Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
File: xsfkNpOlMtPW70EYbXDXpsVfut4.mft (raw, json)
Hash identifier: EliFd0YMj0BYDVR5hVUPB7YOpMulDjkBDK0gJIUI40U=
Subject key identifier: A2:0C:BC:C6:B1:AC:55:C7:33:E7:45:81:71:DC:29:59:34:74:EC:B2
Authority key identifier: C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
Certificate issuer: /CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Certificate serial: 0196B4B4440402673682DF8A91E731C06D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
Manifest number: 10BD
Signing time: Fri 09 May 2025 11:00:34 +0000
Manifest this update: Fri 09 May 2025 11:00:34 +0000
Manifest next update: Sat 10 May 2025 11:00:34 +0000
Files and hashes: 1: xsfkNpOlMtPW70EYbXDXpsVfut4.crl (hash: yPre+t1BbEGKk+pNu9gMNLde50J5tBv2Ob5o0Eb+8kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:44:04:02:67:36:82:df:8a:91:e7:31:c0:6d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7e43693a532d3d6ef41186d70d7a6c55fbade
Validity
Not Before: May 9 11:00:34 2025 GMT
Not After : May 10 11:00:34 2025 GMT
Subject: CN=a20cbcc6b1ac55c733e7458171dc29593474ecb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3b:6c:b0:9a:6f:b1:04:94:3d:10:54:ad:f6:
fd:f0:5e:32:23:d5:bb:27:bc:f8:9f:ed:d8:36:b7:
33:6b:cb:0d:5c:7c:39:ba:46:39:ab:c4:3a:20:09:
7f:6c:83:b6:53:4d:f8:a3:94:83:b0:e1:06:b9:7e:
53:b8:d3:6d:59:19:0a:89:6f:1d:0b:14:08:64:c8:
0a:2f:ed:f2:d9:cf:5d:b8:68:68:44:ce:70:cc:3e:
5a:a7:05:84:f6:03:e6:c1:09:52:28:34:76:04:0e:
4a:3e:ce:d8:9a:34:3a:88:79:02:2c:f3:7e:84:41:
6e:78:8c:9b:c3:83:16:3d:24:59:b8:2c:f5:83:24:
c4:52:0c:4b:5d:68:ac:e5:39:01:1b:05:9c:4a:bd:
c0:a3:11:29:ef:4a:36:03:c2:ff:a5:d2:85:19:f0:
77:34:7b:b9:c6:00:e7:8c:0d:04:f4:da:2a:4a:9b:
2d:bc:4b:9c:a9:61:72:2c:6e:d2:45:b6:95:cb:3b:
7b:87:71:65:94:d7:af:ab:a5:ac:27:21:b2:6e:4c:
f4:c3:a3:d4:f5:65:e8:65:bb:62:2f:c3:3d:f7:d6:
64:cd:b4:d6:a0:d9:d6:e6:88:7d:4f:54:b6:f5:a3:
8f:85:40:e3:72:31:7e:80:a5:22:ac:4b:21:d8:48:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0C:BC:C6:B1:AC:55:C7:33:E7:45:81:71:DC:29:59:34:74:EC:B2
X509v3 Authority Key Identifier:
keyid:C6:C7:E4:36:93:A5:32:D3:D6:EF:41:18:6D:70:D7:A6:C5:5F:BA:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsfkNpOlMtPW70EYbXDXpsVfut4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9dace9-3193-4358-b5e7-54ab9e95b7b4/1/xsfkNpOlMtPW70EYbXDXpsVfut4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:92:f3:fe:0a:a0:cb:bd:1a:48:b4:3b:bd:27:f0:13:b5:71:
ea:d0:c2:c1:d7:26:b7:5d:47:31:50:53:c8:af:5b:29:73:5a:
8a:0c:29:a4:09:4a:18:c0:de:85:63:25:92:41:e4:93:55:76:
fb:4d:c1:69:58:55:72:85:ef:38:57:72:63:6f:61:eb:97:9c:
e9:84:61:e4:1d:a8:cb:8d:3a:9d:0d:39:a4:b1:f0:77:f3:e0:
43:21:9d:6f:fd:42:34:cd:0f:8a:cb:18:ef:1f:96:65:ee:e3:
85:57:3e:db:bf:32:2b:e7:96:d0:af:a5:a2:16:a3:12:c8:7b:
8b:e6:d8:de:38:4a:16:77:7d:29:7e:bf:2a:76:de:9f:82:ac:
7f:60:f4:a9:f0:d9:5c:10:f6:53:34:7d:80:0a:f7:25:71:42:
e8:d0:1d:48:f4:16:9a:fc:6f:6c:85:d9:51:3c:1d:c4:99:4b:
16:13:c2:3b:b5:2c:0a:97:f1:c4:bb:c2:eb:01:b3:f2:dc:42:
55:5e:a5:47:7b:b6:de:0f:15:62:c7:85:75:da:a2:9f:04:4a:
0e:93:f6:56:1e:37:58:c8:1a:d8:59:bf:17:33:d5:d9:82:dd:
eb:df:7c:f1:fa:b5:1b:1e:d1:13:fd:d9:a5:c1:18:74:b1:e0:
6a:50:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:23:47 2025 by rpki-client