Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
File: S6TRDarjyS2n0u6XO3SMsflJIuk.mft (raw, json)
Hash identifier: Sl602M6C1bDTGwxLyGn+cwOkE/r4ngn0LjCkHer4Td4=
Subject key identifier: 36:B6:FA:6D:99:72:D6:86:6B:F6:1A:82:C9:7F:6A:6E:C5:85:FA:6C
Authority key identifier: 4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
Certificate issuer: /CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Certificate serial: 01968B4AFA6C508D6E06BB2E02860D5A829C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
Manifest number: 08BE
Signing time: Thu 01 May 2025 10:01:08 +0000
Manifest this update: Thu 01 May 2025 10:01:08 +0000
Manifest next update: Fri 02 May 2025 10:01:08 +0000
Files and hashes: 1: S6TRDarjyS2n0u6XO3SMsflJIuk.crl (hash: 4kx9ss7TU645fTH/vydZ55uRY6dNvHKVoJ4vqW4m4j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:fa:6c:50:8d:6e:06:bb:2e:02:86:0d:5a:82:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Validity
Not Before: May 1 10:01:08 2025 GMT
Not After : May 2 10:01:08 2025 GMT
Subject: CN=36b6fa6d9972d6866bf61a82c97f6a6ec585fa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:9a:49:69:a4:fb:61:d0:84:c7:38:dd:fd:
2c:ee:e4:e8:57:d2:ea:ac:b9:43:32:24:5f:25:4e:
4d:16:38:53:21:2f:2c:9e:cc:e7:77:c1:63:47:b9:
4e:48:fd:7f:da:d4:12:f6:75:ac:b7:f1:2c:b1:98:
ea:1c:cd:33:23:80:15:52:13:f8:97:7c:f1:b9:53:
26:fe:b5:39:e8:f3:90:6a:43:9b:06:cd:57:76:e5:
77:c1:40:13:fb:b6:de:cc:c4:63:f3:9c:4b:9d:22:
7f:49:51:21:9c:0d:46:64:34:73:ce:0a:44:42:42:
e0:62:f5:cb:7d:75:2c:c8:ac:55:f5:38:94:e2:20:
0c:66:2f:9c:b5:f0:a3:e2:8c:96:0c:ab:ad:04:93:
f1:5e:bc:6b:68:87:67:dd:0b:2a:c3:d1:dd:c9:97:
67:34:7b:f3:6c:98:13:b7:a5:72:52:52:34:5f:08:
84:08:a9:0b:37:d5:95:a3:3e:83:82:51:15:6c:c7:
89:52:4a:34:3a:15:e7:78:4a:c6:21:a6:2e:3d:d9:
01:f0:e2:9d:43:3a:d1:26:84:fc:a9:dd:e0:82:90:
25:12:10:13:1e:b0:49:cd:1b:04:90:e4:4a:c9:26:
0d:c1:52:51:b3:86:d3:27:89:d2:c6:15:02:78:b4:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B6:FA:6D:99:72:D6:86:6B:F6:1A:82:C9:7F:6A:6E:C5:85:FA:6C
X509v3 Authority Key Identifier:
keyid:4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ba:0e:c4:33:39:5e:46:43:6f:0d:46:d9:2b:ae:f7:6a:0c:
b9:fd:bb:a5:48:3f:4a:de:bc:26:9f:db:39:5c:13:5e:67:fe:
dd:ac:cd:d2:26:5b:db:b3:47:da:63:81:e3:11:8b:d5:97:07:
93:d7:e5:8c:6b:09:01:ee:ff:63:3e:93:4e:ee:b1:46:01:b3:
04:08:d4:e8:4f:3f:49:64:fc:1a:11:51:55:09:b5:36:87:57:
73:65:cf:35:8e:20:7e:a6:47:44:19:b0:f6:a6:d3:79:2e:12:
96:26:27:57:ce:63:df:45:64:89:bd:02:36:d3:e0:fd:75:c3:
b1:9d:93:bd:50:0e:41:ad:cb:5e:af:14:b3:24:25:c1:1a:f1:
f3:f2:49:98:a1:de:20:fa:2b:03:45:98:48:57:00:0c:fe:97:
05:5a:28:0c:f1:f8:bf:52:54:de:d7:74:b3:06:5c:c7:20:7c:
00:73:ee:11:0a:8f:52:c1:c8:6a:45:dd:15:6c:e9:f6:d8:30:
dc:b0:d7:9b:d6:41:fd:be:73:d7:b5:cf:7f:f7:c0:f0:ce:29:
c0:fe:96:e2:79:22:8d:70:e6:96:85:33:0e:f9:7a:34:27:59:
56:f1:41:2e:02:ed:de:eb:fc:26:b3:fb:12:a7:57:bc:7e:99:
ab:96:a2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:08:51 2025 by rpki-client