Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
File: xRvfUzN6yxiydpUsNX6RmAvMWww.mft (raw, json)
Hash identifier: wfM5YEu4MPOu5hGXh0Yo9FSECENWcB2S53D2/X5xJ3s=
Subject key identifier: 70:92:BF:8D:AB:D5:CB:9C:73:60:FA:87:65:D1:82:1E:FF:D5:56:68
Authority key identifier: C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
Certificate issuer: /CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Certificate serial: 01967DC5FFC3850DEDF4BEAA8CCC7B24AA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
Manifest number: 0922
Signing time: Mon 28 Apr 2025 19:00:49 +0000
Manifest this update: Mon 28 Apr 2025 19:00:49 +0000
Manifest next update: Tue 29 Apr 2025 19:00:49 +0000
Files and hashes: 1: xRvfUzN6yxiydpUsNX6RmAvMWww.crl (hash: zXesyWUio5gRX6vF2zTh4721B2YzOYrdZ2/3godabZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:ff:c3:85:0d:ed:f4:be:aa:8c:cc:7b:24:aa:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51bdf53337acb18b276952c357e91980bcc5b0c
Validity
Not Before: Apr 28 19:00:49 2025 GMT
Not After : Apr 29 19:00:49 2025 GMT
Subject: CN=7092bf8dabd5cb9c7360fa8765d1821effd55668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:f4:2e:f0:b5:4a:4c:b3:9c:a9:bf:11:d7:
00:93:c7:fc:0a:9c:65:48:c6:ca:be:aa:ea:cd:36:
16:1c:d8:58:d4:82:c3:2e:2b:f9:29:44:8f:f4:d4:
2a:a7:32:b1:77:ad:3f:a6:3e:9e:37:30:20:65:d5:
08:f1:ba:cb:14:bc:08:57:27:14:b6:72:ea:0a:83:
94:8f:18:1a:7a:92:bb:65:53:bf:ed:1d:bf:1d:46:
32:22:08:c7:4d:19:39:69:8d:13:c7:6e:26:93:60:
9a:b6:e0:0a:f0:7a:9f:bc:36:b7:ea:59:98:e8:f0:
3b:63:d6:d2:ad:4c:e1:83:d1:8a:7c:1c:86:0e:23:
7d:d5:64:ac:e7:5a:86:cd:de:1c:71:ce:40:25:2e:
6b:af:de:01:e8:14:af:e4:51:ca:25:5e:85:02:c0:
88:4b:40:f0:ca:40:0e:4f:81:25:57:13:f3:43:f1:
63:e0:12:c8:a2:24:91:47:bd:65:1f:18:62:3d:e2:
ef:b1:47:0c:fb:d6:f0:1b:b5:ce:ed:44:f2:95:b7:
ee:d7:d8:f6:4b:ea:e1:49:96:47:f9:34:08:b4:f9:
0c:87:b6:9f:98:ac:08:60:f0:3d:a4:a9:a6:7e:50:
bb:a7:d5:e3:5b:06:49:a9:11:00:a5:36:9a:99:e7:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:92:BF:8D:AB:D5:CB:9C:73:60:FA:87:65:D1:82:1E:FF:D5:56:68
X509v3 Authority Key Identifier:
keyid:C5:1B:DF:53:33:7A:CB:18:B2:76:95:2C:35:7E:91:98:0B:CC:5B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRvfUzN6yxiydpUsNX6RmAvMWww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/83e5ea-9fe4-4814-83c6-1bb430606535/1/xRvfUzN6yxiydpUsNX6RmAvMWww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:40:45:ed:1d:a3:10:54:ff:84:42:24:c8:f2:27:39:14:f5:
ae:57:63:e1:0d:d2:cb:62:9a:1a:ac:d1:f4:07:26:6d:62:a4:
a9:21:5a:8a:75:ea:3d:9a:38:06:4d:da:b7:04:b8:fa:8d:2a:
fc:e8:4e:dc:07:44:d1:48:58:7a:15:33:a4:69:ae:50:1b:07:
a1:84:38:54:cd:0a:8c:28:96:19:50:3f:b7:a2:53:b8:aa:10:
43:26:18:1a:03:48:0b:a5:f8:60:aa:60:36:57:68:e5:58:29:
fa:64:14:66:85:b4:53:c8:d8:9b:e3:c3:da:88:36:85:2a:03:
9c:1d:ba:b2:07:cd:b7:a3:84:92:03:9d:f4:cc:76:fc:45:9c:
a3:1b:7a:4a:cf:da:1f:b7:9d:45:9c:ba:cb:e5:58:89:62:c6:
a1:70:1a:c2:e5:e9:cd:ad:95:46:ba:78:96:b4:39:8e:1e:7d:
00:df:5c:73:02:7f:9b:cb:78:82:08:69:d5:0e:37:a2:cf:cd:
62:59:83:47:29:95:b3:ed:4d:cd:01:4d:06:a5:3d:b4:22:a2:
96:65:f9:08:30:c9:81:49:cd:82:b2:1c:4b:cf:59:82:24:1f:
5c:68:f7:34:06:59:9e:d2:17:66:f3:95:5e:a0:64:a7:7c:14:
1e:31:48:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:50 2025 by rpki-client