Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
File: xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft (raw, json)
Hash identifier: f1rfoHa4CjVrYu6yYZH2eQRCUWqf0mS8aywZ86eTyiM=
Subject key identifier: 8B:62:30:65:5D:8B:78:D0:C7:21:D1:2F:D4:25:FE:21:38:5B:7A:B2
Authority key identifier: C5:51:F1:1C:83:B5:2A:76:4F:FC:A8:3D:99:04:70:62:D8:16:7F:4F
Certificate issuer: /CN=c551f11c83b52a764ffca83d99047062d8167f4f
Certificate serial: 01967DC60291D9D95305F3D667A0D451847D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVHxHIO1KnZP_Kg9mQRwYtgWf08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
Manifest number: 0B0E
Signing time: Mon 28 Apr 2025 19:00:50 +0000
Manifest this update: Mon 28 Apr 2025 19:00:50 +0000
Manifest next update: Tue 29 Apr 2025 19:00:50 +0000
Files and hashes: 1: xVHxHIO1KnZP_Kg9mQRwYtgWf08.crl (hash: iIn+4oPRscvef6iyK0BLAjtlliYGhB4chZQ0dZX4kcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVHxHIO1KnZP_Kg9mQRwYtgWf08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:02:91:d9:d9:53:05:f3:d6:67:a0:d4:51:84:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551f11c83b52a764ffca83d99047062d8167f4f
Validity
Not Before: Apr 28 19:00:50 2025 GMT
Not After : Apr 29 19:00:50 2025 GMT
Subject: CN=8b6230655d8b78d0c721d12fd425fe21385b7ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:1c:3d:da:d0:6c:da:d6:07:82:e3:76:31:
6a:f4:d3:31:7a:35:ec:bd:85:4f:6c:1e:1b:ee:c5:
cd:d1:ec:a0:9e:92:7f:c3:70:e8:4b:57:65:65:65:
f9:fb:47:7c:ac:35:ff:e5:93:e5:d4:eb:82:41:9c:
9a:4b:f7:fb:2e:26:93:6c:d9:3a:0b:32:99:44:54:
d7:e9:c1:b0:2a:f2:aa:73:3b:d4:c7:ca:bd:ff:38:
6f:bf:e5:c9:75:2b:cd:a0:3b:6b:15:07:6e:a9:27:
9a:64:3d:80:3b:31:e0:67:bf:1a:01:33:ee:60:13:
c1:ee:92:be:6d:a8:62:f5:41:9c:3c:98:6f:12:ec:
12:04:e9:5c:6f:e0:e6:f6:f3:69:84:16:f9:f8:7a:
ab:85:36:ad:9f:bf:9b:ae:a1:08:eb:e2:90:2b:8c:
95:f1:c5:51:22:d6:b6:e6:f6:23:c4:8a:4e:fc:cc:
71:7b:13:1f:a6:90:eb:2b:86:3a:b8:71:4d:62:77:
e4:8c:39:c3:fb:79:f5:eb:07:27:a6:15:76:3a:a0:
53:ea:c3:a1:61:0d:49:e7:00:c6:5a:f6:50:d4:46:
b1:e9:6f:e7:0c:e7:a3:ba:b1:8a:11:01:1d:b4:51:
e0:98:e4:84:ae:e6:24:6c:e1:7d:12:e3:e4:89:2d:
5e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:62:30:65:5D:8B:78:D0:C7:21:D1:2F:D4:25:FE:21:38:5B:7A:B2
X509v3 Authority Key Identifier:
keyid:C5:51:F1:1C:83:B5:2A:76:4F:FC:A8:3D:99:04:70:62:D8:16:7F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVHxHIO1KnZP_Kg9mQRwYtgWf08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/62c07e-b50a-4558-ada5-072507513809/1/xVHxHIO1KnZP_Kg9mQRwYtgWf08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d0:15:32:42:2c:fd:4d:5b:12:b7:0a:1d:b3:b0:de:12:2d:
ef:aa:18:6e:25:85:f1:92:eb:ab:b1:bc:9d:bf:16:b1:c0:87:
de:22:03:3b:80:58:0d:ce:ea:01:7d:38:be:cf:41:de:5a:93:
e6:d9:be:41:2c:13:59:c1:db:c7:fc:69:44:86:19:02:fa:3a:
9b:fe:63:e1:04:e3:b0:62:2e:a7:23:c2:e5:15:37:47:b4:8a:
f9:cc:20:1d:da:7e:dd:5b:ef:af:7a:c6:5c:a3:58:76:f8:a6:
65:ce:40:88:96:41:bf:8b:ac:a7:73:56:de:d7:5f:a9:89:56:
9c:cb:dc:23:43:4d:bb:03:08:80:44:aa:a1:f1:56:1e:c8:59:
15:fa:0a:96:2e:72:34:ca:ac:2d:54:52:d2:fd:68:af:55:f1:
c1:3f:77:84:bd:93:1e:fe:65:47:6b:ac:ab:d8:56:93:55:93:
8c:42:f6:95:38:a9:08:02:fe:3c:e4:23:e0:d0:90:8c:c0:9e:
d4:63:d8:a1:89:3b:6f:d5:a8:55:a7:02:2e:c6:ce:33:d9:d6:
bd:f3:b3:19:6d:3e:32:c7:a7:43:c6:dd:4b:5a:a6:4d:6f:ed:
48:26:91:71:cb:d3:62:e2:31:87:e4:29:c3:04:2d:93:44:02:
87:f0:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:33:41 2025 by rpki-client