Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
File: xlkRwmkydt2NDOt_hKoqtJ79EIk.mft (raw, json)
Hash identifier: F6uSPfJ3f98bISD9FHxD35LqFXqrURgqpxKzw7W0ufQ=
Subject key identifier: DA:81:88:B9:D9:DC:0C:F2:67:F0:DB:11:EB:C1:44:91:4B:F0:1E:C9
Authority key identifier: C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
Certificate issuer: /CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Certificate serial: 019680901C0F17F0FABA00489C98440F98E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
Manifest number: 0311
Signing time: Tue 29 Apr 2025 08:00:49 +0000
Manifest this update: Tue 29 Apr 2025 08:00:49 +0000
Manifest next update: Wed 30 Apr 2025 08:00:49 +0000
Files and hashes: 1: xlkRwmkydt2NDOt_hKoqtJ79EIk.crl (hash: yPx36epGXE6h5lDHYea+VLGW9hVFKTaFLMzNJSCfD3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:1c:0f:17:f0:fa:ba:00:48:9c:98:44:0f:98:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089
Validity
Not Before: Apr 29 08:00:49 2025 GMT
Not After : Apr 30 08:00:49 2025 GMT
Subject: CN=da8188b9d9dc0cf267f0db11ebc144914bf01ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:ca:ec:0f:d5:60:db:7a:fc:4b:c2:ec:e1:
fe:df:4b:10:85:db:17:27:1e:a6:4a:33:6c:4d:c1:
b9:0a:92:eb:3b:56:56:71:0d:b1:34:d6:7b:29:44:
52:96:60:72:5c:3f:93:dc:d7:77:2e:41:fa:09:67:
fe:49:11:58:47:a0:10:b2:f8:14:37:d5:c5:a1:fc:
49:0e:27:8e:21:85:a8:49:74:f8:2b:0c:99:5e:97:
f1:25:7e:1a:fd:66:e2:58:73:1a:94:0a:50:30:48:
e2:65:80:c5:b4:48:5f:c4:12:84:94:dc:b7:47:87:
d1:51:11:00:3e:03:2a:a0:6a:96:46:78:f3:c3:30:
37:4d:c3:15:ab:8a:aa:2d:7d:ef:8f:2d:57:7a:6d:
3a:6d:f7:37:8f:ab:5c:57:5e:4a:f9:b2:16:28:78:
3e:fc:44:e4:30:90:86:a9:fa:a1:25:41:87:28:90:
e8:45:d5:8d:ae:24:97:e9:51:1b:51:97:05:08:34:
ae:a9:2c:08:31:d3:37:c2:29:44:f2:90:62:1f:83:
4a:52:71:ff:f1:99:ce:7c:29:3f:87:50:db:33:55:
13:fd:48:cb:00:04:f5:26:33:ff:75:58:c8:19:fb:
35:70:00:6d:32:72:7f:81:b4:d0:1f:1e:72:62:5f:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:81:88:B9:D9:DC:0C:F2:67:F0:DB:11:EB:C1:44:91:4B:F0:1E:C9
X509v3 Authority Key Identifier:
keyid:C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e2:13:cf:24:33:10:b0:87:16:c0:87:79:33:2c:84:5b:ab:
7d:a2:11:38:9b:9c:7d:74:a9:1f:ca:37:16:b3:1f:c0:4b:22:
3e:57:8d:54:45:cb:2b:bd:9a:1b:02:8c:1c:c6:0b:9d:39:d7:
de:ab:ca:8a:81:99:7d:8c:24:c0:3e:90:bc:c7:23:e1:b0:25:
db:92:78:c9:b2:b1:8d:cd:94:f0:5c:98:2b:7e:73:a6:4e:25:
30:89:4e:8b:c3:5a:42:13:37:60:2d:05:74:83:60:ac:4e:ca:
bf:22:54:e8:6d:64:9f:88:c9:94:cb:91:39:32:a2:94:07:06:
96:34:ca:9e:98:12:b2:ba:36:07:23:f0:73:68:5c:60:94:3a:
29:62:ac:cf:07:a9:cc:67:55:61:97:51:de:1a:96:5a:39:88:
d6:fb:8e:cf:06:d7:99:dd:0f:ca:7f:c3:7b:86:ea:06:95:ea:
d4:07:9d:92:cd:f9:cd:81:67:a6:be:db:73:38:a2:78:77:68:
89:55:d3:9d:c4:86:7d:e9:4a:5e:a9:09:f0:c2:0f:6c:6d:00:
05:61:47:87:99:51:c7:e8:33:61:d8:72:1e:48:22:b9:fe:ce:
8b:32:cb:49:73:af:44:d6:b3:1d:a8:03:b3:b2:7a:1a:3c:5c:
02:ed:2a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:47:08 2025 by rpki-client