Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: MpQu24X4eCEtiuRDhgq8f+gDlNlntOQZxRhIlcMzkE4=
Subject key identifier: FC:91:5C:66:73:EB:55:A2:0C:8E:60:C5:CF:09:59:DA:E3:A2:DC:52
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 0196AB0C9F0FAFA2F558AB7A314B0DDC12DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 101C
Signing time: Wed 07 May 2025 14:00:53 +0000
Manifest this update: Wed 07 May 2025 14:00:53 +0000
Manifest next update: Thu 08 May 2025 14:00:53 +0000
Files and hashes: 1: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: UnJF0I3FurXnP2M5OoBwe4/A0OL1ckDySn78BE9gfIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:0c:9f:0f:af:a2:f5:58:ab:7a:31:4b:0d:dc:12:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: May 7 14:00:53 2025 GMT
Not After : May 8 14:00:53 2025 GMT
Subject: CN=fc915c6673eb55a20c8e60c5cf0959dae3a2dc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:23:6e:fe:71:6a:a8:63:b0:18:f0:78:6f:
85:3b:82:35:fc:1b:c6:ef:6f:f9:d2:99:de:65:24:
94:cd:67:01:06:9a:7b:8c:0b:d2:cf:2b:a2:33:74:
f9:47:c1:8d:93:b0:21:94:92:c6:69:a5:e0:bb:ec:
e4:d9:3b:40:59:7b:c2:0c:fd:33:f2:34:14:07:d2:
2a:07:29:56:95:7e:65:a7:38:c6:85:63:be:fd:b3:
98:52:4a:eb:ca:bf:50:97:38:1d:37:20:75:19:8f:
1e:4f:65:45:cc:1f:7f:f8:64:19:7a:51:4e:66:85:
b4:08:1c:ea:75:07:22:42:1d:13:8d:eb:1a:c8:d5:
fb:9b:bb:d8:82:76:8b:67:9d:09:0f:8d:ed:75:b6:
52:e5:7b:9a:f0:08:8f:17:fa:ce:3b:13:87:fb:1a:
ec:ea:6d:20:9a:fb:cf:08:71:a9:ad:48:e2:b4:24:
1c:49:c5:70:16:2f:25:2d:37:75:73:66:40:81:b5:
cb:1c:86:bc:76:0b:05:fd:5e:18:d2:1d:d4:46:1f:
30:25:39:cd:66:ab:fa:46:64:f4:a0:e6:5b:88:8a:
95:00:95:5e:52:f4:82:9c:6d:8e:d6:bd:65:bd:df:
48:2f:2f:f3:e8:f5:27:7b:66:8f:17:0a:1e:34:0c:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:5C:66:73:EB:55:A2:0C:8E:60:C5:CF:09:59:DA:E3:A2:DC:52
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:db:b1:b6:4d:27:de:3b:7f:b8:07:42:e0:13:bb:2e:60:3a:
80:bd:c2:81:85:31:e1:c2:3a:53:df:32:59:db:0b:7e:11:cd:
e8:07:31:be:28:e9:dd:31:44:6a:d8:c3:f4:87:2f:e8:6a:16:
5e:ba:24:c4:04:bb:e8:04:80:3c:5e:6d:52:83:64:0e:fa:71:
58:31:f9:7b:bf:6a:7b:80:29:ca:b2:ce:11:66:3d:ec:11:fe:
cd:5e:8b:40:df:82:24:5a:e0:78:1e:07:47:0d:4a:c5:38:1b:
a8:f2:d3:b2:4a:33:c7:24:2f:46:44:c6:fa:79:42:e8:0a:05:
d9:da:2d:e6:13:84:a0:f7:de:43:03:8f:55:97:08:97:b6:c6:
1d:5d:33:0b:40:c7:88:58:a2:8b:28:94:b0:45:ee:e2:33:2f:
3c:b6:a5:da:d6:3f:9d:9a:25:78:46:95:7e:29:7b:57:2a:cd:
cd:e7:1f:d6:1c:6e:cc:34:89:fa:fa:eb:54:31:25:fb:b1:63:
25:e9:03:a1:17:e7:6c:5f:2a:b6:d1:0d:df:6e:93:77:b2:8b:
35:28:60:4b:08:7d:46:ef:54:24:77:54:61:79:fa:4a:4f:0c:
88:58:c3:4f:2d:e5:66:4e:b3:2c:dd:7b:3c:2c:79:fb:64:9b:
41:c7:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:13:27 2025 by rpki-client