Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
File: xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json)
Hash identifier: qzSeJhNVfcrHW352aGF+y8qR7CjQNNJNRJFjNpDcYko=
Subject key identifier: 8C:AE:66:F3:E4:50:BD:52:DB:10:75:84:BE:62:F3:19:A5:AB:14:91
Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
Certificate issuer: /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Certificate serial: 019674C276B93F773550E969CD38BEED1655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
Manifest number: 071E
Signing time: Sun 27 Apr 2025 01:00:23 +0000
Manifest this update: Sun 27 Apr 2025 01:00:23 +0000
Manifest next update: Mon 28 Apr 2025 01:00:23 +0000
Files and hashes: 1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: CgvVXa4iJMTvtkKdhE3/fcL+epujHxarJ0RG9K334n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:76:b9:3f:77:35:50:e9:69:cd:38:be:ed:16:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491
Validity
Not Before: Apr 27 01:00:23 2025 GMT
Not After : Apr 28 01:00:23 2025 GMT
Subject: CN=8cae66f3e450bd52db107584be62f319a5ab1491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:80:49:61:40:5e:22:25:5d:14:96:b0:be:
21:5e:7d:20:a8:bb:f7:ec:06:d4:f4:24:0f:23:d0:
54:2b:12:b7:f8:17:18:22:3f:da:bc:cb:1e:d1:38:
0e:16:41:cf:ee:5c:71:ca:d4:52:ca:47:14:e8:20:
45:a0:db:e6:8f:0c:48:58:52:e5:22:d6:c7:f6:63:
6a:ea:22:94:da:1d:5f:47:3f:2c:c9:52:3c:fa:28:
5a:f5:a8:5f:ce:29:5a:a8:da:28:55:db:1f:a5:e9:
ba:71:47:5b:de:78:df:a7:e7:5a:13:21:e5:34:e9:
ba:11:f0:ac:af:f3:13:50:87:d3:88:af:2d:2c:f6:
ea:13:19:3a:d8:ad:34:37:54:c4:f3:d7:1c:07:b0:
c3:5f:b4:8b:71:65:c0:bd:41:88:b0:17:ed:fd:65:
31:35:c7:19:1c:62:0f:45:a5:93:ce:7f:ae:6b:69:
59:e5:e4:e3:6c:89:6c:47:d4:14:3d:5c:8f:87:1e:
7d:88:9f:07:84:18:65:7e:21:07:6a:83:6a:08:6c:
42:df:72:f4:bc:bd:5a:db:8f:e7:73:10:ff:81:86:
4b:6f:25:52:89:3d:87:c3:98:64:31:9d:77:d2:d7:
1a:3d:1e:20:73:af:2a:5e:5b:b5:5d:ad:b3:c1:da:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:66:F3:E4:50:BD:52:DB:10:75:84:BE:62:F3:19:A5:AB:14:91
X509v3 Authority Key Identifier:
keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f1:75:0a:92:d4:6d:e7:5b:cf:a2:ee:10:36:08:82:32:ec:
d0:f5:eb:8b:18:7f:24:7a:f7:38:a6:b8:0a:66:81:74:e1:1d:
db:6c:95:5a:ea:1b:80:cb:36:2d:d6:f7:55:ae:eb:36:62:1c:
96:a2:93:d9:60:d1:d9:e0:96:05:56:c2:07:82:18:ad:0e:b7:
89:55:f6:b0:e4:75:77:58:b0:73:c0:9c:54:00:1b:95:14:4a:
d6:b9:8b:27:db:dc:63:53:1b:be:98:20:e0:54:e3:5a:66:db:
2d:78:13:b0:da:4f:cc:84:e4:45:52:4f:0f:37:ba:87:48:2c:
a0:ec:df:70:64:40:e1:9b:ff:8b:d0:af:4c:83:3d:34:25:62:
29:07:3b:5b:73:86:d0:bb:0a:8a:75:86:8a:1a:7f:11:9f:b6:
4d:86:e4:8d:89:67:3d:64:c0:e0:11:b0:fd:a6:e1:35:16:6d:
08:83:06:63:1d:cc:0b:ea:04:f9:14:67:4a:bd:83:78:4a:25:
b5:fb:52:01:e2:d6:ac:2f:f4:5b:cc:6b:e3:a1:41:28:bd:0d:
e1:47:78:2e:de:47:9c:90:05:16:1e:23:92:63:8a:7e:d0:23:
63:6e:79:98:e4:69:1a:7e:e4:ac:c9:55:37:ec:79:ff:88:83:
44:20:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:50:49 2025 by rpki-client