Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json)
Hash identifier: zIPDivWEJa4ZLFDgIEJOUmhxe5eOsVB4YmdfP6I5NO4=
Subject key identifier: 6D:96:F8:52:1B:10:81:AC:1D:06:A1:59:B2:07:C9:0C:56:47:11:03
Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424
Certificate serial: 019677FBA5203BCAFF14D7F82A5EEEB3D0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
Manifest number: 0960
Signing time: Sun 27 Apr 2025 16:01:42 +0000
Manifest this update: Sun 27 Apr 2025 16:01:42 +0000
Manifest next update: Mon 28 Apr 2025 16:01:42 +0000
Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: +tXNU9whE22eD9TcWuQOeFTctwsfp4v68eHAbi6MxFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:a5:20:3b:ca:ff:14:d7:f8:2a:5e:ee:b3:d0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424
Validity
Not Before: Apr 27 16:01:42 2025 GMT
Not After : Apr 28 16:01:42 2025 GMT
Subject: CN=6d96f8521b1081ac1d06a159b207c90c56471103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:2c:38:0a:e0:98:53:15:f8:94:8a:ba:bb:
e2:d3:fc:df:bf:0d:2b:e1:e7:4e:f8:3d:59:14:d2:
f1:c1:ec:03:39:46:b4:34:dd:5c:39:58:12:84:7f:
75:77:4e:0e:af:de:3a:ba:96:d8:e8:bd:dd:37:67:
64:d4:f9:b7:c1:d7:dc:61:8f:64:2c:b9:40:d4:92:
14:0c:f5:5c:8e:58:ab:b7:41:1a:a9:9f:b0:dd:b0:
02:b9:e6:af:75:5e:64:a1:c2:31:a4:13:da:a7:5d:
7c:a7:10:6f:5d:c3:ce:85:87:78:29:7d:7a:4c:ee:
9a:4a:a5:16:62:f4:2c:6b:e6:48:9e:e4:55:07:f7:
33:84:23:a0:71:e4:5d:b9:05:54:55:3b:dd:eb:4c:
b2:64:b6:0c:cd:05:2d:d8:48:50:3b:e3:09:9f:3e:
ca:a9:fe:bf:fe:bd:52:10:52:76:8d:4d:f4:a4:bd:
ed:91:79:92:be:3c:60:9b:b7:4f:d4:c5:bb:05:32:
53:1c:35:61:dd:41:73:b6:f9:f1:dc:64:23:a6:92:
2f:61:3c:4d:e3:6c:b7:84:49:ce:8d:73:76:97:6d:
0f:ff:ba:06:28:4c:b1:34:54:30:dc:78:c5:66:c3:
89:83:7c:d1:8c:6f:cf:5b:c8:06:ef:73:c9:a7:07:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:96:F8:52:1B:10:81:AC:1D:06:A1:59:B2:07:C9:0C:56:47:11:03
X509v3 Authority Key Identifier:
keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e7:e4:5f:a5:97:af:fd:31:38:87:34:c4:99:12:8c:bf:d7:
86:44:ba:6c:58:bd:42:48:98:08:1e:a2:37:f5:b5:fc:55:94:
a4:9d:f6:3f:90:ab:62:41:88:14:d7:34:64:55:28:a0:e5:da:
2c:e9:c5:de:e1:52:d5:1d:0c:f2:29:9d:65:cf:6c:52:ad:b9:
f8:32:9b:70:31:f0:cd:28:f8:de:36:fb:14:c0:88:5f:51:48:
82:ed:bb:a4:9b:f1:52:03:63:98:72:91:e5:a8:05:ce:17:e6:
bb:29:5e:df:1c:2c:92:72:c5:19:47:9e:3a:f5:2b:49:2f:a6:
40:99:48:ac:fa:a5:07:fd:27:b4:ee:10:5c:00:1c:b4:e3:db:
5c:3c:a3:66:db:67:f0:a8:65:63:e8:05:a2:6c:f3:25:08:6e:
94:31:a3:74:cb:09:f3:fe:06:a1:7c:90:69:eb:3b:6b:1c:5e:
ad:bd:37:73:8e:41:c9:c4:26:3c:f9:e8:96:7f:39:5c:07:de:
3d:af:61:f7:a1:7a:1e:9f:66:35:2a:16:1e:f1:97:6c:cb:c8:
78:50:d9:11:89:90:74:1a:ab:db:96:0b:f7:a2:80:35:03:7e:
85:95:a4:29:59:6b:fd:1f:d1:11:ff:5f:09:c6:46:ca:0e:95:
91:83:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:53:53 2025 by rpki-client