Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
File: a2HpAAl3utWMh3BeOxZbCEg_Czo.mft (raw, json)
Hash identifier: RBKacBe79WOh1E/7v0pglrOSer7GnEXTmNmJGUFUdd8=
Subject key identifier: 17:94:53:9F:DB:59:3A:E5:10:3A:DC:1A:0B:A0:84:FD:F8:85:A3:41
Authority key identifier: 6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
Certificate issuer: /CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Certificate serial: 019675677BF52CD1785E738332929A54159D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 04:00:38 +0000
Manifest this update: Sun 27 Apr 2025 04:00:38 +0000
Manifest next update: Mon 28 Apr 2025 04:00:38 +0000
Files and hashes: 1: a2HpAAl3utWMh3BeOxZbCEg_Czo.crl (hash: +k1DsGwLztjZPk3EMERLOJJtS9EaB31gichf/YDg1To=)
2: movPWb1NWT7RBf22mFzV6ki-niw.roa (hash: pmnGsVyTJDaHQspLVBouBG8RasgSm/+abtktLNR23OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:7b:f5:2c:d1:78:5e:73:83:32:92:9a:54:15:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b61e9000977bad58c87705e3b165b08483f0b3a
Validity
Not Before: Apr 27 04:00:38 2025 GMT
Not After : Apr 28 04:00:38 2025 GMT
Subject: CN=1794539fdb593ae5103adc1a0ba084fdf885a341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:86:6d:ab:c3:72:dd:40:c6:3e:8b:2e:ce:
35:a2:48:eb:fe:6d:c9:5b:98:f1:c3:5e:1e:54:ff:
f6:3a:3e:80:1d:27:21:7b:ce:b1:03:b6:6c:07:6f:
f4:4c:e0:81:b9:63:4c:51:ad:aa:e3:c7:1a:ea:78:
d2:9c:09:b9:f7:de:0e:6f:51:eb:9f:a8:f2:3f:82:
ea:e5:ca:9a:f6:de:15:a6:45:a8:a4:0f:c4:e7:56:
61:41:90:13:38:34:0f:c4:c2:bc:4e:cb:4e:b4:55:
f2:28:f1:f2:32:4d:fe:9e:e4:a6:f6:6e:01:7e:60:
fc:d7:c9:91:3a:75:a4:05:f9:e3:f1:40:67:3e:38:
c7:1f:ee:f5:2e:02:2f:87:14:af:3c:f0:8f:a8:2e:
87:cd:7c:38:30:1e:81:09:07:80:40:58:76:94:88:
dc:5a:24:fe:10:b2:f6:c5:40:d8:dc:71:69:09:4b:
5a:7c:67:28:65:a7:31:2a:12:0c:37:80:15:53:15:
e1:61:68:7f:d0:7a:5e:d6:13:f0:04:0d:1d:c5:11:
40:12:9b:3a:c3:0d:ce:66:94:5f:51:63:5a:df:30:
fd:62:2c:2f:8b:65:0f:0a:27:1f:31:25:b1:f0:f5:
53:29:2a:5b:59:60:70:8a:f6:79:f9:4f:53:3e:1e:
55:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:53:9F:DB:59:3A:E5:10:3A:DC:1A:0B:A0:84:FD:F8:85:A3:41
X509v3 Authority Key Identifier:
keyid:6B:61:E9:00:09:77:BA:D5:8C:87:70:5E:3B:16:5B:08:48:3F:0B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2HpAAl3utWMh3BeOxZbCEg_Czo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1e2d99-7c83-4eb2-a163-2228f9ad750f/1/a2HpAAl3utWMh3BeOxZbCEg_Czo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:45:9b:26:a9:20:b0:d4:89:5d:2f:4a:42:b3:5c:39:70:c7:
a6:3b:81:9c:20:bd:1e:57:ff:9d:d2:03:cd:73:97:3f:ae:0e:
7a:ce:1c:28:ca:6b:48:52:16:b4:16:20:e2:1a:28:4c:2d:e8:
8d:d8:08:96:3d:ab:73:bc:b8:88:75:d7:42:6e:2e:a2:3c:2d:
8e:79:66:2a:5c:95:64:48:ba:ef:0c:f1:12:83:2b:78:a1:33:
45:50:54:61:a4:c6:5f:36:56:71:a3:7c:bb:78:5a:8c:41:9e:
78:99:0b:79:c6:1b:e3:fc:4e:9b:e8:2b:21:c0:71:9c:0d:99:
2b:c9:81:1b:16:f3:a3:52:c4:92:9f:2d:62:0e:c8:a8:b9:45:
3f:39:b7:15:ce:6a:b0:61:17:2a:47:1b:4c:b5:d8:f3:2e:30:
c5:30:01:7b:d8:3a:8c:c8:62:eb:45:43:4f:2e:97:c2:a8:8b:
93:58:58:e8:67:1d:a1:5e:cc:91:62:05:57:f4:ab:aa:54:22:
d6:b9:e8:14:09:48:1a:a6:39:80:37:77:47:58:2e:be:d3:7c:
a0:9f:66:c8:15:19:a0:19:ce:f2:84:4e:c8:5f:5e:ef:6b:f5:
ef:7c:e2:b1:85:ba:0a:5f:15:62:0f:41:6e:8e:05:79:1e:e7:
cb:db:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:25:18 2025 by rpki-client