15:cc:09:e0:e9:
f5:1d:c7:06:67:35:fc:57:48:52:31:36:02:2f:54:
f5:fe:c2:f3:7d:ae:38:19:3b:84:4e:45:4d:e0:56:
3d:2f:c7:83:93:63:6e:5b:0f:4d:7b:92:d0:26:80:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B4:E3:BE:75:2A:C8:D8:FE:6D:E1:9F:38:37:D4:1F:34:82:66:49
X509v3 Authority Key Identifier:
keyid:C7:1A:2F:7D:7C:C8:C3:63:74:6E:96:BC:3F:CC:8B:05:F9:60:6F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxovfXzIw2N0bpa8P8yLBflgb-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0dc925-a33b-4d3a-add3-d6d140e4ce6d/1/xxovfXzIw2N0bpa8P8yLBflgb-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c0:fd:1b:d4:bf:f1:f5:9f:11:39:53:73:dc:a1:ba:26:d7:
6a:0c:ec:29:05:79:86:71:5d:0d:5f:57:ed:81:09:40:a7:a4:
61:38:4c:b9:08:76:22:82:13:59:0c:79:42:10:ef:aa:e0:82:
ca:18:96:28:23:57:a2:ab:79:38:b8:92:3f:79:f5:a9:5d:17:
6c:19:63:00:a8:16:9f:a1:b7:7e:bd:1f:ba:56:88:94:32:38:
b7:2a:1f:90:f0:c3:52:72:19:45:1d:0d:d6:b0:f7:f3:a2:5b:
99:cd:e9:eb:16:2a:b4:a0:46:63:9e:aa:e1:6e:0a:34:ff:55:
d1:ca:08:9d:0b:59:ab:97:02:03:40:00:12:ca:f6:2f:81:db:
72:b8:27:f5:f5:a4:54:79:dd:1a:d4:1b:c1:85:ed:f5:e9:31:
4c:25:a2:92:ca:06:a4:91:1b:ff:05:b3:99:57:45:cf:7c:d6:
11:aa:58:50:64:48:0f:b0:37:5e:7c:cd:f1:53:68:c8:79:08:
02:c3:38:3a:04:b3:a0:4e:de:d1:58:92:c7:82:a8:e8:e8:32:
d5:e3:15:de:ca:b7:d5:95:f9:fd:3e:95:39:bf:33:b7:0d:52:
19:45:8d:f3:60:e3:56:17:2e:cd:fb:96:d1:8b:1f:f2:70:58:
e0:58:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:07 2025 by rpki-client