Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
File: xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json)
Hash identifier: 5NPwNYVUCmOryL44HJEnoZoc/s96gKUnVJHsaTS+ftM=
Subject key identifier: 13:8E:3F:5F:B0:01:9C:1A:D9:3B:68:7C:48:CF:E4:FA:F0:54:59:D2
Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
Certificate issuer: /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Certificate serial: 0196802207115F1B1165F3809B5A55F953F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
Manifest number: 1511
Signing time: Tue 29 Apr 2025 06:00:35 +0000
Manifest this update: Tue 29 Apr 2025 06:00:35 +0000
Manifest next update: Wed 30 Apr 2025 06:00:35 +0000
Files and hashes: 1: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: sR0bxWXn5FNWgj5J43Jskp+YZYY2koXG1ezNX2+pKxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:07:11:5f:1b:11:65:f3:80:9b:5a:55:f9:53:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Validity
Not Before: Apr 29 06:00:35 2025 GMT
Not After : Apr 30 06:00:35 2025 GMT
Subject: CN=138e3f5fb0019c1ad93b687c48cfe4faf05459d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:08:a3:2b:e6:ca:c9:95:8c:68:b2:dc:c8:ee:
e1:54:fd:62:8b:82:50:26:4d:e8:c1:85:79:ad:f1:
6b:84:c1:02:3b:2e:20:50:c3:d2:f6:80:0a:7d:37:
12:f0:c4:52:3a:4e:b7:32:2b:e5:b8:a2:2f:1c:15:
08:ec:ea:6b:22:9e:ae:d2:32:7d:b9:95:a1:e9:67:
17:f5:a6:c9:7f:f3:04:1d:6b:e9:4a:c5:57:bc:c3:
de:36:5b:4d:db:ec:56:11:ad:18:4b:a1:3d:67:16:
61:f5:d7:fd:c0:a8:77:a7:de:86:31:a0:e4:c3:6e:
62:ab:e7:ee:a2:82:39:8a:ec:34:3e:4e:bb:cd:67:
c0:7e:9c:7e:d5:5e:6c:a9:8d:6a:97:7b:05:2e:8e:
96:91:8f:c4:b6:1c:df:dc:54:ad:43:c8:71:23:a8:
33:85:9d:b5:73:f8:79:d9:33:40:96:bb:53:4f:8d:
e5:75:b7:f3:44:c0:ae:87:a0:86:cc:54:82:19:35:
8d:f5:43:a3:fa:5b:b3:bb:6d:70:95:fe:60:aa:14:
43:10:e6:30:ae:b7:f4:3e:e7:17:5d:e6:15:61:15:
4a:c4:3c:e1:4c:fb:99:28:fb:de:08:49:de:f5:2a:
5d:1b:77:3b:b8:23:0f:6a:8c:65:5d:b1:6a:a7:6f:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8E:3F:5F:B0:01:9C:1A:D9:3B:68:7C:48:CF:E4:FA:F0:54:59:D2
X509v3 Authority Key Identifier:
keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:67:71:db:cb:de:f7:03:d5:fa:aa:81:ec:ec:1d:7e:20:f5:
f3:4e:5b:31:64:10:6a:25:03:96:4c:70:a6:c9:b5:c1:c4:0a:
55:b1:6a:bf:77:49:0d:e5:d7:7e:6e:32:f2:05:53:1a:4c:15:
22:f7:63:a0:9b:d5:8a:31:69:32:09:f0:c4:f9:37:b5:25:99:
7a:47:78:3d:ce:9f:b9:6b:e9:e7:ad:e5:d0:c1:d8:0e:b1:e6:
c3:6f:c2:a2:36:6d:ea:e8:4c:12:ad:51:0e:97:60:b4:c5:cd:
64:49:28:3a:b0:e1:92:05:7e:58:df:77:52:e5:c4:07:0f:d3:
13:f2:e5:94:79:de:3c:17:7d:ee:58:47:31:40:da:51:c8:c5:
7b:54:58:80:bc:f4:f0:bd:cf:6a:f2:7e:e9:ec:f6:c9:28:d9:
a8:5d:65:44:b5:d0:1b:90:f0:dc:e6:24:35:39:22:c3:f3:1d:
a4:e0:46:9e:94:50:ca:aa:60:d2:a7:2a:f8:09:88:77:b6:45:
28:9b:49:ae:87:20:8f:7f:3a:82:59:58:c1:33:7b:27:f4:8b:
90:e0:b8:d4:7b:3b:04:bd:53:24:60:78:42:90:8b:4d:db:26:
15:4e:8e:55:3e:a8:05:83:e2:30:ea:0b:e2:f2:ec:a9:19:7c:
d0:cb:c0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:57:38 2025 by rpki-client