Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
File: XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft (raw, json)
Hash identifier: Pfo6a7iIR9fpSPvKDCEallnxjuLN6TlY/6iVRQSWWsE=
Subject key identifier: C8:28:EB:26:7D:22:1B:A7:ED:2C:7B:67:FA:D3:D1:02:B6:32:37:4F
Authority key identifier: 5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
Certificate issuer: /CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Certificate serial: 019690715FD6A01827B3F727758AD60B50F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
Manifest number: 151B
Signing time: Fri 02 May 2025 10:01:11 +0000
Manifest this update: Fri 02 May 2025 10:01:11 +0000
Manifest next update: Sat 03 May 2025 10:01:11 +0000
Files and hashes: 1: XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl (hash: 6/feA1T5s+Glkb00P3uVrjG7lPybccWzLlAgtr3eTOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:71:5f:d6:a0:18:27:b3:f7:27:75:8a:d6:0b:50:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea85f1dd4d0346480f009874a8f5670e31085c2
Validity
Not Before: May 2 10:01:11 2025 GMT
Not After : May 3 10:01:11 2025 GMT
Subject: CN=c828eb267d221ba7ed2c7b67fad3d102b632374f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b6:8d:a8:a6:80:53:ad:f7:fb:71:c6:4e:d3:
f0:8a:60:39:d4:eb:e0:da:5c:54:60:55:54:15:19:
f5:06:bc:ad:88:f7:25:ec:0f:9d:60:97:76:0d:51:
45:44:c3:79:23:5d:39:bb:a4:b5:d0:92:ff:da:2a:
8f:9f:e8:6e:7f:f5:7a:26:17:f2:86:7a:2f:0a:f7:
e5:34:82:99:04:3e:06:64:d3:a2:d6:65:3b:02:09:
90:f7:4d:eb:c4:16:1a:eb:66:f9:56:46:d9:6b:d1:
a1:71:0d:fa:73:06:f3:59:29:31:e6:da:ff:9c:ee:
bb:af:20:74:c4:f8:75:bd:72:fa:f9:e7:da:b7:b8:
dc:fd:07:7e:dc:01:b9:ce:fc:b5:c5:e0:ac:36:64:
fc:91:6d:2c:4a:22:86:f3:05:2f:29:6d:92:6c:ce:
ec:bc:56:26:85:94:87:17:43:6e:26:86:f9:e8:37:
39:58:a7:18:f1:b2:e2:50:25:21:bd:11:30:a6:2e:
cc:c7:7d:03:ff:ce:f4:6c:53:15:d2:a9:6c:c3:12:
50:96:b0:74:44:9a:9c:29:3f:d3:d5:74:02:10:71:
97:da:78:e1:73:2a:87:6d:fc:93:1e:0f:55:b5:5f:
4d:0b:26:af:6a:44:2a:c9:2d:61:06:07:58:63:16:
ef:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:EB:26:7D:22:1B:A7:ED:2C:7B:67:FA:D3:D1:02:B6:32:37:4F
X509v3 Authority Key Identifier:
keyid:5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c8:31:b0:dc:f7:03:91:f6:7e:33:0b:e8:78:75:8b:31:fa:
1f:e8:7e:02:45:a0:20:9e:a3:0c:af:be:5f:a8:a7:ef:e8:ef:
cf:64:53:26:66:43:a2:eb:50:68:47:33:73:0e:8d:f6:1e:72:
64:fa:27:94:ef:4f:2f:9d:a9:83:87:52:e3:27:55:25:6b:4c:
c8:93:4c:02:11:54:94:39:d7:04:3b:1a:41:08:15:ae:2a:54:
ac:c7:2c:53:24:39:61:f4:d4:4a:14:5a:b9:a9:fc:d8:13:f3:
c9:64:7d:67:76:25:29:b5:50:f5:8c:43:6e:8e:42:47:08:75:
82:c3:23:b3:f6:54:b4:39:be:be:89:c1:8b:49:d7:8d:fd:30:
9c:ba:c5:3e:6d:d2:07:8a:99:1b:fd:36:42:48:59:29:19:6b:
e6:16:ff:1f:59:68:ed:19:dc:39:b9:ad:62:02:a3:12:6a:b9:
ed:80:b3:82:5e:50:6d:f9:96:76:8d:33:7f:28:a0:a9:1c:8a:
7b:c1:ee:81:3d:e2:22:af:b4:17:ea:1a:6e:9f:a4:a2:e7:96:
64:a5:11:0c:d6:60:32:d8:08:b9:2e:87:90:5a:91:b2:cd:65:
fa:05:46:ed:33:8c:87:7e:83:02:53:8a:bc:bd:dd:a7:3c:ab:
ce:5f:0d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:28:07 2025 by rpki-client