Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: NZ3L9CqknY8d6iH9K/XP/ekDSyxLldKr4TREyPvhR20=
Subject key identifier: 17:32:82:B0:8C:86:AC:7B:27:E3:D0:62:87:97:34:9C:7B:A1:0B:C0
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 01969A86C2DCA8F94929D7441C6DCFB034F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 0939
Signing time: Sun 04 May 2025 09:00:45 +0000
Manifest this update: Sun 04 May 2025 09:00:45 +0000
Manifest next update: Mon 05 May 2025 09:00:45 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: AfKqgE/So87rAorKhvnJkIx4SA34I+OL0TPbhj5IWeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:86:c2:dc:a8:f9:49:29:d7:44:1c:6d:cf:b0:34:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: May 4 09:00:45 2025 GMT
Not After : May 5 09:00:45 2025 GMT
Subject: CN=173282b08c86ac7b27e3d0628797349c7ba10bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:5c:bf:c0:74:04:2f:0c:19:9b:63:03:be:
3d:86:c2:1d:89:94:fa:bd:50:41:4e:34:92:ea:da:
01:2c:8e:3c:16:45:1d:a5:45:dd:43:9d:a9:b6:07:
24:bc:17:21:e3:96:2b:cd:70:0c:4a:e2:fd:46:db:
cd:9c:c6:16:b8:dd:bc:43:cf:4d:f2:16:cb:d7:8c:
7e:24:c4:8c:11:49:6c:8c:61:9f:da:e9:27:79:e7:
65:56:9e:c7:ca:c9:f6:50:6b:17:ec:9b:6a:92:1a:
27:0a:24:a1:ca:62:28:99:4d:42:71:3a:90:3a:ba:
bf:8a:fb:ac:1c:82:6d:88:8d:2e:08:f4:b2:34:27:
46:23:e4:ad:0a:c2:d7:00:db:a5:b9:fd:3c:59:f2:
47:f4:36:05:9f:07:84:36:82:73:2f:6c:8b:b7:80:
ec:fc:f1:30:37:ef:d1:ae:7b:cc:16:4d:2b:b3:6e:
9b:74:fe:1a:8b:c4:20:5e:a8:13:23:26:de:1b:01:
99:90:9a:0c:88:93:24:a5:cb:3d:e9:e6:00:34:e0:
a1:fd:4a:ea:bf:28:1f:92:22:6a:d4:c3:05:a4:c6:
a2:7a:c9:2d:e8:fe:0d:fb:18:06:66:37:b0:e6:c7:
e1:8a:ca:dc:68:8f:2b:38:fa:b5:01:3a:69:d1:ba:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:82:B0:8C:86:AC:7B:27:E3:D0:62:87:97:34:9C:7B:A1:0B:C0
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a5:2f:4e:12:c9:f1:c9:92:01:98:0b:fb:9a:3e:74:7d:bb:
f1:51:c2:be:a0:80:83:9b:15:62:28:92:6e:70:3f:a2:7b:a1:
1b:b8:77:ad:58:b5:2f:95:5f:7f:9c:c4:29:e4:c4:96:ba:34:
34:a8:b1:4e:0d:b8:77:69:21:05:3b:66:5f:a6:b1:7a:76:6f:
5e:e2:d5:51:2d:30:c3:dd:5d:b1:c7:59:b5:de:0b:14:7d:bc:
db:88:77:54:32:56:30:fe:d0:bf:27:25:75:f5:93:9c:2b:a8:
70:44:53:16:09:b9:e8:06:91:b3:b7:22:5f:31:c6:f6:f9:c5:
08:5f:9e:72:6f:b3:ad:61:a3:bd:a4:f5:8f:93:3d:c2:a4:53:
2a:0a:12:d4:53:d0:00:69:e4:4b:5b:98:ac:39:25:b9:d5:9e:
5d:00:2d:53:e9:5d:54:f7:dc:cd:03:f7:fc:34:82:96:ab:a3:
77:4d:19:fc:85:fa:d2:64:07:43:36:56:30:99:9d:ba:33:73:
f6:c2:09:b6:d2:40:c7:d7:9e:9d:bd:64:38:12:49:04:69:08:
69:bf:7f:89:b6:3d:55:af:56:f8:bc:10:0f:30:75:ea:75:b1:
10:77:2a:39:2d:a6:9f:89:ec:cc:f4:d0:42:1a:42:12:c5:c7:
92:37:70:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:41:03 2025 by rpki-client