
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: dzusJl8wGZmSjcX7f1xA0ZeuMik03UJc6rTvDciT9MU=
Subject key identifier: 9C:09:9C:D3:F3:47:75:37:D6:56:E6:EB:45:A4:52:28:BB:5E:E4:35
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 0196B1EA0163C8E9C33739AEAE7E48A567EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0A5E
Signing time: Thu 08 May 2025 22:00:25 +0000
Manifest this update: Thu 08 May 2025 22:00:25 +0000
Manifest next update: Fri 09 May 2025 22:00:25 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: ULVQGd/eQc3Aj3SeiV0jjVy37V3cvyXTlTZebH/vTKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:01:63:c8:e9:c3:37:39:ae:ae:7e:48:a5:67:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: May 8 22:00:25 2025 GMT
Not After : May 9 22:00:25 2025 GMT
Subject: CN=9c099cd3f3477537d656e6eb45a45228bb5ee435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:7b:57:4c:0d:e5:8b:e7:78:d5:92:cb:7d:
4d:47:e5:a3:03:e1:d5:a3:1d:cf:3d:74:17:5f:51:
d5:52:ac:6a:65:f7:2a:35:20:7b:78:70:4c:2a:bf:
30:dc:10:eb:55:ef:18:61:bc:41:21:e0:a1:e6:78:
ff:58:cf:53:6c:63:53:b1:aa:bc:dd:dd:65:0d:d9:
50:e8:79:aa:24:d0:7c:78:db:00:e6:48:14:97:4f:
2a:6f:8c:cd:94:05:90:b0:1e:6e:0c:2d:7c:c0:7f:
f2:1f:b9:5d:f0:55:78:9a:76:b2:e4:ed:a5:87:4f:
dc:76:ab:13:9d:e5:3d:9d:5c:0d:6e:e7:dc:04:e4:
71:bb:f8:d6:b1:45:4c:53:59:b0:08:e7:da:b4:0b:
52:35:be:3c:fb:4d:c9:8f:1d:94:11:cc:17:e7:12:
06:ab:7e:07:a3:3c:c7:fe:b0:33:cf:79:21:11:5d:
8a:5b:fe:67:c5:85:63:50:2b:95:79:2f:0d:0a:80:
a8:6d:52:99:e0:b3:37:42:3d:3f:1c:f1:19:70:7c:
ff:57:67:f4:5d:2e:55:eb:04:bc:52:a0:78:93:7a:
90:fb:03:8d:96:ae:86:d9:ea:36:b5:47:dc:88:69:
1c:51:b9:75:e5:8b:a8:21:b2:d8:8f:88:29:36:67:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:09:9C:D3:F3:47:75:37:D6:56:E6:EB:45:A4:52:28:BB:5E:E4:35
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d3:e6:c6:0f:cb:86:39:0a:5b:42:00:84:70:1c:1f:ec:98:
3a:39:1c:47:b1:c1:9d:84:89:26:4f:d1:7a:e9:90:f1:6d:5c:
02:b7:0b:37:ef:a4:0a:79:ac:19:69:25:e6:b1:3f:20:27:79:
cf:43:3b:1d:d3:f7:ae:2b:5a:f2:26:a1:2f:bc:6e:6d:dc:50:
4a:fd:c1:50:5c:06:28:6c:ff:01:9b:04:74:ec:58:d7:de:3b:
2b:ea:ec:ba:df:ac:65:39:1f:12:77:2d:90:41:81:c5:34:c9:
fd:43:d9:51:0e:6b:98:b1:49:19:f9:62:2c:b0:2d:96:97:6b:
d0:50:8b:8c:d4:fe:f4:b0:4f:32:bb:6c:5d:a3:7e:c4:af:fe:
b9:ad:82:60:5d:5b:85:b1:32:d2:06:00:47:67:ec:30:15:ee:
43:0b:57:57:63:dc:68:b8:e7:74:d8:62:c0:16:01:92:47:9b:
c0:58:b5:fd:67:ca:60:0e:ee:85:ff:1d:b5:b0:e1:19:0a:be:
61:bf:82:ae:72:cc:a6:c7:45:0b:b0:98:f9:17:e6:e8:33:97:
91:3a:26:39:bd:5d:a6:c3:d0:71:43:34:98:30:92:3b:4b:4c:
b0:b1:21:02:40:53:35:95:c9:de:55:49:25:eb:a7:1e:21:c7:
3f:44:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:10:34 2025 by rpki-client