Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: BAgHC14ewdKMmgIzKPx8q/IOuB1pa/8g03b7n4QlMXo=
Subject key identifier: 91:B2:DB:14:FC:FB:CA:4A:5D:40:D5:FC:B2:31:F2:54:5A:F9:46:3D
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 019684A349405E6AC204A11DBACD832F492E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 1362
Signing time: Wed 30 Apr 2025 03:00:15 +0000
Manifest this update: Wed 30 Apr 2025 03:00:15 +0000
Manifest next update: Thu 01 May 2025 03:00:15 +0000
Files and hashes: 1: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: 87Zy9Nl1ilbAlXtZ2/F3Tr/EWsGWrSaV85zlFg26ZS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:49:40:5e:6a:c2:04:a1:1d:ba:cd:83:2f:49:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Apr 30 03:00:15 2025 GMT
Not After : May 1 03:00:15 2025 GMT
Subject: CN=91b2db14fcfbca4a5d40d5fcb231f2545af9463d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:2a:59:70:92:bb:7b:00:eb:1c:e3:ae:ec:
24:84:45:36:a4:51:f9:f7:ae:fb:62:f8:82:a1:cf:
57:d6:97:5c:9e:11:3f:9c:01:0f:54:38:f4:9c:7e:
19:67:67:9f:f9:37:6f:73:6e:8d:7c:f8:5c:31:a1:
df:3f:37:e6:27:97:51:f2:81:1b:2c:7d:ca:9b:8d:
c1:72:3f:26:28:dc:14:c4:85:2d:6d:b6:36:93:76:
42:e6:85:5d:7d:cb:80:ca:3e:ec:b3:1f:9e:51:e8:
a5:9c:0b:73:b8:10:37:62:6f:ab:8d:f3:01:4d:b7:
24:c2:5a:79:4e:bb:6f:ea:1f:94:9e:07:6d:07:ab:
57:f6:60:ce:e6:a4:64:dd:b8:ad:3b:b7:a4:07:76:
be:a3:8d:44:5b:b1:37:8a:03:15:4c:c8:a0:88:da:
eb:00:d6:a9:21:44:ee:70:72:2a:ae:b7:5d:69:3a:
ca:b1:e9:bb:50:a9:04:7d:6c:f6:1a:10:a0:d0:92:
d0:ff:f3:53:52:8b:88:f5:27:31:87:47:5e:f6:54:
9b:93:b8:82:c3:c2:e1:27:cf:d1:af:94:29:4e:ab:
f7:98:56:e0:dc:8b:4d:ca:8b:26:70:e8:49:88:04:
43:af:26:75:0c:5f:60:de:ce:e4:20:75:cd:bb:be:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B2:DB:14:FC:FB:CA:4A:5D:40:D5:FC:B2:31:F2:54:5A:F9:46:3D
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9d:2d:51:15:4a:21:1f:a9:d1:b7:5e:2e:ab:fe:47:06:34:
8e:bc:3d:69:f9:b9:92:0c:27:9f:ee:31:45:a4:cc:26:4d:31:
7c:04:5b:69:ba:cd:22:c3:d8:3b:74:d4:bd:0d:f4:d6:00:ba:
34:48:25:c1:5a:52:05:4e:a6:ab:78:ce:5c:03:27:50:f8:0d:
a5:55:69:5e:30:22:29:b3:8a:84:4f:cc:30:52:51:22:ae:ca:
30:78:8c:06:2b:2a:44:1d:3c:2f:e0:b0:03:f0:99:22:18:b6:
f7:6f:77:ad:db:a9:0f:d2:cf:ea:11:ee:76:d7:b8:2d:50:04:
81:b0:10:fd:01:04:28:e1:f1:37:67:f5:9a:6a:42:b1:09:cb:
50:21:d3:d2:77:af:50:b9:1c:4f:5c:8d:ed:bd:ca:91:f5:40:
c9:ad:2a:fe:d7:b7:93:88:ff:10:1f:d8:53:21:73:ca:99:91:
61:34:26:ee:31:01:a8:55:47:97:0d:d7:5d:c3:5f:44:76:42:
bf:21:56:e3:4e:76:f3:b7:e4:55:6b:76:eb:f1:d1:62:54:1f:
11:ed:97:12:8c:49:f4:e7:0a:2f:66:ea:11:0c:c2:50:f5:db:
be:2a:a4:fc:35:94:03:38:25:5f:d5:ac:0d:c7:c7:0e:2b:8c:
d6:b6:c2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:25:13 2025 by rpki-client