Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
File: I6YR9Nqh1JrPstsip4DM57Cb3-k.mft (raw, json)
Hash identifier: y83xra61ebxWc7TkHQJggDIWhpeNsX3swySX7aJo0t4=
Subject key identifier: 0B:76:68:75:1C:CD:C7:C0:28:59:AC:53:F9:E0:5D:AB:54:12:87:20
Authority key identifier: 23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
Certificate issuer: /CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Certificate serial: 019677FB6C65CE7ACEF8C05BF80F53E503A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
Manifest number: 08F9
Signing time: Sun 27 Apr 2025 16:01:28 +0000
Manifest this update: Sun 27 Apr 2025 16:01:28 +0000
Manifest next update: Mon 28 Apr 2025 16:01:28 +0000
Files and hashes: 1: I6YR9Nqh1JrPstsip4DM57Cb3-k.crl (hash: tEFiB55uwnklcgxM7KfBAFceDcp1n5ksc9eS8+CbLMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:6c:65:ce:7a:ce:f8:c0:5b:f8:0f:53:e5:03:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Validity
Not Before: Apr 27 16:01:28 2025 GMT
Not After : Apr 28 16:01:28 2025 GMT
Subject: CN=0b7668751ccdc7c02859ac53f9e05dab54128720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:bc:7c:3c:df:70:43:09:50:4b:c5:cc:42:
4e:50:e8:aa:80:be:e0:b4:d6:19:43:36:da:ce:b4:
33:ba:cd:e1:45:83:88:66:15:6a:40:ef:76:84:35:
fd:5e:42:3b:50:2c:95:a6:19:12:fd:da:a8:af:b5:
51:e0:61:ee:93:b1:41:15:70:e4:08:c3:dd:d5:f5:
66:cf:bd:fa:88:5c:26:09:59:5f:5d:4e:f6:dd:53:
e3:20:eb:9f:22:81:db:97:87:fe:b2:fb:fc:87:1c:
f7:6d:9f:9c:fd:17:b6:a9:50:29:ec:34:36:99:df:
96:d1:06:db:76:00:fc:f7:df:7e:e3:92:4d:8f:d0:
e5:f1:3c:d7:e9:96:2b:e4:92:65:7a:e9:5f:51:09:
3f:7d:30:8b:ed:94:ab:89:86:c3:24:bb:10:2a:7a:
33:46:69:d6:bc:b8:2c:2a:5c:09:c1:93:36:00:90:
17:08:75:e8:22:d2:b9:95:7e:f1:54:09:13:54:3a:
01:82:0e:06:f1:4a:aa:d3:e1:0d:27:61:59:66:0a:
21:7b:0a:c0:ca:2a:22:a7:9f:2d:04:6c:88:3f:c1:
ae:60:1f:12:d7:0b:e0:69:27:fa:46:b0:7f:7d:34:
2c:98:de:d8:de:09:7a:92:c8:69:6a:fa:8a:d5:2c:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:76:68:75:1C:CD:C7:C0:28:59:AC:53:F9:E0:5D:AB:54:12:87:20
X509v3 Authority Key Identifier:
keyid:23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:23:51:31:f2:3e:b8:5e:bc:f1:f4:39:76:dd:98:de:fb:22:
5b:1a:16:61:22:16:53:4f:08:d1:43:ad:f3:3f:66:7b:6f:94:
8e:d0:30:8d:42:31:29:ed:9f:ab:a3:e6:06:a0:e7:4a:f0:23:
30:59:af:68:0d:39:97:f1:e6:b3:de:1b:52:12:91:f5:7e:ee:
2b:03:8d:28:35:eb:41:d8:4f:52:5c:3f:e3:68:6d:26:d9:de:
56:81:7a:0d:d2:97:7d:d0:4c:7d:17:cd:56:23:19:98:f7:f5:
26:14:f5:7f:ea:f4:65:25:29:0b:f4:d1:e9:c4:3e:a2:17:3d:
62:1b:b0:e0:95:dd:4b:f3:2a:8c:cd:5c:ce:1f:de:db:6b:2f:
46:91:ac:33:fc:eb:46:97:e2:41:a3:b7:43:dc:72:b7:42:d0:
60:77:8d:96:63:88:3a:de:af:dc:86:e7:92:19:b2:0c:54:1e:
ab:98:10:1b:29:84:68:d8:f2:aa:11:71:27:ee:5e:85:be:ff:
11:e1:17:c6:7c:9c:6b:4b:b6:bc:b1:a5:7c:10:56:fc:25:33:
a7:f7:39:ae:73:31:ad:29:fe:5d:d4:a2:22:70:4c:31:ce:84:
b8:9a:4b:f8:43:fa:b7:e3:f6:11:bc:0d:39:40:9e:b4:e6:a7:
75:8a:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:54:43 2025 by rpki-client