Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json)
Hash identifier: iM48daO0WOrAcCuACK8UTnHjR3CC+kwrEvxHH8BQpUI=
Subject key identifier: DD:28:6D:AD:D7:3A:02:6D:6D:AB:E3:47:54:D2:AA:2D:F8:7B:D2:83
Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Certificate serial: 0196821073F804244156DD6F2E890A004EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
Manifest number: 0CC5
Signing time: Tue 29 Apr 2025 15:00:38 +0000
Manifest this update: Tue 29 Apr 2025 15:00:38 +0000
Manifest next update: Wed 30 Apr 2025 15:00:38 +0000
Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: fL104CjEQX6/qSGp4m2aVjwSjbFOSR3UzKgryiVOU/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:73:f8:04:24:41:56:dd:6f:2e:89:0a:00:4e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8
Validity
Not Before: Apr 29 15:00:38 2025 GMT
Not After : Apr 30 15:00:38 2025 GMT
Subject: CN=dd286dadd73a026d6dabe34754d2aa2df87bd283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:3c:5b:b0:24:f2:14:37:e0:e0:ac:ee:b9:
06:b2:35:fd:9c:6f:72:49:a8:e7:0b:d8:fe:4e:08:
dd:15:60:5e:b5:21:71:d4:6c:1a:56:f9:81:f6:3d:
b5:e0:e6:e5:3a:f2:38:10:cf:98:7e:87:07:50:7f:
72:03:45:b2:25:58:2e:7a:5b:b1:50:97:7f:32:1e:
eb:d3:74:7b:4a:58:9e:4a:4b:e4:cc:73:c0:b3:33:
eb:49:a3:12:e1:ab:da:d1:38:cf:9f:a3:dc:30:b9:
08:41:6e:cb:85:f9:b9:4e:cb:3b:2c:44:c7:7f:1a:
32:9b:fd:0c:81:e9:a0:e1:a3:17:fc:3e:b1:67:61:
49:8b:93:d7:dc:40:9b:fa:6e:c9:de:58:dd:0a:4e:
cc:ab:b7:ee:fb:fc:95:65:cc:f8:6d:d6:60:cf:36:
aa:fe:a6:e5:44:c4:cd:08:2a:48:86:f8:19:30:9d:
ee:bc:f7:a5:92:32:df:e9:e9:0f:37:b6:9b:de:22:
8a:d2:f5:09:03:63:71:6b:2b:3f:4c:ab:ae:fa:97:
68:fc:38:83:34:ef:e8:45:5a:4b:47:9a:b9:5c:de:
a6:ff:4e:20:70:05:77:70:91:92:14:e3:db:25:7d:
84:1f:4c:ed:93:20:78:c4:32:7b:89:25:4e:15:b3:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:28:6D:AD:D7:3A:02:6D:6D:AB:E3:47:54:D2:AA:2D:F8:7B:D2:83
X509v3 Authority Key Identifier:
keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f7:94:74:eb:95:61:7f:72:ac:62:0d:41:a6:ce:b6:9f:46:64:
98:b7:50:50:be:44:33:0c:7b:06:7e:70:4a:7a:60:f4:a8:33:
2e:a2:65:ad:30:4e:ff:0a:3c:75:84:39:ea:d5:c0:a8:d0:d8:
84:ed:be:24:c0:0b:bc:f7:65:d4:b4:79:2b:19:68:42:78:78:
b8:b5:e1:92:36:83:7b:c2:37:71:d1:c9:6c:3e:a6:6a:b1:85:
fe:09:d7:00:1d:93:72:cd:74:e7:38:10:c3:48:6f:35:d6:54:
23:c7:cc:3a:48:0d:9f:27:1a:62:ab:2c:ad:57:43:b0:c1:bd:
48:d7:44:b7:ab:00:ff:b4:3d:28:49:6e:71:12:76:fe:68:b0:
05:19:f9:27:75:ac:a9:0c:a5:b3:98:18:60:78:27:37:e1:5b:
40:39:da:f2:97:64:9d:2e:96:47:97:77:dc:e8:5d:87:d3:29:
cf:29:00:0a:95:fb:73:88:22:cf:f8:13:8b:eb:da:3a:c2:1c:
18:66:3f:3d:50:e5:99:91:33:44:68:cf:85:b7:d1:c3:84:0d:
4f:6c:ec:f4:65:ac:24:b8:3b:50:d7:59:cc:70:0a:a3:c2:f6:
cc:ac:35:2c:cf:55:ac:92:81:e0:3f:8c:b4:91:20:4b:d2:51:
f2:99:f6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:31:12 2025 by rpki-client