Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
File: SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json)
Hash identifier: EHj+KyBCScRyuOgV+EeLB/w3xBE4NyYw9B3UMChNa2o=
Subject key identifier: 95:28:39:93:7B:54:7B:2E:96:07:07:CD:D6:4C:03:35:A7:7D:BE:65
Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
Certificate issuer: /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Certificate serial: 0196759E96B115740AC4FEA960CC30E1D1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
Manifest number: 014D
Signing time: Sun 27 Apr 2025 05:00:49 +0000
Manifest this update: Sun 27 Apr 2025 05:00:49 +0000
Manifest next update: Mon 28 Apr 2025 05:00:49 +0000
Files and hashes: 1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: Jx7wxycQpeeGNQgmtyjjo02cHXFCjEKR3n6o620yecw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:96:b1:15:74:0a:c4:fe:a9:60:cc:30:e1:d1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Validity
Not Before: Apr 27 05:00:49 2025 GMT
Not After : Apr 28 05:00:49 2025 GMT
Subject: CN=952839937b547b2e960707cdd64c0335a77dbe65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:c7:ee:61:23:a0:1a:24:12:62:78:0e:bc:
18:c5:a2:3d:99:54:4c:a7:31:42:4e:ba:da:e8:d5:
33:5d:c2:59:8e:c4:a9:a3:c2:41:14:64:79:a7:bf:
c8:0c:c3:a9:ba:73:f4:13:f1:27:59:39:6e:92:b5:
27:fb:8f:bc:8d:c5:a9:a8:55:71:60:da:f3:e2:57:
59:a4:73:c6:90:e9:3c:88:b9:fa:fb:59:ff:3b:d8:
0d:f4:df:43:e6:0c:b5:3a:5d:f4:43:2b:23:7c:ab:
6c:d4:fc:1a:a9:93:a5:22:47:81:44:b3:4a:8a:fd:
9b:db:b0:f1:86:c2:48:41:d6:85:7a:89:ac:f3:d0:
76:d7:81:d2:37:62:5a:e4:51:8b:11:3a:89:1f:ad:
1c:ed:df:b3:9d:d6:c4:23:e5:2c:86:06:e5:ed:8a:
c7:cc:12:a9:5a:bd:7e:2b:ba:a4:49:5d:22:70:d1:
67:b6:ee:0d:c3:2e:07:09:08:95:fe:c6:d3:60:52:
80:b8:aa:38:66:af:e6:cc:8a:fe:dc:69:e3:ae:1e:
27:f6:3b:ae:1a:28:58:67:cf:73:c2:21:1d:da:d7:
a8:7d:8c:78:51:4b:e7:5d:d3:4b:67:ce:54:64:c6:
de:06:77:33:6e:ff:11:4d:51:b6:7e:67:8a:b5:88:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:28:39:93:7B:54:7B:2E:96:07:07:CD:D6:4C:03:35:A7:7D:BE:65
X509v3 Authority Key Identifier:
keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:af:53:48:8c:6f:5b:2d:8b:c5:0b:d9:06:2c:9c:52:df:36:
a2:dd:14:dd:9d:5d:6c:a2:39:74:c7:32:15:c6:27:98:9b:14:
9f:08:e1:9d:4a:b4:fb:9b:86:c8:0c:e8:9e:4d:16:b8:8d:df:
84:70:f4:fd:6f:b1:3e:4e:62:a1:11:6e:9f:32:8b:bd:3f:7d:
a3:3e:50:52:9f:96:1f:c7:ee:e3:23:6d:2f:28:25:6c:ed:ff:
b7:47:c9:e6:cc:66:16:a6:db:99:bb:e0:32:48:d7:61:ca:50:
3a:e2:c5:af:e7:5e:f9:88:37:fe:08:3e:68:d3:57:e9:3f:89:
e2:e7:1b:11:16:29:97:5a:da:00:fe:54:28:23:9b:2e:bb:59:
e5:b4:0f:0a:c6:8d:5a:3c:82:c1:d6:f3:03:fd:41:17:ab:46:
d7:f2:c9:45:3f:5c:c3:fd:5b:7e:14:8f:9b:00:5a:dd:0c:b8:
cc:20:e9:ba:54:eb:42:81:ad:bb:ba:13:ca:88:fb:52:fc:ee:
24:2e:ea:fc:aa:03:39:34:2b:33:b4:87:dc:ba:b7:fb:33:5c:
d3:ba:ea:e9:74:b7:f1:52:25:75:c0:dd:87:fa:b8:05:17:20:
7a:c2:5f:55:19:1a:dc:0b:e1:06:fe:20:ae:a2:de:b2:81:8d:
6d:f1:60:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:30 2025 by rpki-client