Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
File: xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json)
Hash identifier: ijSqHPrdmUheqWVUEm9J+vkY/m00kQmcE9w6jnFLwaA=
Subject key identifier: 2E:50:0F:D4:DA:17:91:E2:01:5A:E3:BA:09:8E:51:6B:79:82:56:93
Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
Certificate issuer: /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Certificate serial: 0196827E23CDE11140768762DF4F7B90D2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
Manifest number: 0574
Signing time: Tue 29 Apr 2025 17:00:26 +0000
Manifest this update: Tue 29 Apr 2025 17:00:26 +0000
Manifest next update: Wed 30 Apr 2025 17:00:26 +0000
Files and hashes: 1: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: ii2blv6dg+uxSwLUeZYSjM8hzjUy1GG70jLJSkgjx5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:23:cd:e1:11:40:76:87:62:df:4f:7b:90:d2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7
Validity
Not Before: Apr 29 17:00:26 2025 GMT
Not After : Apr 30 17:00:26 2025 GMT
Subject: CN=2e500fd4da1791e2015ae3ba098e516b79825693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:89:b4:bc:30:0c:e8:fa:15:5f:f8:8c:22:
e2:34:08:50:36:36:69:b2:b3:6b:5e:e7:2a:eb:3d:
45:b7:34:95:8a:09:90:a3:2c:de:27:43:d5:e8:81:
4b:99:b4:49:84:c4:58:63:f3:79:b1:7b:86:44:df:
fd:5d:4d:fe:6f:41:91:25:a7:2b:94:d7:84:eb:76:
54:2b:e1:d4:2c:ff:44:e4:21:09:c7:13:d0:61:a0:
81:98:be:22:a3:0e:a7:c7:31:b3:3e:23:46:af:af:
2e:ee:ee:99:83:63:74:52:4b:e5:95:3b:15:b0:3c:
54:29:b4:92:6d:d9:90:29:cd:4c:0c:87:e0:a8:0b:
b9:f2:ad:03:87:c4:fe:63:e3:0e:5f:a2:69:ea:4a:
46:81:05:e9:73:be:61:f6:1a:d6:72:40:06:83:93:
2d:66:81:12:81:f3:85:78:7c:a3:fa:ab:a0:9d:63:
24:ce:9e:51:af:81:45:3d:93:99:8c:ff:25:13:2a:
4b:50:58:b3:40:0a:e3:62:c5:dc:28:02:7d:ea:04:
39:30:0f:61:58:83:c4:11:34:ed:92:c8:bf:ac:79:
c4:d8:2f:3a:15:f7:fa:22:1b:97:99:c3:5d:35:fa:
93:68:22:0f:5f:a8:9f:2f:5e:cf:37:07:3e:f9:73:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:50:0F:D4:DA:17:91:E2:01:5A:E3:BA:09:8E:51:6B:79:82:56:93
X509v3 Authority Key Identifier:
keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7b:8a:25:b8:1d:8d:ae:09:ae:e6:2d:d2:6e:49:06:b8:a8:
0a:fd:85:2d:29:65:9b:6a:e5:a7:b9:c5:80:ca:ff:c6:3f:a9:
f4:26:22:38:3d:e9:bc:5d:c6:2a:f4:18:53:3a:d1:58:8b:e4:
61:69:1e:78:39:25:d5:55:5d:9d:30:38:2e:aa:35:6b:29:c0:
99:46:3d:0e:32:c5:e0:69:81:ba:2a:64:36:de:5b:43:f9:50:
b1:47:88:49:34:d0:4f:40:f6:11:47:0a:69:7e:25:6e:f1:1b:
3d:9b:5c:e2:15:cc:59:84:a3:d7:fe:2d:7a:b4:83:71:9b:95:
05:9e:8d:fd:81:ca:a9:51:14:bb:6a:12:26:8f:9a:d5:fe:ba:
00:04:f8:71:76:6f:da:8e:c4:4b:0b:38:cb:b4:10:2a:df:a5:
9e:c7:53:79:67:75:85:ac:f2:0c:c8:3d:99:a5:bf:b9:8e:d8:
98:5a:ec:83:8f:9c:83:67:50:f4:fe:8f:29:e3:a9:02:d6:bc:
ce:8c:ae:53:19:c3:c3:9f:ee:68:8e:65:f1:86:24:0b:6e:40:
9d:01:60:3c:e2:4b:04:dd:6a:cb:d1:4b:08:39:b6:fb:a7:dc:
eb:2c:56:f6:e8:23:e7:77:7f:e6:d6:e2:12:c0:56:b5:7a:77:
01:5a:32:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:19:37 2025 by rpki-client