Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
File: a9wGwwC61lEu6H_dJAEF8u8n1eA.mft (raw, json)
Hash identifier: 154aqVwrTpQPduTWNNk9OfnXoMbrMQVAUWvBo63teqo=
Subject key identifier: 09:C5:EE:1C:3D:3D:B8:EC:30:7D:CF:63:D6:98:06:C9:BC:C7:AA:31
Authority key identifier: 6B:DC:06:C3:00:BA:D6:51:2E:E8:7F:DD:24:01:05:F2:EF:27:D5:E0
Certificate issuer: /CN=6bdc06c300bad6512ee87fdd240105f2ef27d5e0
Certificate serial: 019698CFA23BE7D6AB30003300DE15B4CD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
Manifest number: 04BA
Signing time: Sun 04 May 2025 01:01:06 +0000
Manifest this update: Sun 04 May 2025 01:01:06 +0000
Manifest next update: Mon 05 May 2025 01:01:06 +0000
Files and hashes: 1: a9wGwwC61lEu6H_dJAEF8u8n1eA.crl (hash: jpMN2Fagh2sZeUvmmKGWk7SJDksbRAPDT7WcdRjW40A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:cf:a2:3b:e7:d6:ab:30:00:33:00:de:15:b4:cd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bdc06c300bad6512ee87fdd240105f2ef27d5e0
Validity
Not Before: May 4 01:01:06 2025 GMT
Not After : May 5 01:01:06 2025 GMT
Subject: CN=09c5ee1c3d3db8ec307dcf63d69806c9bcc7aa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:e0:30:67:ba:88:19:43:a6:1d:1b:72:42:
ae:ac:7d:93:53:d2:7e:83:b5:12:8b:1b:b8:2f:9d:
e2:99:66:89:77:ab:4c:fc:68:3b:57:e7:6d:6b:81:
94:08:ce:f0:ce:31:63:07:39:07:64:3b:de:ae:60:
ae:57:39:42:2a:50:24:6b:19:c8:fb:7f:29:12:19:
c7:86:fa:cf:f9:0f:a1:23:f9:6e:43:a1:e2:9c:cb:
ac:02:7f:62:a3:e0:09:48:06:07:a9:53:94:47:86:
9f:01:73:7a:d2:ac:cb:e8:59:f5:f9:bb:32:56:57:
4f:0f:ef:44:25:18:cf:86:39:57:e0:99:ad:d2:7c:
05:fe:1a:4a:80:bf:68:ac:23:34:d9:ec:1d:95:9b:
05:f8:d2:a6:ee:c4:8c:e6:1e:45:2b:bf:4e:bb:f3:
b7:59:0a:80:41:ed:e6:35:39:57:ab:fb:19:0c:4e:
62:04:07:17:d9:d4:aa:be:a3:84:0b:68:d7:04:8d:
a2:5a:00:e4:ef:b8:74:6e:53:eb:a9:64:be:03:c3:
4b:bc:5c:88:66:da:a8:40:4a:f7:1e:43:a1:e7:1a:
48:d7:19:1f:4f:01:a6:df:a8:2f:69:92:61:d9:a7:
79:17:7d:5b:2d:94:83:ab:9e:2d:32:3c:73:87:60:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C5:EE:1C:3D:3D:B8:EC:30:7D:CF:63:D6:98:06:C9:BC:C7:AA:31
X509v3 Authority Key Identifier:
keyid:6B:DC:06:C3:00:BA:D6:51:2E:E8:7F:DD:24:01:05:F2:EF:27:D5:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:89:73:b5:38:fc:1d:39:ca:ea:5c:4a:13:4d:f5:d3:d2:ed:
49:16:d8:89:aa:b5:b4:9b:cb:68:8a:75:2b:69:2a:8a:db:c0:
b2:39:86:35:53:be:b2:ac:d4:09:7f:ea:e1:1c:57:5c:2a:05:
81:20:0a:7e:38:ab:e4:08:fc:dd:9c:2b:cb:5d:7d:2b:01:61:
46:32:65:58:23:ea:29:6e:be:8d:6b:79:d5:15:e9:45:ae:91:
88:f2:90:1b:5d:e9:11:cc:e7:b6:b7:e7:f8:64:c6:51:05:de:
83:ce:d6:5c:c1:88:42:ab:3a:3a:28:d5:08:d9:a6:43:26:6e:
cb:af:d8:ab:1a:df:df:4c:15:b8:86:e3:73:86:c8:fc:27:6d:
8c:21:e5:55:03:13:3c:ac:1a:5d:7e:05:9b:b7:c9:b7:ee:29:
15:b6:1f:7b:1e:ca:e3:5b:4f:9f:aa:e4:df:68:1a:07:b1:6c:
6e:c7:66:41:a4:8b:d5:a7:5f:86:af:89:46:bf:40:5a:7a:80:
a9:f3:71:bc:bb:25:89:fb:e8:97:3a:69:9a:e9:49:d7:f6:2b:
3c:45:3e:89:7a:da:3d:15:7b:4b:a6:bb:b6:20:d8:87:e8:9f:
0e:11:ac:4b:86:e1:e0:8a:1b:9c:ca:25:5b:59:78:55:5c:e7:
5e:2b:65:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:09:15 2025 by rpki-client