Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: GRl5p8tZxUh5yyzi72ACYbWmHdd6DFcgxoKKDe3abbY=
Subject key identifier: C6:CE:B0:07:F4:D7:E0:3C:07:41:11:A6:82:40:84:23:C2:F7:3E:DF
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 019691834DE42038632C97050C68C321457C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 04FB
Signing time: Fri 02 May 2025 15:00:23 +0000
Manifest this update: Fri 02 May 2025 15:00:23 +0000
Manifest next update: Sat 03 May 2025 15:00:23 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: EY2OlO0NdqsQrhBI2tMtk2Po/nC7IkmUzYsP3yVzCts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:83:4d:e4:20:38:63:2c:97:05:0c:68:c3:21:45:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: May 2 15:00:23 2025 GMT
Not After : May 3 15:00:23 2025 GMT
Subject: CN=c6ceb007f4d7e03c074111a682408423c2f73edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:16:84:46:d3:94:c1:dc:8b:7d:52:19:c5:
69:2a:8f:4f:aa:6c:65:5e:48:2b:e9:3e:a8:89:ff:
50:90:4f:ec:cc:81:ac:61:94:1c:34:18:bc:98:bf:
3e:5f:40:19:39:d0:2a:25:b9:36:ca:a3:f6:a2:4c:
fa:a7:57:3b:92:55:8c:42:da:1e:78:d7:78:53:1f:
ce:4d:a2:ae:18:89:48:81:55:66:57:8b:7a:6b:c9:
98:d9:11:07:92:47:db:d5:0b:b7:35:5a:84:59:7a:
7a:69:c8:33:a2:7c:b7:7e:fe:4c:14:70:a3:0c:76:
db:5c:41:0a:10:b3:4f:b1:78:be:0a:28:a9:13:5a:
69:f0:08:35:ea:38:79:d7:03:49:15:d4:13:27:8d:
c5:ac:f7:42:59:92:7a:cb:a4:2a:5a:04:15:b0:53:
a6:6e:14:39:dc:20:60:41:8e:f0:0a:5e:dc:d8:d4:
1b:14:60:a9:7c:1a:86:4e:76:7d:9b:97:2a:c2:b6:
47:63:36:fe:27:30:27:10:eb:ce:91:a3:b2:0c:b5:
9d:ac:8d:5d:03:89:6e:39:4f:8f:3b:39:e7:71:98:
0c:77:47:be:47:0d:0b:df:74:cf:9b:99:8b:8a:2c:
98:89:75:5c:09:53:96:d0:c1:39:39:21:b4:ec:30:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CE:B0:07:F4:D7:E0:3C:07:41:11:A6:82:40:84:23:C2:F7:3E:DF
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:92:de:ae:b4:7b:00:36:3b:ca:cb:11:64:9f:4f:8d:12:48:
a9:7c:cf:f9:18:e9:d1:f6:3a:c0:0b:99:7e:41:85:8d:16:21:
bc:19:e4:e8:d5:20:9a:b9:a7:ff:a3:e4:74:cd:ca:3c:20:47:
77:6f:a8:65:8b:b0:82:94:77:2e:f6:f9:19:8d:11:60:de:bb:
df:de:e9:2d:92:63:9a:c8:0c:c3:77:c8:bf:14:1b:d3:80:1c:
bc:93:e1:d3:b5:13:33:56:0b:51:2b:bf:fe:06:72:82:6a:4f:
fe:1b:9c:7b:d5:ce:48:42:96:e6:a4:ab:f3:22:3a:49:3e:c2:
8f:1e:ee:a3:94:de:d8:8d:5c:8f:27:43:ef:2c:b7:77:fc:de:
ae:91:33:ad:92:3f:7a:8d:11:87:ab:59:ad:42:89:a2:4d:a7:
a4:04:85:af:fd:b4:d0:c8:f2:45:c5:6f:a9:6b:d0:bc:38:aa:
a6:18:e6:e0:f5:47:30:79:c4:9e:9e:47:b0:6d:26:9a:90:18:
2f:6d:b5:57:3e:39:e9:62:20:69:5e:57:b5:4d:92:e3:6f:11:
42:be:7a:9f:62:89:fe:dd:83:b3:c8:77:c8:df:09:e8:2b:e3:
bf:c9:27:c8:52:39:ff:aa:fa:45:b5:f9:e2:19:be:4c:20:8f:
e9:41:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:12:59 2025 by rpki-client