Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
File: UNlf0yarPwj3bczGVrs-Hia03Fc.mft (raw, json)
Hash identifier: 7OlIJTjUYRFHu05juRHCV+LGc7LJS/Pvj2ih4+/P0jg=
Subject key identifier: 20:B1:DA:34:04:89:E8:4F:5C:13:C0:29:69:AD:09:DB:ED:4D:7E:2E
Authority key identifier: 50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
Certificate issuer: /CN=50d95fd326ab3f08f76dccc656bb3e1e26b4dc57
Certificate serial: 0196767A60D47580C096383C638CF98FE4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
Manifest number: B6
Signing time: Sun 27 Apr 2025 09:00:53 +0000
Manifest this update: Sun 27 Apr 2025 09:00:53 +0000
Manifest next update: Mon 28 Apr 2025 09:00:53 +0000
Files and hashes: 1: UNlf0yarPwj3bczGVrs-Hia03Fc.crl (hash: 6J+ctMJtik/eLoLJMHIhPUIo9E0UXeqRxaizb55ixlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:60:d4:75:80:c0:96:38:3c:63:8c:f9:8f:e4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d95fd326ab3f08f76dccc656bb3e1e26b4dc57
Validity
Not Before: Apr 27 09:00:53 2025 GMT
Not After : Apr 28 09:00:53 2025 GMT
Subject: CN=20b1da340489e84f5c13c02969ad09dbed4d7e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:c8:0c:bf:c7:cc:54:a5:f4:d0:7a:6a:7a:
7d:62:d1:f0:34:b4:b8:02:f6:71:84:5e:0f:1c:95:
3b:db:34:2f:a1:47:a6:45:00:03:75:86:1a:d5:f8:
46:60:47:ed:01:f9:48:30:9b:a6:d9:25:aa:85:ee:
13:c4:b3:4a:a6:6a:5e:4b:4a:f2:1a:b0:b8:46:88:
d8:bb:7d:d2:e2:f5:bd:42:59:09:0c:4f:24:36:90:
f8:ed:0d:c2:11:8a:0f:69:e2:93:0a:3d:61:de:18:
29:2f:6e:65:03:d3:0d:6f:1d:69:38:9d:f0:87:ec:
5b:1c:2f:66:9f:e6:fc:be:a0:87:56:22:2e:31:31:
12:c4:ea:7b:57:74:ea:04:ba:25:9b:fe:ff:cd:56:
c6:01:b2:59:a3:f5:5a:94:89:d7:47:7d:70:23:8f:
58:8f:7a:af:26:ba:4e:48:79:1b:cc:d0:04:e4:9a:
8c:be:cb:54:f6:ca:44:99:41:0d:dd:84:9c:19:76:
73:54:19:68:e6:f0:3b:30:5c:17:6f:ef:ee:1c:a6:
de:1a:ed:0c:e8:ed:8f:cc:df:cc:2b:63:e6:71:7c:
28:88:44:64:a7:7b:b7:82:c7:46:4f:5e:c4:93:9a:
9c:43:9b:9f:d4:4f:4f:6a:fd:46:84:e5:88:2b:a3:
93:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B1:DA:34:04:89:E8:4F:5C:13:C0:29:69:AD:09:DB:ED:4D:7E:2E
X509v3 Authority Key Identifier:
keyid:50:D9:5F:D3:26:AB:3F:08:F7:6D:CC:C6:56:BB:3E:1E:26:B4:DC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNlf0yarPwj3bczGVrs-Hia03Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e6ccc7-d1e5-4f07-8dab-506a4934cad5/1/UNlf0yarPwj3bczGVrs-Hia03Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:39:ae:29:21:9e:d1:7c:b5:b0:5b:00:a6:ae:53:88:e2:fd:
ed:34:84:ce:d3:da:1d:2e:56:17:a9:38:70:74:88:06:5b:08:
00:61:cd:32:9a:89:d5:0b:c8:63:4b:1f:4b:d6:34:e4:0c:7c:
68:d0:08:0b:8d:5b:65:07:27:a8:03:d0:2f:8d:1d:48:44:64:
af:cb:8d:f5:1a:2d:5c:a3:b9:fa:87:c6:3f:25:b7:86:0f:1d:
53:af:93:13:4e:54:ea:e5:26:51:3c:38:d4:d5:3a:03:dd:7e:
90:da:6a:1b:da:61:e0:53:31:49:11:6d:2b:54:21:25:fc:33:
fa:d1:d4:ad:42:55:9d:f0:7f:04:24:ab:14:32:e0:75:16:ef:
7b:eb:85:d9:7a:0e:a9:a1:b4:b2:77:2c:bc:f2:1e:3f:f5:d7:
6f:c5:1c:34:f6:52:a9:3c:27:8c:66:a1:87:11:65:6f:f8:dd:
11:dd:f9:a4:4d:b1:51:68:c1:cc:47:68:fd:0c:b1:eb:f7:39:
56:fa:2a:b5:5f:b8:d1:d2:2f:87:b4:06:12:d0:a9:5c:38:4a:
66:47:72:f9:33:30:35:27:a5:65:ea:f3:9e:95:bb:d4:68:0d:
ba:d5:80:fc:4f:c1:56:67:74:07:63:bc:04:a3:67:9e:0c:38:
bd:35:de:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:30 2025 by rpki-client