Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json)
Hash identifier: DF5S8NaJPL7p0teOkStTOH6gEvV4FxgDb87P8EIocVU=
Subject key identifier: EF:F9:B1:AB:FD:92:3B:90:6B:8A:FE:F5:95:1B:9D:DE:B1:AC:29:33
Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Certificate serial: 019675672B8097F8E17A457ABB6B5D51622F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
Manifest number: 13FE
Signing time: Sun 27 Apr 2025 04:00:17 +0000
Manifest this update: Sun 27 Apr 2025 04:00:17 +0000
Manifest next update: Mon 28 Apr 2025 04:00:17 +0000
Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: uzOtzOfPRB/HabPEUqZUd8Sd9IXRKz0nbnv9KCUKUxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:2b:80:97:f8:e1:7a:45:7a:bb:6b:5d:51:62:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b
Validity
Not Before: Apr 27 04:00:17 2025 GMT
Not After : Apr 28 04:00:17 2025 GMT
Subject: CN=eff9b1abfd923b906b8afef5951b9ddeb1ac2933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:25:74:ef:90:c8:fe:73:8e:85:d8:7b:89:
48:30:57:fa:bd:b8:09:5c:6c:58:ae:ed:e6:0c:e1:
51:ac:76:56:1f:0b:eb:1a:10:24:93:d1:f8:5f:45:
05:77:2b:77:20:7f:6c:3e:4b:3e:f1:38:c0:fc:0c:
c7:3b:fe:9c:d6:86:c3:41:a8:b3:ff:d1:da:30:c5:
70:64:22:24:09:76:f7:65:25:b1:58:8a:ca:e8:0c:
dd:f4:ba:03:c0:80:59:8a:7a:ad:92:7a:b8:60:70:
03:87:fe:3d:73:c6:7d:a0:1a:7b:c3:7f:34:92:3c:
0f:db:0a:14:87:4a:bf:ca:e2:37:4b:44:3b:05:87:
8a:e1:55:2e:16:42:5a:aa:94:e2:ba:fe:8a:76:ad:
9f:78:ef:b7:6f:7c:da:ff:cb:c7:a8:5e:16:b4:9e:
85:52:90:22:8d:51:cd:d2:ab:fa:86:62:c5:1b:29:
71:aa:4c:8f:5c:6c:d0:85:17:8c:98:d0:01:05:b2:
55:0e:bd:7c:ac:62:ae:5e:d4:43:f0:f3:0d:84:28:
f6:91:5b:df:5b:5d:10:92:3b:85:53:dd:74:d7:8e:
b0:e1:ce:3a:9a:2a:3b:a2:e9:a2:3d:ce:b3:e2:d1:
0e:59:cd:c3:f9:ec:08:85:ff:1c:42:8c:3d:0d:be:
65:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F9:B1:AB:FD:92:3B:90:6B:8A:FE:F5:95:1B:9D:DE:B1:AC:29:33
X509v3 Authority Key Identifier:
keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c8:bd:b5:d5:32:9b:c8:3b:07:79:d7:b1:dd:bc:81:1d:d3:
67:11:dd:0a:89:38:ce:f1:dd:72:c3:bd:45:79:94:c5:b7:fe:
d0:d9:76:e0:0f:26:f7:95:a9:74:39:e3:12:d6:a4:fd:61:46:
d8:50:53:72:fc:a6:12:06:f7:28:c4:01:82:31:49:9e:09:69:
ef:c3:ff:35:7d:73:db:07:d3:1a:17:12:f2:a5:cd:c4:b4:7b:
b2:4d:36:bc:75:b7:2a:f8:1d:50:21:50:8f:f4:b8:d1:66:06:
d3:c9:ce:54:88:c8:3c:42:29:ba:39:07:75:02:57:1e:cb:fb:
40:12:ed:07:6c:28:62:28:0e:64:39:64:41:d2:b1:ee:e7:2d:
b9:a7:9b:a0:f1:04:12:b2:9e:77:ae:e1:ec:e4:99:88:52:ea:
0e:d7:48:7b:8b:63:31:0b:4c:87:1c:7d:95:e1:2c:29:4d:dd:
85:7b:e3:bc:f3:12:8b:c2:36:13:2c:8c:2a:29:65:9c:13:01:
9e:13:9c:0f:b1:d3:ae:1f:34:08:01:a3:c2:39:99:6d:45:cc:
4e:f7:a1:c9:97:42:11:06:04:df:d9:2d:13:0d:8a:a0:16:27:
8b:bd:e2:6d:1c:c1:c8:ce:ab:e2:d2:e9:9e:39:22:26:7a:77:
34:06:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:22 2025 by rpki-client