Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
File: xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json)
Hash identifier: dlv64VhPA2xAOoec5XsNC+BdnSLWLyFO6THblhGLHr8=
Subject key identifier: 5C:28:73:42:D2:46:1C:20:0A:B8:68:7A:B1:38:24:49:94:BC:44:C4
Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Certificate issuer: /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Certificate serial: 019685B630CC1487984F6FD0E11F9BB3B4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
Manifest number: 04E6
Signing time: Wed 30 Apr 2025 08:00:31 +0000
Manifest this update: Wed 30 Apr 2025 08:00:31 +0000
Manifest next update: Thu 01 May 2025 08:00:31 +0000
Files and hashes: 1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: ZTj6ijznvWTQ/EkGt1JEBPELRCuqn1WfFreLPN9yQM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:30:cc:14:87:98:4f:6f:d0:e1:1f:9b:b3:b4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Validity
Not Before: Apr 30 08:00:31 2025 GMT
Not After : May 1 08:00:31 2025 GMT
Subject: CN=5c287342d2461c200ab8687ab138244994bc44c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:95:c0:79:d0:4d:a1:4a:99:11:2e:52:48:
ac:d5:a9:0a:22:81:a5:34:18:fb:89:13:ba:5d:91:
f6:4e:da:70:0a:b4:12:6f:fc:ed:d7:1a:a6:dc:18:
59:9c:11:d9:85:8a:22:a8:bb:0d:c6:0f:16:c4:8a:
b5:a9:18:e5:ca:e1:c1:7f:f6:1a:0b:8f:d4:50:e1:
08:81:bb:77:82:29:83:5e:9e:30:50:82:2d:61:ca:
fe:fd:8c:d7:9d:0e:14:8f:00:f1:e7:12:45:87:1e:
43:06:4b:83:d8:34:a1:58:0e:4a:3d:df:b4:4b:84:
3b:cc:b6:a8:18:b9:bc:e5:8d:ce:1e:8e:81:28:24:
4d:7c:6c:03:a2:ae:f4:67:12:46:11:47:10:ee:82:
45:f2:b7:e1:c3:3f:a2:a6:51:90:1a:eb:83:a4:28:
06:e7:c6:3a:c9:64:6d:63:6b:bc:ea:e1:1f:57:82:
2c:2c:94:75:e8:51:5c:6d:82:c6:05:d7:6a:d1:47:
b9:fb:67:22:17:b2:0e:15:21:76:7d:ef:5e:86:b3:
fc:94:63:c3:27:61:dc:cc:a7:a9:ab:e8:54:88:f8:
29:dd:89:97:bf:9f:2a:dd:ef:c1:31:6c:44:9d:45:
27:83:dd:c9:36:b6:05:69:79:95:5a:49:f2:60:6b:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:28:73:42:D2:46:1C:20:0A:B8:68:7A:B1:38:24:49:94:BC:44:C4
X509v3 Authority Key Identifier:
keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:17:84:e5:f0:c7:23:52:46:36:11:0c:aa:c5:41:1d:a3:f3:
dc:29:66:ba:75:0b:7b:54:58:bb:ec:ad:1e:5a:d5:28:4d:6c:
72:aa:aa:39:b2:3f:ec:3a:38:3b:ec:5d:e8:12:70:15:9c:24:
e2:68:70:f2:7a:81:36:23:6e:32:0e:da:74:2b:d2:a9:2e:37:
a3:4e:e0:49:8e:6b:07:44:70:b1:ea:09:4e:73:db:a7:43:2b:
a5:e0:9a:9d:50:a0:16:ef:19:5c:35:05:c2:5c:3c:62:e3:76:
f7:a4:f0:f7:9d:8a:66:b6:c9:d4:fa:e8:9f:0f:d6:3a:7e:27:
50:2d:2e:4e:a8:1e:bf:3e:cd:cb:a2:b6:ab:13:07:09:e6:2b:
77:14:b4:75:1d:d8:e5:d7:53:c6:a2:1e:6a:fb:79:21:87:b7:
b1:aa:49:c4:10:e1:97:70:22:a6:42:69:80:e8:f4:21:db:e4:
95:bf:79:a2:32:a5:65:92:a0:a9:21:d5:16:ad:19:98:67:88:
47:51:79:07:92:90:45:0a:37:ea:2b:dc:ab:83:e9:e8:46:b2:
5d:aa:23:3b:a9:c6:16:02:03:ab:e9:ff:36:9e:9f:6a:da:a8:
1d:cf:28:98:fb:ab:75:51:7e:19:01:28:cb:44:1c:78:75:1f:
21:88:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:19:31 2025 by rpki-client