Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
File: xorAnHI17TE4Ph_ThzkY3RgzNCo.mft (raw, json)
Hash identifier: osU2v87k1QKf37mkW8FWwcqgXcfHJu3L0/DrMFR0als=
Subject key identifier: 45:94:A2:0B:30:24:49:5D:C0:48:3E:C8:14:BB:BB:9B:31:15:AF:4A
Authority key identifier: C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
Certificate issuer: /CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Certificate serial: 019675302706EBBEDE3B57EF4533E95C40C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
Manifest number: 04DE
Signing time: Sun 27 Apr 2025 03:00:12 +0000
Manifest this update: Sun 27 Apr 2025 03:00:12 +0000
Manifest next update: Mon 28 Apr 2025 03:00:12 +0000
Files and hashes: 1: xorAnHI17TE4Ph_ThzkY3RgzNCo.crl (hash: TR1aHXUEK+ZG9799oWHGS7OFN+rboN2fapT1lBVBa3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:27:06:eb:be:de:3b:57:ef:45:33:e9:5c:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ac09c7235ed31383e1fd3873918dd1833342a
Validity
Not Before: Apr 27 03:00:12 2025 GMT
Not After : Apr 28 03:00:12 2025 GMT
Subject: CN=4594a20b3024495dc0483ec814bbbb9b3115af4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f5:ec:a9:18:21:fc:e5:a7:d5:46:cd:0d:10:
37:09:87:65:9a:7a:f4:42:60:35:f8:db:cf:db:19:
02:f3:0e:03:7d:f6:23:9f:75:08:7e:93:6c:69:ba:
1d:92:6d:3b:13:73:f0:7c:61:a0:6a:44:c1:77:2f:
5c:ed:01:85:31:9d:0c:29:f3:e3:ee:1e:d1:3e:9b:
6d:86:59:2a:9e:ac:7b:5f:93:7c:57:b2:bb:67:d0:
cd:ef:34:81:b2:fa:55:51:a1:b5:d5:78:f9:6d:29:
62:d5:c9:e7:a1:5c:83:85:d5:bb:b0:e2:7b:29:6a:
d6:4e:80:24:c4:bb:7a:36:8b:c1:87:df:fd:cf:a4:
5c:90:58:72:77:ae:a2:c3:c8:92:8f:53:c5:c1:42:
f1:e4:0b:e1:b9:ed:42:ec:36:c3:03:69:78:dc:53:
ec:86:45:8e:8a:5b:dc:02:d7:4b:f5:ab:f2:e1:50:
a4:66:b0:fa:df:53:fc:53:6e:0b:dc:11:26:f0:c3:
50:22:80:62:3e:3c:cc:a5:c5:1c:25:05:83:07:67:
2b:95:3d:7f:20:b2:99:fb:da:e8:4e:30:40:9f:71:
16:a8:1f:bc:b1:57:11:14:48:1b:4d:a2:82:5d:2a:
f3:54:4c:1d:4a:10:5f:64:8d:04:0a:e2:ce:b0:06:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:94:A2:0B:30:24:49:5D:C0:48:3E:C8:14:BB:BB:9B:31:15:AF:4A
X509v3 Authority Key Identifier:
keyid:C6:8A:C0:9C:72:35:ED:31:38:3E:1F:D3:87:39:18:DD:18:33:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xorAnHI17TE4Ph_ThzkY3RgzNCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/492bd0-993b-476e-8fac-9de48d43b1db/1/xorAnHI17TE4Ph_ThzkY3RgzNCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ae:67:24:f1:f6:26:63:f0:26:cc:0f:1d:5c:b6:68:a8:8a:
91:60:a6:b0:a3:70:4d:35:53:04:35:1c:e8:ad:ad:c6:a2:49:
b8:2a:9a:68:bc:06:52:4f:c8:dc:78:04:c5:16:f2:ac:32:1e:
f1:50:ac:7a:ca:7c:2f:31:67:91:b5:58:ba:a9:de:8f:0b:20:
e9:53:51:50:ff:a0:87:20:2c:56:9b:02:77:13:88:10:92:9e:
eb:85:c0:0c:87:c8:8e:91:1a:6b:32:19:af:80:10:2d:eb:9a:
5f:bb:1f:8d:99:4e:b0:0c:b5:28:6c:53:e4:5c:3b:bc:a7:b2:
29:2f:ac:cd:99:9e:21:f0:68:29:5b:df:2c:9a:79:ac:3d:11:
6a:7d:76:e3:46:e0:91:9c:de:af:9e:8a:e5:03:60:7d:57:66:
e6:c5:e7:53:0e:01:a0:05:7a:70:ee:d8:4f:f1:38:a6:49:b3:
b7:6b:3f:24:35:4a:91:3e:71:88:4a:50:cf:cf:b2:3d:23:9e:
cb:8d:aa:24:60:cd:9c:91:9d:e0:e3:dc:82:dc:e5:66:8d:44:
d2:35:96:ee:1a:93:c1:37:6a:a8:8d:8e:ba:44:64:4f:83:95:
be:fb:ac:bf:d7:57:30:77:7e:ce:a2:c6:58:99:dd:3e:7c:e0:
8b:d4:ad:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:00:11 2025 by rpki-client