Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
File: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft (raw, json)
Hash identifier: ydPcjcO6umwOH5HBsdQd7AaP+3ORleOA5GA/Cn5m3HQ=
Subject key identifier: 5A:20:8F:FF:AE:C7:0B:CA:B6:C7:BA:0D:12:BF:CD:3D:73:A0:D2:F4
Authority key identifier: E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
Certificate issuer: /CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Certificate serial: 01967E6A528D25E81C40FD7CEDF1E0592F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
Manifest number: 0855
Signing time: Mon 28 Apr 2025 22:00:19 +0000
Manifest this update: Mon 28 Apr 2025 22:00:19 +0000
Manifest next update: Tue 29 Apr 2025 22:00:19 +0000
Files and hashes: 1: 6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl (hash: Lhiac8ugSNMQBPCwDl1Cmm5S3c2zUWNz1/bsocGWmg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:52:8d:25:e8:1c:40:fd:7c:ed:f1:e0:59:2f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e927f4eaed921ca37d63ee24baf71e4c7ffa077a
Validity
Not Before: Apr 28 22:00:19 2025 GMT
Not After : Apr 29 22:00:19 2025 GMT
Subject: CN=5a208fffaec70bcab6c7ba0d12bfcd3d73a0d2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fa:7e:c4:0c:1c:1e:19:fe:0a:ec:cf:6d:de:
fd:bb:a8:6e:23:fb:0c:31:7a:c8:a5:3b:50:d9:cc:
a4:48:8d:0f:df:30:bf:05:94:4b:2d:8a:f5:0e:89:
6a:15:df:d5:e3:31:4c:89:54:75:53:ff:f4:c4:52:
b5:18:2a:a2:d1:81:9c:b2:7b:ef:df:cb:66:d3:b1:
c1:c8:b8:b0:5b:67:16:b2:f8:c5:e4:72:7f:4e:96:
d1:15:e5:b5:86:83:b4:eb:68:49:dc:26:20:1b:be:
75:69:2c:59:bc:62:f4:b6:59:ce:f4:42:e9:6f:bb:
e2:3a:84:d0:70:ac:13:5e:b2:ca:87:0a:2c:1a:07:
f6:46:a9:c5:b1:fe:38:a3:00:a4:51:54:b0:01:98:
1b:8a:00:25:34:3a:ef:c8:52:a3:63:6e:c7:e2:43:
38:c5:f5:80:80:4b:8d:7d:8a:02:10:3b:79:b0:37:
c1:74:73:e6:e2:e7:88:c4:13:04:29:09:f7:24:55:
c4:a2:17:f3:fd:95:be:f6:cb:77:4d:da:d4:74:e9:
58:42:9d:8e:64:ac:4c:8f:02:eb:cf:87:c0:17:7b:
b2:26:ef:2d:15:d0:80:36:fb:bf:94:9d:22:71:7a:
7c:17:af:fd:57:5f:ee:c0:20:ce:22:1c:dc:bf:81:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:20:8F:FF:AE:C7:0B:CA:B6:C7:BA:0D:12:BF:CD:3D:73:A0:D2:F4
X509v3 Authority Key Identifier:
keyid:E9:27:F4:EA:ED:92:1C:A3:7D:63:EE:24:BA:F7:1E:4C:7F:FA:07:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sf06u2SHKN9Y-4kuvceTH_6B3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee411a-a19b-40c1-8936-fd72175443eb/1/6Sf06u2SHKN9Y-4kuvceTH_6B3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1d:0e:27:f9:7d:c1:56:b6:87:4f:33:69:14:9b:5a:68:e9:
59:5b:d0:ab:44:66:f3:e9:56:b4:19:a3:b4:99:19:10:a6:ee:
89:e8:96:2d:a2:1f:b6:56:7b:35:bc:a5:bb:8b:60:15:4e:89:
60:18:c2:40:a0:1d:63:66:ac:a8:67:7a:7d:67:2c:e8:a5:2b:
04:fd:48:dc:da:e3:4c:da:fa:b6:73:6d:f2:6b:d1:0d:31:d8:
89:3c:34:f6:70:ed:00:9c:c3:10:84:ae:c5:9b:b6:a9:41:ee:
89:a3:25:2c:38:83:ed:29:32:31:42:97:e9:f2:fb:70:d7:2a:
cd:75:90:ac:ce:8e:71:54:26:8a:ef:03:01:28:6a:53:bf:10:
37:e1:3a:a1:94:16:94:ce:6d:e8:5d:63:94:f2:93:e3:97:5e:
a9:aa:f3:2e:0f:68:69:bc:1a:c1:a0:d8:a9:08:ce:d7:25:c1:
95:23:eb:a3:19:49:ec:c9:e2:df:ad:a1:f0:d0:21:a6:2b:17:
af:e2:ed:e3:1c:06:1d:d1:00:4a:c3:04:02:e7:a0:e7:a1:60:
23:04:c6:af:6e:79:ef:ff:d3:af:1c:93:a7:68:9f:16:6c:b5:
ac:bf:81:ee:de:44:0f:ba:b8:f3:1a:61:f3:c7:4e:63:9c:c7:
0a:d6:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:09:28 2025 by rpki-client