Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
File: xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft (raw, json)
Hash identifier: NHk9pWOik7oboApNYltCl0n8HRIu2ccHd6tz0yiOzVU=
Subject key identifier: BE:BB:FE:17:C3:F1:49:37:02:73:52:32:3B:31:E0:AB:BC:D7:FF:70
Authority key identifier: C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
Certificate issuer: /CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Certificate serial: 019679440DDFEB816F39B9FBF6D6595FBE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
Manifest number: 05E2
Signing time: Sun 27 Apr 2025 22:00:25 +0000
Manifest this update: Sun 27 Apr 2025 22:00:25 +0000
Manifest next update: Mon 28 Apr 2025 22:00:25 +0000
Files and hashes: 1: xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl (hash: op9i8x2fmWU097U53rIN4BLnxt3Ga9XmLVY3PIvslR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:0d:df:eb:81:6f:39:b9:fb:f6:d6:59:5f:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c00c553a54da05b93635a654cada03c6d9df2b
Validity
Not Before: Apr 27 22:00:25 2025 GMT
Not After : Apr 28 22:00:25 2025 GMT
Subject: CN=bebbfe17c3f14937027352323b31e0abbcd7ff70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:8f:3c:0b:e5:c5:89:cf:c6:10:4c:cd:c4:
2b:c1:a8:fa:c3:3f:de:18:ee:61:82:b6:f1:80:e2:
3a:4f:4c:08:16:fc:fc:e1:9c:9a:30:42:43:7c:bd:
8a:52:bd:59:c9:52:88:a1:4e:58:b7:e6:07:df:fd:
a7:2e:27:7d:8d:c4:55:2a:57:a2:7a:1f:49:83:d2:
7c:d3:e7:17:1f:e4:e3:46:b5:41:70:2e:50:43:e9:
31:0f:79:f7:54:12:37:64:1f:0a:78:c3:dd:d5:e6:
01:b2:ac:fb:10:c4:43:b5:10:71:53:51:89:1f:82:
02:07:0d:b7:28:52:54:e9:2a:fc:b0:d3:6f:d2:b5:
f4:c8:83:c5:82:d4:78:cb:3c:bd:2e:1b:25:9b:fd:
d9:bb:63:2c:11:ca:de:b6:ea:b5:38:12:44:14:30:
eb:dd:57:16:84:2b:fe:06:4d:d4:80:73:23:88:ef:
bf:e6:12:af:73:d1:d6:d2:ee:b4:76:17:db:bc:bc:
21:e6:ea:b5:66:79:e4:d7:d7:77:7f:9a:b2:53:0b:
62:cc:85:f6:10:ba:03:bd:c7:03:c6:12:c4:28:4c:
88:25:bd:c4:92:1e:2c:51:7f:a1:03:60:03:7e:52:
07:6e:e0:fc:0a:8c:30:bd:bc:ae:6c:00:c5:63:cd:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BB:FE:17:C3:F1:49:37:02:73:52:32:3B:31:E0:AB:BC:D7:FF:70
X509v3 Authority Key Identifier:
keyid:C6:C0:0C:55:3A:54:DA:05:B9:36:35:A6:54:CA:DA:03:C6:D9:DF:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsAMVTpU2gW5NjWmVMraA8bZ3ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6fda1d-b96b-4cf9-bb68-3fbdd9dbbd92/1/xsAMVTpU2gW5NjWmVMraA8bZ3ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:09:e5:76:a2:c3:6e:2f:ff:43:21:0d:f9:df:8b:75:16:cd:
29:7b:2d:eb:e7:01:74:bc:6a:c3:96:de:98:ed:89:ee:4f:82:
10:76:4d:ab:55:f3:9f:5e:2b:18:3d:5e:3b:d5:72:3a:8c:91:
78:df:56:c2:c5:a2:4f:61:af:4d:55:e2:ab:1e:8f:07:ed:13:
df:e4:e7:05:86:36:69:dd:69:1d:f1:45:a5:54:c0:d3:0f:36:
ba:c2:7b:f8:cd:b4:72:50:ab:0d:c4:3c:42:85:71:e4:cf:5c:
d1:5f:99:84:9e:a1:5d:29:55:09:c5:76:50:46:03:73:9a:d3:
13:ae:1d:40:f5:8d:c1:94:67:17:59:06:a1:e4:91:68:0a:19:
fc:fa:82:07:cf:b4:9d:00:01:29:70:1c:42:9b:f3:31:3b:02:
ef:66:ef:bb:01:44:92:b3:96:be:12:97:ab:6a:ee:d6:f7:80:
b9:64:90:eb:6b:26:d8:2c:8a:b8:e6:cc:0a:13:37:10:b9:0a:
fa:ca:e7:ea:8a:dc:84:0b:d7:6e:bd:11:ae:eb:c3:25:e9:8a:
88:a4:63:2a:88:5d:6f:bd:ba:00:df:c9:16:4e:a8:2b:9e:e1:
38:54:23:60:1f:ba:c5:3f:0e:72:4c:61:ef:d6:a0:af:9c:24:
71:9b:73:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:13:57 2025 by rpki-client