Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: 9D9K6nKOpFjcGG9uFT29XaVzsb2wRuZq/GVbSdqjB0k=
Subject key identifier: 79:70:C2:F7:BB:9A:AC:33:52:3B:3C:1D:F2:62:6B:1C:C6:78:E3:EF
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 019678D6A7D8F1515C5290178D40098C3A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 20:00:55 +0000
Manifest this update: Sun 27 Apr 2025 20:00:55 +0000
Manifest next update: Mon 28 Apr 2025 20:00:55 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: mGLY/nkISs3ufyfZAgIeg8f4eEgZUlTS9Mq6xcAUv64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:a7:d8:f1:51:5c:52:90:17:8d:40:09:8c:3a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Apr 27 20:00:55 2025 GMT
Not After : Apr 28 20:00:55 2025 GMT
Subject: CN=7970c2f7bb9aac33523b3c1df2626b1cc678e3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:76:54:7a:4b:98:e6:64:a6:d4:ae:83:6c:
9d:85:c7:03:48:24:39:a1:7e:42:11:be:cb:5f:f8:
87:b2:da:cf:1f:5d:52:eb:c4:d7:52:9d:19:3a:b4:
6e:46:0c:3b:67:19:42:e7:02:e3:4d:c4:66:42:83:
e7:79:ce:48:c6:00:5e:b4:0a:2e:ce:36:1c:bf:8d:
31:85:74:ca:d6:d0:23:c6:00:65:53:ce:d3:a0:89:
9c:75:dd:1e:ac:b1:07:79:bc:d5:0a:48:b1:26:da:
c6:81:4a:c1:3e:6d:9b:6e:9d:a7:dd:b0:e1:89:a9:
66:4c:79:50:ab:86:6f:7f:f6:d6:2a:5a:fc:b9:fc:
5e:52:5a:75:c6:f0:79:38:9d:29:ab:df:3f:b3:1c:
f3:13:fc:39:06:55:a6:2e:70:4e:bf:9d:28:82:43:
b0:91:84:a2:b2:83:fa:47:14:dd:99:69:92:c0:40:
88:0f:26:3b:2c:57:e5:2d:59:ea:35:66:7d:d7:da:
d8:c1:e6:73:5a:34:ee:c7:7c:72:83:ca:c4:44:a3:
11:91:dc:c6:3b:8b:f8:e5:fe:e5:12:e4:82:a4:4d:
5b:46:f1:0d:46:c1:b1:dc:ab:71:33:11:3e:83:fa:
2b:8c:81:1a:4d:ea:92:7f:2c:e3:70:25:76:7b:0d:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:70:C2:F7:BB:9A:AC:33:52:3B:3C:1D:F2:62:6B:1C:C6:78:E3:EF
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d0:72:e1:aa:60:8a:4d:0a:c1:21:4d:30:41:8f:e1:a2:40:
12:64:5e:93:6f:e7:9a:06:47:6a:6c:e6:1f:ea:c9:dd:44:3c:
d5:04:b1:e8:8e:11:cf:3f:3e:08:b0:7d:99:39:fe:a3:30:f6:
7a:3f:37:1d:f2:0d:ea:e1:00:c4:22:5e:e0:2a:b9:00:af:ed:
ef:a8:c9:6f:2d:c5:fc:fe:88:87:ac:72:dc:41:6d:1f:24:3c:
59:39:2c:b1:ee:5f:b3:a6:b0:87:35:79:ae:51:7d:17:b3:d5:
4c:05:58:f5:33:43:dc:3a:b1:86:00:4b:cc:f2:27:60:03:53:
06:ee:fb:95:82:96:ad:d5:4f:02:5b:2a:f5:b3:ba:73:e5:7d:
eb:91:e8:9f:40:ab:99:e9:20:7f:15:75:06:21:a9:37:1b:a2:
b9:6b:d4:87:93:b0:48:df:d7:fb:59:6f:b4:22:c5:f6:e1:f6:
18:77:00:88:2e:88:f8:1f:66:6e:51:d3:54:d4:e3:a0:31:12:
d2:3c:56:3d:14:81:92:cf:50:06:74:5b:43:f4:f6:e9:d2:07:
b3:14:f6:44:8c:49:0b:14:ac:9b:13:74:e4:72:97:81:30:96:
50:74:40:d8:b9:70:55:54:96:20:65:59:83:f7:93:4b:6d:4b:
d1:0b:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:58:47 2025 by rpki-client