Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
File: XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft (raw, json)
Hash identifier: zmbA9tPcRMHjHjmvTJCAiCAUB3J2lDNKZ7ioHWKkV3E=
Subject key identifier: 2F:C2:C7:44:72:3A:A7:BB:56:46:40:02:0C:7C:FA:B8:43:55:BB:92
Authority key identifier: 5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
Certificate issuer: /CN=5db79275659dd961c742bf21d8dca184a4430d85
Certificate serial: 0196741DD141BF6771747CF9E415B1BC3573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
Manifest number: 0B8A
Signing time: Sat 26 Apr 2025 22:00:33 +0000
Manifest this update: Sat 26 Apr 2025 22:00:33 +0000
Manifest next update: Sun 27 Apr 2025 22:00:33 +0000
Files and hashes: 1: XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl (hash: CGyI2MRceQlI9gBxd9uq+0Tut7ah3K3NwJuKklwb9hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:d1:41:bf:67:71:74:7c:f9:e4:15:b1:bc:35:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db79275659dd961c742bf21d8dca184a4430d85
Validity
Not Before: Apr 26 22:00:33 2025 GMT
Not After : Apr 27 22:00:33 2025 GMT
Subject: CN=2fc2c744723aa7bb564640020c7cfab84355bb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:f9:34:9e:e2:13:6d:ed:76:76:4c:0f:f6:
9f:77:97:2a:b7:91:03:5c:34:99:ab:81:c3:04:b1:
0a:e1:96:cc:75:bd:64:42:57:9b:97:76:ad:a1:29:
7e:a8:93:cf:93:cf:4e:f6:6e:e7:83:f2:b7:31:b6:
34:46:5b:f7:c1:64:da:7c:ac:93:b4:74:d8:f8:1b:
7e:f6:b0:5d:9c:b8:6b:70:c9:4b:ce:1d:7c:b0:a2:
40:3d:b4:f4:2e:2f:52:e1:31:f8:0d:17:f0:a3:fb:
af:69:da:d2:fc:c9:18:74:04:af:57:5d:8a:4d:cf:
09:79:4f:ef:9d:ac:5e:e6:58:02:1b:34:8b:34:75:
5d:55:06:fa:77:c1:78:6e:4e:bf:73:30:07:d7:ba:
41:32:58:24:6f:0b:66:71:1b:09:82:70:71:72:38:
d3:e5:57:cb:9a:87:5b:79:e2:bc:40:63:bf:64:69:
5b:db:68:df:6b:27:26:7c:be:72:6c:e7:fa:e0:56:
93:4e:32:6c:28:56:e8:31:88:7c:dc:c2:9b:79:89:
78:55:5a:2f:90:45:09:a1:44:0d:dc:80:74:77:ca:
f1:85:11:71:06:c4:7b:c8:3b:a7:b2:d9:29:08:37:
cd:02:4e:10:da:af:b3:d8:8d:41:4d:62:80:df:a8:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C2:C7:44:72:3A:A7:BB:56:46:40:02:0C:7C:FA:B8:43:55:BB:92
X509v3 Authority Key Identifier:
keyid:5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8a:ce:79:04:ce:a9:21:5b:76:32:53:ee:18:46:ef:32:0d:
ba:d9:9b:73:01:ad:83:c4:9e:a6:6e:28:f8:36:35:21:b4:bf:
7e:15:e2:da:b8:98:64:fb:51:57:94:35:58:d4:b6:84:5a:05:
22:60:43:e2:60:e1:c9:15:bb:ca:b2:e8:f6:c2:80:b9:96:28:
0f:05:df:d7:0f:79:c1:56:39:81:b2:39:83:60:28:4b:95:43:
78:01:e7:be:2b:67:7c:e6:bd:f8:2f:61:99:83:9a:fa:af:87:
ba:e6:34:4b:01:16:6e:34:73:5e:63:07:36:14:03:8d:02:d5:
95:3e:c7:94:bf:b4:7c:3b:59:65:d6:ff:10:24:6c:c2:06:43:
5a:46:72:be:fa:c8:9a:8a:d8:06:b9:e7:f2:76:38:e0:38:bb:
4b:a0:8e:d5:87:3b:c4:34:ee:eb:1f:7b:89:f7:aa:ce:d6:b7:
9b:51:41:0b:69:bb:37:1b:8a:06:83:7a:fd:2e:11:86:64:d6:
cf:d5:17:9e:5b:84:16:6b:4f:56:ce:cb:86:81:97:45:ad:44:
b8:0d:06:4e:3a:3e:fc:cc:44:34:c8:7f:e6:46:5b:b4:c6:94:
1f:b3:25:e7:ed:ad:2e:01:98:d0:de:1c:fd:04:a3:af:d7:94:
17:fe:f1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:20 2025 by rpki-client