Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json)
Hash identifier: Qp7s2mBvrtbiHyjEN9oV2zgChJgTOPu0o6AQdDpCD5M=
Subject key identifier: 1E:53:48:07:2C:9A:9A:6D:0D:FB:9F:91:54:48:09:35:0A:2D:6C:0F
Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Certificate serial: 019682103CE2C0CBE4CE128703702173FFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
Manifest number: 022F
Signing time: Tue 29 Apr 2025 15:00:24 +0000
Manifest this update: Tue 29 Apr 2025 15:00:24 +0000
Manifest next update: Wed 30 Apr 2025 15:00:24 +0000
Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: r+vhNH+y6dP8VycAFzwB5hUjbwzxWmsXupT9WO8yLJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:3c:e2:c0:cb:e4:ce:12:87:03:70:21:73:ff:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4
Validity
Not Before: Apr 29 15:00:24 2025 GMT
Not After : Apr 30 15:00:24 2025 GMT
Subject: CN=1e5348072c9a9a6d0dfb9f91544809350a2d6c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:92:0a:d4:91:9a:7b:d9:82:1e:6b:82:78:1d:
64:67:00:75:c8:45:55:a3:fe:77:90:6e:a7:2e:9e:
db:db:d2:f5:2b:94:aa:69:5e:b1:97:81:ca:17:2c:
39:3d:4c:61:9e:4f:56:04:f6:27:4a:a3:c8:29:ba:
e3:50:ad:43:fe:c2:8a:04:68:bd:86:94:79:83:88:
35:c3:2b:e1:8d:8e:db:43:85:11:48:a6:ea:ec:6c:
1c:c1:e3:e6:3a:6a:4b:d4:63:8d:8d:60:62:c2:27:
df:6e:a5:15:f9:84:3f:d5:dc:01:8b:48:e6:ac:13:
b0:04:2b:5b:0b:2c:90:c2:6f:72:a8:a7:76:4f:47:
88:f4:a1:7f:24:6e:06:ec:eb:d3:51:4b:30:ba:d6:
27:16:87:21:86:0d:53:37:a4:b6:ce:ce:bc:04:bb:
23:e3:ec:73:1b:7a:c4:e7:5e:f8:ee:8a:50:f6:a5:
ac:ee:64:84:3e:d7:9f:e2:25:5c:46:19:d2:be:b8:
16:0d:c2:03:73:8f:39:10:37:13:b7:1a:89:22:74:
46:74:70:79:24:22:09:0f:1d:8d:a6:1d:af:26:f3:
2f:53:d1:ee:25:07:a3:bc:12:f1:9f:ac:d1:f1:2e:
0c:2d:d6:a4:f3:94:1c:a2:c6:da:75:51:f7:f9:1f:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:53:48:07:2C:9A:9A:6D:0D:FB:9F:91:54:48:09:35:0A:2D:6C:0F
X509v3 Authority Key Identifier:
keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:38:94:96:fb:a5:76:af:b9:af:b8:d7:fb:2b:64:58:71:75:
07:55:69:c4:06:d5:f2:6d:63:0e:7d:6d:6f:a0:ba:1c:26:d5:
62:f8:b0:81:62:87:65:d6:21:1a:89:43:f9:5a:60:aa:4f:50:
a0:e3:83:1e:6a:f0:cc:d5:e2:65:4d:a0:dc:ea:e0:3f:ff:17:
5f:e9:e2:63:5d:04:35:28:20:67:52:fe:91:b4:3f:74:25:4d:
7c:1c:5e:76:83:b8:83:ad:6a:78:b2:61:45:8c:8c:9b:ab:de:
25:9b:77:92:21:3d:99:f1:7a:2a:0a:b0:c5:13:b5:2d:90:5e:
b8:a9:ef:14:19:a1:b8:56:c4:42:b3:ec:82:b1:20:82:6e:5d:
86:78:e5:08:7c:cd:d7:ce:81:95:b0:21:86:5f:e7:3b:a4:ef:
03:ac:af:8c:e5:d7:83:f5:fa:12:02:db:8b:2b:a7:23:3f:d3:
dd:82:35:4c:79:2a:1c:f4:1e:2f:36:12:d2:a9:bb:7d:00:92:
f0:b8:8f:0f:db:49:fb:e5:b5:f7:9f:04:4b:6f:d3:34:f7:36:
96:b3:cf:f6:6f:bb:a5:89:92:8c:7c:1b:49:a3:e8:b0:8d:8f:
55:76:e4:ee:fb:6d:3e:f0:0d:d8:51:c6:e3:61:8f:77:ef:a3:
f5:f6:b5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:13:08 2025 by rpki-client