
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
File: xLMV8myhzbhEERaAw88EN7TBJ-Y.mft (raw, json)
Hash identifier: rD2Up0Qoy3D4me33uG4BbTGAia/tCJZvZRIR7qezapk=
Subject key identifier: 5F:88:80:0E:93:C8:8D:35:DC:7F:50:BC:76:C4:18:E6:D5:19:4A:B8
Authority key identifier: C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
Certificate issuer: /CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Certificate serial: 0196993CB089240D26D4CFEAB13939989554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
Manifest number: 0128
Signing time: Sun 04 May 2025 03:00:13 +0000
Manifest this update: Sun 04 May 2025 03:00:13 +0000
Manifest next update: Mon 05 May 2025 03:00:13 +0000
Files and hashes: 1: xLMV8myhzbhEERaAw88EN7TBJ-Y.crl (hash: 7KHyDwLiF8OJ8yst5X4elNR5Jjh1xC5K+5aCkTBPQbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 03:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:3c:b0:89:24:0d:26:d4:cf:ea:b1:39:39:98:95:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b315f26ca1cdb844111680c3cf0437b4c127e6
Validity
Not Before: May 4 03:00:13 2025 GMT
Not After : May 5 03:00:13 2025 GMT
Subject: CN=5f88800e93c88d35dc7f50bc76c418e6d5194ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0a:78:75:14:0b:97:e6:54:a6:ea:ab:02:31:
6e:bc:ea:a3:b8:94:36:9a:2e:c2:19:55:ac:d5:a9:
3b:09:c6:af:9c:bf:c4:64:57:5c:22:53:40:54:ac:
20:7a:28:f1:3c:c2:84:01:7d:e1:2d:dd:3f:d5:7b:
85:33:51:2d:a8:14:aa:a8:de:9c:de:66:6f:31:1f:
ea:f0:2d:30:8b:3b:c8:d4:8f:c4:96:0f:d3:ef:6b:
34:cb:17:8f:1d:26:36:cc:e3:3f:fe:9b:c8:85:1e:
17:f6:e0:35:1b:05:14:43:7f:4a:a9:f5:52:d5:e1:
65:b0:a6:78:c0:0e:db:73:91:85:d4:03:6b:98:07:
46:9e:cd:79:de:3c:8b:76:33:8e:5a:98:80:01:85:
cc:cf:ad:43:f1:1a:a8:74:1e:ed:85:48:f3:e7:51:
4d:0b:fe:7e:f9:be:6f:75:50:cf:d9:c4:a6:2c:a5:
b9:04:80:f5:d9:8d:f9:2a:2b:bc:72:c0:fc:db:58:
43:06:71:53:34:aa:24:d9:4d:c9:29:27:4d:38:a2:
de:dc:e3:7a:3b:39:79:58:59:b5:fe:57:b9:d7:37:
44:52:50:d1:b1:ad:69:d9:52:1a:ab:7d:4a:35:90:
c1:3a:44:4c:76:ab:f7:11:29:9b:59:a1:b8:49:fa:
48:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:88:80:0E:93:C8:8D:35:DC:7F:50:BC:76:C4:18:E6:D5:19:4A:B8
X509v3 Authority Key Identifier:
keyid:C4:B3:15:F2:6C:A1:CD:B8:44:11:16:80:C3:CF:04:37:B4:C1:27:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLMV8myhzbhEERaAw88EN7TBJ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/10aa3d-1952-4dde-80d7-1163fc3a221e/1/xLMV8myhzbhEERaAw88EN7TBJ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f9:14:51:ad:a1:72:4c:36:cb:62:29:1d:e3:e9:94:fe:05:
8c:23:66:f0:08:50:56:11:2a:23:75:78:07:85:43:01:63:79:
8f:0a:3a:0b:cd:bb:c2:15:5c:61:4d:ab:61:6c:78:07:a3:87:
7d:90:d1:dd:ee:66:45:5f:ff:f3:e0:64:39:60:ad:3e:98:13:
ba:73:f5:6e:2c:8e:aa:df:f4:e1:bb:92:43:78:e2:85:8e:4e:
5e:28:2d:0a:b6:99:8b:8a:e2:f7:5c:ae:52:b3:f3:83:cb:4c:
4c:2a:b3:b1:a5:b3:41:af:c0:14:ce:cf:b0:02:36:48:03:0d:
8b:10:be:7f:8c:9d:1d:46:72:2d:91:de:07:15:78:c8:da:81:
c0:3e:4d:6c:ce:63:33:48:b4:d0:0c:b0:55:7b:29:5f:32:be:
7a:25:63:6c:e0:26:84:24:26:af:1b:fb:ea:91:22:8f:d3:49:
c6:82:70:f9:db:86:6f:87:a8:a2:df:f2:55:65:46:98:2f:4e:
70:cb:1d:79:cf:40:09:de:95:11:3c:4c:0d:93:70:7a:8f:43:
de:cf:b2:52:b2:93:2a:ba:c0:21:33:cb:b2:a0:2f:a6:c1:cd:
34:d4:7a:10:5d:cc:49:99:52:d2:fc:13:b4:a6:06:38:15:c2:
6b:87:48:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:37:28 2025 by rpki-client