Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: r/41oQbPbMK1vKbIUngddFlU7z+FVIrsznjd6bOT4oU=
Subject key identifier: 40:6C:EA:01:14:E5:4F:D5:C0:A8:F9:4B:7C:FD:7C:38:37:2E:31:EC
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 01969115F36097ED5CA56984813D95E78D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 06C5
Signing time: Fri 02 May 2025 13:00:56 +0000
Manifest this update: Fri 02 May 2025 13:00:56 +0000
Manifest next update: Sat 03 May 2025 13:00:56 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: 1BVNJcYADHl9+TkrG9yfDfMcpqREEqVa/Olu4GXmfSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:f3:60:97:ed:5c:a5:69:84:81:3d:95:e7:8d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: May 2 13:00:56 2025 GMT
Not After : May 3 13:00:56 2025 GMT
Subject: CN=406cea0114e54fd5c0a8f94b7cfd7c38372e31ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:69:c7:fc:e6:60:bd:79:d8:7b:29:6a:47:
6b:ea:6d:6f:11:6b:fb:66:e9:00:44:09:5c:5e:72:
dc:6a:8c:de:ea:71:5d:8d:c6:bc:92:7f:d7:83:8a:
08:2e:9b:00:fe:87:3a:67:8a:a5:c9:fd:75:af:a8:
22:b9:ae:68:4f:27:2d:03:ad:0d:9e:07:02:33:77:
23:e0:7b:86:45:a4:66:66:7c:e3:1a:5c:cb:53:37:
f1:01:af:a5:74:cc:35:6f:0a:60:67:69:6a:25:8e:
cd:b5:b6:36:8e:26:e1:0b:36:79:e2:79:90:3c:47:
50:15:69:3d:8c:a7:54:3c:68:8b:49:8d:1e:a6:a1:
96:fe:5a:c1:55:d5:56:a4:ff:e5:40:6a:25:1b:56:
fd:3e:10:01:21:94:1d:32:d8:c6:8b:61:ec:b2:25:
d5:94:ce:ab:f9:70:8a:c7:52:57:eb:d1:df:b8:81:
10:c8:02:ab:18:1e:74:7d:18:14:25:9c:26:79:d9:
5f:58:a5:1a:e2:1d:e4:48:34:0d:ec:27:1a:3b:fc:
6e:ee:49:71:63:53:8e:1e:d9:63:05:eb:19:5e:5e:
f8:43:de:f5:5c:ee:f6:da:83:11:65:57:69:41:a9:
30:82:d7:3f:49:4d:5f:4f:6c:26:a1:da:89:32:1d:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6C:EA:01:14:E5:4F:D5:C0:A8:F9:4B:7C:FD:7C:38:37:2E:31:EC
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a6:7f:fe:be:ce:73:53:24:09:fb:a7:4e:ed:e6:25:4b:ff:
8d:a9:ca:17:ff:bd:c7:57:58:44:86:b2:76:ec:3c:37:ac:5c:
07:57:84:e4:48:33:c5:54:6c:fa:ac:3f:b7:16:6d:55:cd:8b:
4b:47:1c:e6:1a:c0:c7:ab:8b:42:58:4f:00:f6:3c:7e:0b:30:
e6:e7:aa:ce:50:9b:c4:9b:db:10:9d:33:28:c7:5d:3a:1e:de:
24:a4:5c:39:84:42:01:1c:a6:14:6e:02:40:9c:7a:1c:23:06:
72:c7:80:e3:41:85:80:55:ed:87:83:c3:60:4b:10:bc:35:f8:
2c:48:8f:28:18:31:a2:c9:8d:65:94:a1:ed:02:ca:c7:43:b6:
33:a2:bc:e6:de:b7:cb:77:34:b4:ca:b5:6d:ea:67:80:1c:40:
04:a9:21:f8:c5:de:c4:03:08:9e:3d:e9:43:a4:fd:89:dd:27:
42:9b:32:db:29:ce:c1:24:12:f7:35:98:54:80:20:99:3e:f2:
99:36:06:e2:e3:11:26:a6:31:8e:26:6b:b6:31:06:56:58:35:
af:6b:c0:50:1e:00:c0:df:25:33:8e:8b:03:a2:e7:d4:62:2c:
f9:57:9b:c0:66:c1:33:7f:d2:eb:98:eb:af:78:c9:39:d3:64:
58:f3:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:23:09 2025 by rpki-client