Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
File: xuqBSpkqcfWiqb7872b8YiDxePc.mft (raw, json)
Hash identifier: FT/WcnmsVQJ0nxmJXJmRRjg1GwEc0EbkMkmv/bEo7aA=
Subject key identifier: BD:E2:4F:24:AD:5E:83:64:1F:2B:3B:44:0E:E9:4D:08:91:19:1E:57
Authority key identifier: C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
Certificate issuer: /CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Certificate serial: 0196748BEFD7D0360C680B8D7021CC1E3EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
Manifest number: 10F5
Signing time: Sun 27 Apr 2025 00:00:49 +0000
Manifest this update: Sun 27 Apr 2025 00:00:49 +0000
Manifest next update: Mon 28 Apr 2025 00:00:49 +0000
Files and hashes: 1: xuqBSpkqcfWiqb7872b8YiDxePc.crl (hash: 4sLEIyqtt83wbhxxTbMH6otnoQDLtSytoJEzKj2mldM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:ef:d7:d0:36:0c:68:0b:8d:70:21:cc:1e:3e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7
Validity
Not Before: Apr 27 00:00:49 2025 GMT
Not After : Apr 28 00:00:49 2025 GMT
Subject: CN=bde24f24ad5e83641f2b3b440ee94d0891191e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:6a:b9:ca:b0:9c:71:09:0a:1c:9a:8c:94:
75:2d:9a:a4:14:79:7d:29:96:d1:35:c2:43:e3:4d:
6a:55:b9:b1:5d:d4:10:2c:d5:7f:47:14:03:86:6c:
84:39:f4:d1:62:2c:aa:60:05:e8:65:d5:ac:cb:04:
09:95:c3:6a:5c:a5:64:42:13:fc:4a:94:ec:65:13:
91:4c:87:0a:06:b7:ac:d0:6b:9c:47:cf:ad:31:7f:
40:48:26:40:68:01:cf:c9:e8:cc:87:3a:f1:e9:c7:
87:5d:6e:4a:c0:f2:2c:9c:a2:66:41:99:a8:6d:30:
01:74:68:dc:e5:28:47:48:57:e0:85:b0:a9:77:63:
e1:5e:df:d3:e4:19:2f:f7:76:05:42:a0:ef:69:05:
f3:8b:12:cc:da:55:6c:96:4d:c2:7a:96:26:79:40:
aa:7c:e0:84:be:96:95:f2:c6:47:19:48:e1:03:5f:
fc:e0:e4:f3:f8:9b:06:9c:73:8e:d9:38:c9:9f:ca:
3a:d7:24:68:15:40:ce:b5:e2:a6:19:bc:c3:2f:ce:
6b:c9:25:d8:5c:81:8c:3b:67:4c:45:14:2a:16:96:
73:4b:25:d0:d7:00:5b:ec:d5:12:d1:22:71:66:5e:
15:f2:f7:56:eb:93:19:05:52:44:75:06:b1:89:fd:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:4F:24:AD:5E:83:64:1F:2B:3B:44:0E:E9:4D:08:91:19:1E:57
X509v3 Authority Key Identifier:
keyid:C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f2:4c:77:2b:92:c9:f2:fc:79:09:c4:1b:b7:14:c7:30:80:
89:8d:35:75:c1:d9:8d:79:68:9b:dd:d0:54:11:9f:83:0d:15:
93:94:66:46:f7:3d:e0:96:76:8a:48:02:c3:c7:14:77:3d:4c:
da:3b:45:36:02:10:60:23:98:dd:a1:ab:f2:c7:29:d7:73:9c:
a1:e5:83:9e:61:d3:14:6f:75:74:8d:d6:cd:95:46:00:3f:e2:
35:57:d3:4e:70:d0:dc:d2:bb:63:b9:8f:14:df:d2:09:98:e7:
ac:83:64:a0:67:ea:f6:81:ea:e1:24:99:91:97:51:32:83:35:
c3:77:a1:c9:4f:89:94:cd:13:4e:7b:08:3d:47:b9:0e:80:71:
3a:81:fd:9c:a5:14:76:5b:c4:a7:39:05:15:0b:85:c6:d4:29:
28:3b:73:4b:f9:43:c0:23:70:8d:6c:0a:04:58:70:ed:bb:b9:
b6:4a:55:19:d8:41:66:e5:65:a8:69:d9:28:b7:2e:bc:e4:e4:
04:f1:49:52:61:65:09:54:c6:86:7e:b8:e5:c3:2f:79:b9:62:
ff:69:14:f8:dc:6f:01:ce:53:62:1a:31:4e:fb:f5:ab:d5:cd:
3c:a0:66:cd:cf:c8:43:0a:f3:94:b8:09:a0:7d:ad:8d:f7:6b:
fc:ad:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:22:00 2025 by rpki-client