Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier: 9lWs3/tLH6UUyafPP+xp8fi72zwnsSnCXV6TUlLWBw0=
Subject key identifier: F1:9C:DB:7F:39:78:A5:E7:3C:26:68:CE:CB:D0:EA:82:16:9D:3E:64
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 01967EA1591F8E255D2BBCC501BF0BC5EEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number: 1525
Signing time: Mon 28 Apr 2025 23:00:25 +0000
Manifest this update: Mon 28 Apr 2025 23:00:25 +0000
Manifest next update: Tue 29 Apr 2025 23:00:25 +0000
Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: djegj7Kb5obwMnNFc26rMYHptwfDlsKkfEUgfb7//hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:59:1f:8e:25:5d:2b:bc:c5:01:bf:0b:c5:ee:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Apr 28 23:00:25 2025 GMT
Not After : Apr 29 23:00:25 2025 GMT
Subject: CN=f19cdb7f3978a5e73c2668cecbd0ea82169d3e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:fe:3c:3e:b5:3f:ba:33:fd:7e:96:65:db:
61:45:56:07:42:f1:23:80:83:72:c4:9b:00:1f:d8:
b7:99:5e:7a:7f:fb:a3:4d:88:2f:5a:7e:33:80:0c:
fc:04:7c:98:a8:34:d3:56:25:0d:65:1a:82:60:00:
c1:c6:80:b0:95:56:ad:46:87:ad:49:b5:45:43:73:
82:48:a0:4a:c3:7d:7d:cf:ec:17:e7:8e:49:b3:0d:
e2:d3:c7:8a:e1:48:ce:a0:c2:95:48:02:ee:9d:d0:
a7:cc:01:65:18:0e:d3:dd:34:02:6a:c3:47:d1:ea:
3e:db:cd:73:5f:91:19:1e:2f:20:81:0c:22:90:bf:
1f:89:81:eb:e9:8b:dd:8a:64:e7:17:af:84:ba:de:
d1:a0:41:b2:f9:37:c2:ff:bc:bd:e3:e6:e2:a8:67:
11:7c:e2:27:34:f8:6c:9a:55:5f:5c:19:77:a4:ef:
3f:3a:52:c1:ab:70:b4:f7:1b:32:6b:d0:d6:54:f3:
d0:bb:f2:58:39:2a:67:48:60:dd:cc:a4:71:bc:95:
1b:e4:12:53:ca:b1:ae:e9:a5:af:3a:84:1d:ca:aa:
6e:8a:f2:f6:73:d0:68:14:b0:0d:03:b5:f6:da:64:
27:0c:52:52:70:54:f8:af:77:aa:81:71:e5:b2:c5:
24:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:DB:7F:39:78:A5:E7:3C:26:68:CE:CB:D0:EA:82:16:9D:3E:64
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ee:1d:e0:5e:6d:28:56:66:e7:f2:27:68:cd:9e:d6:04:03:
1f:be:b6:45:3e:84:d3:8d:d7:f3:44:2b:99:fc:ea:bb:35:e7:
05:6d:09:77:25:fe:04:b8:77:ab:92:3b:56:90:41:90:15:94:
c0:52:3a:66:c0:92:3d:7f:ba:36:bb:75:c3:28:36:34:65:c9:
8b:98:a1:b2:9a:14:9b:d3:82:14:b4:26:1e:62:82:35:33:dc:
a8:ae:b5:73:6d:47:74:31:3f:c6:e0:3c:08:64:41:19:aa:ab:
bd:fb:a4:37:96:74:89:cd:1f:28:ee:27:18:74:ba:21:1c:0b:
e1:10:51:37:13:f6:99:19:b0:c5:6d:73:1f:71:c8:7d:ed:93:
05:36:7b:ee:fc:3c:76:65:c0:8e:0d:37:65:17:af:c4:22:cd:
fc:e9:31:34:29:d8:fc:c8:ec:80:8a:4d:e5:92:e4:b1:04:4b:
c4:96:bf:72:47:44:b8:da:10:e4:b6:09:59:7e:0d:25:7d:e6:
46:22:f6:43:9c:dc:d4:57:88:90:ae:4b:4a:83:9b:6e:d1:1c:
ae:cc:2c:d6:16:e0:51:d2:c5:de:f2:4e:1b:1b:68:8d:c4:5f:
45:bd:8f:d9:6d:2c:98:77:35:de:01:a4:4b:2f:28:0c:0b:5b:
8e:26:9d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:10:29 2025 by rpki-client