Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json)
Hash identifier: cUJMxPPO00pLlMVUvfnvyPUCqrcUIohJz3Ga538pjmg=
Subject key identifier: 27:31:45:7A:B6:F1:8F:14:75:72:56:04:69:AC:64:88:9C:4E:F4:E1
Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Certificate serial: 0196862449DEFA9497079A8DD49B628C22D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
Manifest number: 02FC
Signing time: Wed 30 Apr 2025 10:00:47 +0000
Manifest this update: Wed 30 Apr 2025 10:00:47 +0000
Manifest next update: Thu 01 May 2025 10:00:47 +0000
Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: Wme/E9h+vFMDyyMjiQ235OT8LmBQ38CZSava5j4uZ/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:24:49:de:fa:94:97:07:9a:8d:d4:9b:62:8c:22:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea
Validity
Not Before: Apr 30 10:00:47 2025 GMT
Not After : May 1 10:00:47 2025 GMT
Subject: CN=2731457ab6f18f147572560469ac64889c4ef4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:a2:35:f2:06:27:6a:ed:3c:53:84:58:c5:
c7:83:b4:ed:6f:4e:3c:fb:99:5c:8a:23:71:54:00:
90:a3:fb:25:94:5a:5f:d2:fe:78:a3:08:45:38:43:
a9:01:35:fc:95:22:67:09:fd:1b:1e:d2:08:eb:ab:
80:ce:56:ad:35:c2:f9:97:da:42:83:f1:cc:d4:24:
b8:aa:2f:b7:da:40:7d:d2:6c:20:e4:a2:12:5f:ec:
9c:02:69:b3:b8:69:a7:80:c4:98:51:e3:25:81:10:
78:4f:3a:e4:0d:4b:d7:ca:ca:14:1b:0e:0e:d1:12:
26:76:7a:67:78:da:7e:58:90:07:87:cb:e7:71:f6:
d2:fa:bd:8c:29:01:69:4f:78:31:69:a0:62:2b:9f:
18:05:41:9e:82:d5:f6:65:a0:b0:b1:2c:89:ac:ed:
95:75:ab:1e:37:0a:16:5f:3c:77:4f:19:44:84:9f:
c0:75:0f:a0:01:4e:3e:d2:af:4d:62:f9:35:0a:16:
ff:7a:fa:81:bd:31:e3:e0:04:f9:2a:c4:d2:ae:80:
76:e0:d0:ed:16:d0:3d:6f:9c:50:b6:4b:14:34:3c:
4c:79:34:17:b3:5a:85:d3:f1:19:f4:72:dc:78:40:
7b:04:5d:c7:30:cd:15:c4:e2:39:b7:9c:8f:8a:9e:
97:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:31:45:7A:B6:F1:8F:14:75:72:56:04:69:AC:64:88:9C:4E:F4:E1
X509v3 Authority Key Identifier:
keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:36:4d:6b:87:bc:a8:cc:e4:81:f0:8f:4b:cc:65:4a:7d:e6:
c8:88:79:20:80:99:a9:38:e5:77:21:99:e7:bf:4d:f9:f6:aa:
c3:86:1a:9c:34:ff:f2:6a:3b:00:29:45:aa:5f:3c:ac:53:3b:
57:09:8c:71:3f:a5:47:45:fd:f9:a6:0d:93:15:fa:f7:93:6e:
0a:fc:e5:da:25:e4:eb:d2:72:86:c1:2e:47:3d:ad:ce:94:53:
3a:f0:cc:8b:ca:ab:55:b7:98:52:27:1f:80:5b:db:a4:c0:cd:
5a:72:cb:36:ee:62:eb:c7:ab:eb:03:20:44:34:a3:d4:a5:40:
28:9a:f9:78:6b:90:ed:f3:b1:d5:39:60:b6:bc:ae:f7:8f:60:
ac:f3:dc:44:7c:9e:97:13:1a:1f:d8:89:74:68:cb:fe:14:e4:
10:74:34:b8:00:e6:91:f3:2b:ca:f1:99:81:18:96:56:13:ff:
ef:7b:0e:68:d2:e1:de:81:d8:a9:a5:b1:ed:d4:c0:61:bc:65:
c0:c5:3d:2b:1e:77:cb:82:f7:de:66:1c:34:a6:46:1e:d7:cf:
21:93:b0:e2:f8:7c:e1:75:ef:74:b2:72:d0:05:39:3f:e8:a5:
93:62:18:62:99:58:8e:cd:4c:e8:ef:c4:44:7e:df:ad:bf:4d:
0e:a1:79:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:53 2025 by rpki-client