Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json)
Hash identifier: N9POBwF4MK0uv147BGCNUF/aXTeKMdOwwlX90Z66KYE=
Subject key identifier: 2E:42:C9:DC:18:75:4A:B9:63:3E:02:5B:2E:CE:11:E2:18:B7:01:DD
Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Certificate serial: 019693A89500DAD24068C74A45B7FA09FF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
Manifest number: 0410
Signing time: Sat 03 May 2025 01:00:20 +0000
Manifest this update: Sat 03 May 2025 01:00:20 +0000
Manifest next update: Sun 04 May 2025 01:00:20 +0000
Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: QsEyH1JQg7Dqh1znOWqnd/fac9JNy+mB+pmgcYIOfVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:a8:95:00:da:d2:40:68:c7:4a:45:b7:fa:09:ff:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Validity
Not Before: May 3 01:00:20 2025 GMT
Not After : May 4 01:00:20 2025 GMT
Subject: CN=2e42c9dc18754ab9633e025b2ece11e218b701dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:ca:18:51:50:ce:6b:d4:a1:64:af:47:3c:
2b:6c:71:4c:0d:25:39:d5:ed:a7:ea:6a:63:a5:91:
f3:03:d2:23:d7:a0:db:5c:a8:bb:a1:6a:91:71:34:
d3:80:17:8c:ff:77:46:28:69:8e:b8:23:74:a8:cf:
63:34:b0:13:cd:89:05:ed:2b:e5:16:50:7a:a2:7a:
59:42:41:17:f0:00:b8:c6:fe:e7:60:da:87:d6:2f:
25:3a:e0:05:1e:d7:9c:29:ea:04:89:a4:96:7c:b6:
08:7b:b8:77:1c:51:b6:ed:af:0f:ba:c8:31:3d:11:
9e:b1:21:c9:55:a0:35:dd:56:b6:6f:cf:f5:39:48:
88:cb:2e:a5:2b:91:b8:90:18:d6:38:de:f5:30:e6:
fc:16:3e:70:21:72:ff:0d:46:f3:0c:09:99:fa:71:
27:23:dc:7d:19:26:ee:cb:4d:05:59:19:15:d7:5e:
01:a2:21:eb:b8:4c:f3:64:eb:25:32:8a:18:48:da:
bf:6e:34:27:d8:23:4a:e0:37:18:1e:04:03:a8:72:
1c:f0:11:7a:05:0c:ae:19:f0:a7:e5:92:e6:4a:2a:
c8:3d:d8:14:72:bc:1b:3d:2f:54:6f:84:6a:ef:68:
6b:a4:79:ac:30:6a:69:3b:c1:e4:15:f5:18:df:fe:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:42:C9:DC:18:75:4A:B9:63:3E:02:5B:2E:CE:11:E2:18:B7:01:DD
X509v3 Authority Key Identifier:
keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:aa:95:cf:26:9b:19:98:80:41:4c:68:84:8d:7c:9c:31:a2:
e7:55:9f:56:49:75:8e:76:7a:af:16:5f:79:ac:86:ca:a3:b4:
54:c6:a4:cc:7b:2e:8e:f9:72:e3:8a:0f:bf:62:c5:f7:cc:f9:
60:31:50:32:ab:f6:ba:75:ca:34:15:5c:40:5e:6a:0d:e2:15:
0d:79:d9:f1:9d:d5:6f:cf:de:6b:f6:71:a7:49:00:31:b6:48:
8c:82:99:d1:51:8a:dd:da:47:50:30:08:2a:06:8e:97:d7:8c:
35:0d:eb:5a:b9:ca:02:7a:dc:86:f4:e3:98:26:4c:3b:a8:b5:
86:8f:65:70:6d:ec:5f:10:39:02:21:bf:06:2e:e8:c2:cd:3a:
b5:80:de:f6:e7:d4:22:b7:25:5a:19:e0:73:50:1f:92:45:26:
67:23:c4:8b:ee:9b:5a:00:a6:dd:1e:fd:bf:4d:2b:89:f2:ec:
c5:6b:e2:5f:5e:41:bb:cf:e5:44:df:61:4c:09:4a:43:a8:df:
66:b8:6a:7b:e2:63:20:5e:b9:b0:42:12:a6:91:d0:18:93:76:
50:14:bc:0b:0e:08:7e:84:45:6e:a6:9c:6f:27:40:de:fa:17:
b2:a6:66:6f:69:78:71:34:61:e1:cb:82:52:88:f8:a1:51:2b:
d5:b0:de:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:35:16 2025 by rpki-client