Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
File: XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json)
Hash identifier: vHGQQZRvg/7PbSPwb03PWuv7DkxHwCMmTCjH6OG2lNE=
Subject key identifier: 15:99:17:E9:37:FD:65:14:90:84:4B:F2:94:AD:BD:E6:47:B9:95:E3
Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
Certificate issuer: /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Certificate serial: 0196895BEF57533BFB705EDD82E04F75D739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
Manifest number: 07A7
Signing time: Thu 01 May 2025 01:00:25 +0000
Manifest this update: Thu 01 May 2025 01:00:25 +0000
Manifest next update: Fri 02 May 2025 01:00:25 +0000
Files and hashes: 1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: arTVNDlZWuECecOe7zc9rqAbU8HySIT+rumUBkGEEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5b:ef:57:53:3b:fb:70:5e:dd:82:e0:4f:75:d7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a
Validity
Not Before: May 1 01:00:25 2025 GMT
Not After : May 2 01:00:25 2025 GMT
Subject: CN=159917e937fd651490844bf294adbde647b995e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:cf:68:6f:7c:81:41:44:81:a4:8f:66:c9:
b5:a6:10:6f:bb:41:7a:26:10:48:54:f6:18:0a:be:
d0:5a:b8:1b:58:52:86:8c:f6:a7:e1:77:33:c0:0c:
5d:a2:92:47:8e:7d:ec:e4:7c:f9:a9:fa:e9:c7:5b:
e5:34:ae:e4:9b:9f:cb:71:b5:36:bd:fb:e9:7f:95:
10:1c:6c:1c:55:01:46:f0:99:49:22:e6:1b:31:0c:
b6:ff:14:0c:19:c9:d6:e4:47:75:02:07:1e:12:6b:
53:6b:15:c6:c8:6b:2b:e6:48:ff:ad:89:92:70:73:
55:7c:57:8d:96:b0:a1:8d:4a:9b:d1:cf:47:df:aa:
a6:92:9f:f1:6e:27:7d:e5:fb:61:52:d9:6f:b0:e0:
f3:5a:46:48:9a:fb:d0:3e:b6:60:9b:9c:12:29:b1:
3e:c6:b5:30:8d:a2:35:cf:a1:00:27:57:c4:3b:d1:
0b:17:6e:5f:59:f0:47:76:b7:76:cd:47:6a:00:58:
d1:8a:49:a6:2e:c3:5d:22:cd:2c:e5:0b:01:85:cc:
25:16:3e:3d:82:3b:51:31:7e:68:8a:02:23:1b:6f:
4a:c8:9c:c8:ec:ac:57:3b:a3:42:aa:77:e5:ed:ba:
20:ea:30:a5:21:d4:44:7b:0c:88:20:e1:1b:b7:29:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:99:17:E9:37:FD:65:14:90:84:4B:F2:94:AD:BD:E6:47:B9:95:E3
X509v3 Authority Key Identifier:
keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:12:f7:29:d2:d7:43:11:f4:66:64:1e:9f:eb:ff:a9:06:03:
2b:0a:ac:57:72:61:55:46:55:c2:66:34:5d:a0:23:03:1a:15:
57:fd:76:41:b1:22:a1:52:d1:89:6a:df:2b:9b:cf:d9:12:67:
b9:1c:53:25:50:12:38:13:d4:56:3b:9a:fc:43:7a:25:b8:05:
13:fd:43:f2:31:b3:e2:b4:f3:a2:eb:21:d8:8e:b5:ce:f7:69:
80:de:3e:fc:92:7a:2a:9a:fe:83:ed:3a:25:f6:60:64:dc:f9:
27:1a:84:7e:d2:6a:2d:94:ee:6e:50:e5:d1:a1:d3:a8:3a:ba:
d6:99:ba:60:6b:2a:ce:2a:30:34:64:99:27:db:97:47:f8:3a:
f9:d3:b6:e7:b2:0e:28:7d:25:5f:7f:d3:7e:88:8e:d8:b3:63:
f0:3c:06:56:82:a3:33:07:f5:30:f7:5f:eb:fd:a5:17:67:99:
a3:50:83:a4:02:ca:58:49:63:b5:aa:80:ef:d7:24:38:b2:b2:
c6:54:d5:3c:38:c2:28:d4:c4:19:c6:4c:3d:c6:ea:0e:79:da:
aa:fc:83:ac:2d:1d:b9:b6:4a:7e:a3:d6:af:be:a9:43:29:4e:
41:ac:25:e7:a7:6c:dc:6a:10:ab:e0:23:96:07:f3:fb:8b:93:
e5:15:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:47:58 2025 by rpki-client