Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
File: xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json)
Hash identifier: VhEupfRlokKa5m5rfvNqxEPcqEuS1N0RpHK7deQdkyg=
Subject key identifier: C6:73:14:49:D6:61:6B:42:5F:E8:BE:77:F1:F0:BB:06:4D:1B:09:96
Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
Certificate issuer: /CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Certificate serial: 01968A6EEFB478D35B674A87D2E801EE62B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
Manifest number: E2
Signing time: Thu 01 May 2025 06:00:48 +0000
Manifest this update: Thu 01 May 2025 06:00:48 +0000
Manifest next update: Fri 02 May 2025 06:00:48 +0000
Files and hashes: 1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: jdsMpIdc8FLrwxXdOtHyp7zohFOCLwF6zhiugOIoGFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6e:ef:b4:78:d3:5b:67:4a:87:d2:e8:01:ee:62:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64
Validity
Not Before: May 1 06:00:48 2025 GMT
Not After : May 2 06:00:48 2025 GMT
Subject: CN=c6731449d6616b425fe8be77f1f0bb064d1b0996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:86:8b:8a:a2:ea:c9:a2:10:69:4e:54:0f:
cc:64:c3:20:01:5b:4e:d2:23:71:01:9e:e6:97:ce:
1d:c8:ed:ca:de:c0:50:5d:56:1c:f0:68:40:d9:02:
96:84:9b:1b:c0:6d:02:67:55:ab:d5:aa:dd:43:62:
fb:aa:f0:33:74:0a:19:22:ab:31:2e:ae:cc:cd:e1:
24:f3:56:d9:b9:0f:e3:ef:4f:b0:ad:3a:ce:f3:69:
90:c7:6d:8d:6b:bb:33:ad:ac:b4:1c:9b:b5:ac:6e:
e3:43:f2:07:12:ff:ea:f6:3d:dc:f3:e2:9a:96:08:
ea:82:e5:fd:37:1c:fc:f7:f3:dd:cc:eb:53:fc:e2:
c0:05:80:79:c7:9f:78:f3:d1:d9:b0:58:7d:88:30:
92:0c:f6:9d:15:73:f5:9e:e2:f7:bc:9a:b9:6f:9a:
2c:f1:d7:87:f9:a5:58:e3:57:60:d9:76:26:27:3a:
fc:ba:2c:24:07:97:c3:f1:47:08:30:ff:c1:c2:64:
39:15:7b:6a:2f:d5:df:7e:ee:bf:fb:f6:6b:a1:4a:
e3:cf:1d:64:f5:b9:c1:7b:7b:a0:32:1a:4b:0a:2a:
5e:ac:b3:8f:9c:0b:10:0a:fd:9e:82:31:18:4f:a8:
48:89:20:46:f0:8b:62:f8:60:ab:36:6c:17:2b:00:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:73:14:49:D6:61:6B:42:5F:E8:BE:77:F1:F0:BB:06:4D:1B:09:96
X509v3 Authority Key Identifier:
keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:eb:c4:3f:33:47:f0:74:33:76:3b:57:b4:53:ec:0f:f7:d3:
e7:73:31:a6:d1:b9:5b:b3:e7:24:c8:e8:41:31:5b:d1:ac:1d:
d1:27:e3:39:b1:a3:70:29:61:1d:b3:d0:de:e2:fd:fc:72:01:
97:51:8a:31:f7:8c:00:2e:ca:b6:ec:4a:02:76:fe:2b:b1:a6:
73:22:ca:b9:fd:09:4d:93:3e:b4:29:2c:52:fa:ac:57:03:ce:
36:41:b6:73:42:96:7d:0b:ba:02:ce:91:6c:02:98:7c:8b:0f:
d4:10:ce:52:12:58:5f:1b:a0:87:08:df:29:5c:0b:28:f1:ac:
85:23:d5:d4:3a:19:34:9f:c7:ce:ee:1e:c7:8a:d4:00:e3:5f:
30:5e:c3:fc:19:55:e0:d8:52:2b:52:1c:bf:36:5b:b1:6c:51:
b5:0c:32:98:d6:6c:30:ca:7f:41:d1:f8:0a:9e:1c:1c:84:9e:
6b:de:e2:9f:49:52:7d:12:26:69:c8:82:77:96:95:e1:c5:95:
20:12:a4:d2:8f:01:72:69:71:95:fd:f3:3e:5d:bd:ba:ab:ae:
5e:76:5f:38:9d:cb:2b:df:d2:6b:08:ce:1e:bf:2d:44:48:93:
2e:b1:af:14:77:69:dc:58:bb:f7:38:e5:e3:88:90:a6:27:19:
ec:b2:25:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:09 2025 by rpki-client