Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier: K+HKKpFA5F86rYIXXmJcmINZuBjXpw8fuTr150QE4Ug=
Subject key identifier: 9F:5C:D1:88:B5:0F:C0:D7:19:B3:A1:46:6E:4A:DE:85:DD:9E:08:E7
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial: 019677FB07623BA3E31ABED2616F2A76090D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 16:01:02 +0000
Manifest this update: Sun 27 Apr 2025 16:01:02 +0000
Manifest next update: Mon 28 Apr 2025 16:01:02 +0000
Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: qppAA3YrIiACY3ssBLIQaD2IYKvvouF3AlL5bfH8aK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:07:62:3b:a3:e3:1a:be:d2:61:6f:2a:76:09:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Validity
Not Before: Apr 27 16:01:02 2025 GMT
Not After : Apr 28 16:01:02 2025 GMT
Subject: CN=9f5cd188b50fc0d719b3a1466e4ade85dd9e08e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:e3:76:42:dd:f6:fd:59:0f:ea:e5:6f:82:
6d:da:40:5f:07:1d:ee:3b:8f:41:ab:7a:1f:5c:56:
cc:4c:de:a9:c7:a1:c7:21:b4:40:bb:7f:35:ac:20:
9d:2f:5a:d7:25:13:96:f6:6e:f6:d9:f9:a1:c9:31:
2e:80:e9:91:7d:83:2c:1d:aa:91:7e:54:ce:43:ec:
63:53:88:92:91:f5:f6:f7:3b:0d:8b:e5:7c:e6:3a:
a9:4a:c8:56:65:1f:af:0a:d7:d2:b7:2f:f6:f0:22:
8e:c1:03:3d:42:49:ab:8f:92:61:a6:e1:ae:20:ff:
1e:a5:66:d1:1a:e3:af:64:5e:c6:70:45:f4:83:a9:
00:8a:54:a2:5a:af:3a:67:3d:f1:34:d9:c3:17:7f:
c9:b5:e6:6f:51:0e:b3:5b:55:10:ff:15:26:0f:ed:
73:d7:cb:94:1f:d7:9f:cd:85:b0:c9:ea:00:6a:48:
dd:30:b0:03:96:d3:e5:7d:92:59:0a:a8:a6:55:52:
94:ce:c7:34:c8:31:4f:02:e5:a0:c0:18:d0:e6:fe:
2e:12:ef:65:11:04:0a:6d:97:3c:b1:5b:cb:08:b4:
56:73:95:e1:14:7b:97:18:14:80:93:1c:87:34:19:
21:b5:83:89:e9:cb:af:ef:f8:e0:fa:00:70:55:70:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5C:D1:88:B5:0F:C0:D7:19:B3:A1:46:6E:4A:DE:85:DD:9E:08:E7
X509v3 Authority Key Identifier:
keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cc:12:eb:da:e9:60:79:5c:db:aa:87:f6:71:6c:fc:a8:da:
50:44:12:67:38:a5:40:c3:78:e8:e3:c4:e1:63:16:c7:bd:38:
dc:15:13:97:e6:aa:0c:46:2f:d7:4d:d9:fc:86:cd:b7:43:37:
96:92:21:4b:d7:40:62:a9:6f:c9:9a:ea:15:1e:97:21:a8:53:
a5:41:9c:46:d8:12:63:07:b1:59:b3:d5:1a:c5:1c:22:ba:42:
92:7f:e6:99:b1:ea:0d:70:64:38:91:4c:d8:b0:41:13:d6:22:
8a:c3:e0:51:23:52:20:ed:99:71:ec:4c:64:3b:93:92:2b:7e:
19:63:e6:4c:99:4e:fb:89:00:0a:dd:25:cf:0e:6e:67:a6:73:
0d:89:af:1f:de:36:49:94:e7:c2:ac:2a:96:22:ff:df:be:74:
33:f5:9a:cc:c9:da:31:15:dd:66:58:a9:8b:59:c7:8f:0b:92:
2e:ce:0e:42:74:12:9a:7b:fc:ca:da:33:e3:cd:4c:09:7f:1c:
e5:c1:39:bf:b1:47:7d:72:40:08:ce:72:bf:d9:95:2f:92:6d:
60:8c:af:e0:e8:2f:b7:de:18:8b:87:9e:cc:0c:cf:c9:14:ac:
4b:55:6b:28:91:96:87:94:56:be:2b:c1:34:d5:10:44:c5:dc:
88:ea:60:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:13:14 2025 by rpki-client