Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: oezts8JwmsOF81aDCltMLWT/1zxD+07zOWV8tGb0vUo=
Subject key identifier: 2C:67:34:4D:4A:F4:FB:93:52:FD:D5:79:C8:4B:B7:96:62:B5:5E:6D
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 0196760C00E9D28C933F1C90223A02D3CC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0841
Signing time: Sun 27 Apr 2025 07:00:20 +0000
Manifest this update: Sun 27 Apr 2025 07:00:20 +0000
Manifest next update: Mon 28 Apr 2025 07:00:20 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: +286JWvwpjDDclfKgHkrK3eaKy7udSw2t+94u0xoZ18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:00:e9:d2:8c:93:3f:1c:90:22:3a:02:d3:cc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: Apr 27 07:00:20 2025 GMT
Not After : Apr 28 07:00:20 2025 GMT
Subject: CN=2c67344d4af4fb9352fdd579c84bb79662b55e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:f2:67:58:ed:e1:15:a7:ac:f7:8e:35:31:
ad:da:ba:81:ea:89:7d:e8:dc:4f:c4:3e:2d:d4:9d:
a9:53:fe:30:45:4e:e5:43:4c:48:cf:c7:fb:7e:c6:
29:62:d1:75:08:42:21:0e:12:ac:63:43:a2:e1:e1:
df:1f:9a:1f:92:59:61:9f:a5:95:14:da:27:42:ad:
3a:99:40:c7:af:07:5f:1e:ab:87:6c:fe:b6:05:1e:
be:98:77:5b:9d:da:9c:26:b4:36:fb:6d:6a:73:54:
9e:94:5f:d4:8d:68:0f:1d:23:72:2b:e7:b1:1b:30:
72:87:37:5e:ef:ac:2c:63:61:32:7b:0d:cf:fe:60:
d2:00:3f:98:df:37:95:d9:10:28:78:98:db:bd:91:
d9:9b:19:cc:93:7b:17:22:3f:d3:3c:a4:58:ff:e3:
01:29:59:90:64:b8:11:0c:d8:5b:39:26:05:b3:c4:
48:df:4c:56:a6:9f:5f:5d:a9:c9:0a:f3:cc:9b:dd:
f9:ea:4b:46:9c:ce:00:2e:2a:15:ef:d7:1e:61:85:
94:b0:94:f6:bf:b2:73:a1:06:43:ae:9c:fd:06:9f:
02:7e:31:d7:81:4f:08:bd:37:03:63:5c:45:59:c7:
62:85:ac:f2:6e:3d:5e:22:01:5f:91:b5:d9:98:b4:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:67:34:4D:4A:F4:FB:93:52:FD:D5:79:C8:4B:B7:96:62:B5:5E:6D
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e9:ee:5a:7b:31:bb:0b:7d:bf:8a:8a:53:dc:ce:53:28:2d:
7e:2f:3a:60:bf:31:3f:51:ba:59:3f:03:0a:77:26:40:f1:8f:
37:17:4c:32:ce:95:e8:4f:cd:05:08:f6:7c:ca:64:3f:40:28:
65:7e:13:c9:c6:d5:f6:b8:fa:ed:07:bd:de:6b:b9:ec:35:50:
cf:b9:26:de:fb:d9:56:a9:9b:5d:7d:38:f2:e6:75:0c:32:2b:
27:f8:5e:22:68:2a:cc:cb:32:81:8e:7e:16:96:8a:39:1e:af:
8f:8f:7b:2c:81:7a:e8:9f:96:91:98:90:bc:e2:65:60:0d:8b:
e8:38:ab:54:f2:7d:f8:d7:d2:04:9d:37:35:a4:bb:34:46:7a:
17:3e:f7:49:d5:84:ae:ed:0c:dc:7e:42:06:4f:fb:f0:8a:6b:
80:c6:cc:7f:76:61:60:26:37:c9:77:cb:4a:0b:be:9d:f5:12:
de:27:31:84:07:38:60:61:84:1a:d0:6b:1f:0b:f6:a5:12:05:
69:a3:d1:2f:9b:14:c6:05:c7:bf:81:dc:a9:d3:4b:db:5f:44:
cf:db:b9:ad:76:dc:1e:2d:c9:18:33:7e:bc:47:67:65:b7:ab:
65:f8:c6:b3:87:93:9d:27:b6:69:4e:4e:7a:71:cf:a2:6b:cc:
d3:14:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:51:40 2025 by rpki-client