Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: niV16iJSUEBoMPfmn5b1rg3wWEyz3y6zfhGBUkzVHDk=
Subject key identifier: C4:35:2D:7C:07:AC:AF:69:8D:2A:00:D4:35:0C:B5:C7:54:92:3E:F5
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 01968E1479D5F708BEA14E256007AC59B557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 05DA
Signing time: Thu 01 May 2025 23:00:28 +0000
Manifest this update: Thu 01 May 2025 23:00:28 +0000
Manifest next update: Fri 02 May 2025 23:00:28 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: 4dLB3Z+q9Z3SQS5JLyyBNTpm1tqQA2tVYeAJL24TrCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:14:79:d5:f7:08:be:a1:4e:25:60:07:ac:59:b5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: May 1 23:00:28 2025 GMT
Not After : May 2 23:00:28 2025 GMT
Subject: CN=c4352d7c07acaf698d2a00d4350cb5c754923ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:be:0c:22:a7:e3:7b:93:c0:fa:31:84:04:
17:7b:64:a1:a6:db:4f:25:47:ff:1b:09:f1:19:c0:
34:2e:c9:48:73:a2:3a:be:8c:50:4c:cc:ea:c3:ce:
48:d6:03:02:a5:dc:28:99:39:25:24:24:d5:f2:c6:
1d:48:50:c5:fa:df:a8:cb:57:1a:b5:69:4f:4d:92:
f7:62:a8:20:49:72:d2:65:b6:3d:6c:9a:5d:2e:e8:
a3:c6:5a:66:c4:ed:3f:45:65:aa:53:b8:9f:09:21:
6a:5b:47:5a:72:81:3a:dc:78:ed:a5:6d:8e:cb:9c:
f2:bb:75:6d:6f:2a:7a:aa:f7:23:17:5f:f7:a9:6a:
97:72:31:5b:59:90:e6:02:0c:98:13:5d:9f:95:83:
f2:0e:f0:56:02:b0:32:77:42:3b:a0:60:00:56:55:
1b:3b:17:80:1c:e0:1f:32:f7:3b:b9:b7:c3:b4:32:
33:40:5b:46:7d:3d:5a:72:65:fb:71:9c:46:ff:2c:
0b:0f:ac:91:a0:70:68:b7:1e:91:a0:63:17:9f:eb:
ac:8d:8e:37:f1:76:60:23:8e:c4:37:f3:80:f7:7f:
ba:cf:f2:49:90:a1:d3:c6:67:96:3e:80:8a:69:10:
93:40:c1:48:a5:4a:24:4c:ef:e2:1c:7a:20:37:f6:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:35:2D:7C:07:AC:AF:69:8D:2A:00:D4:35:0C:B5:C7:54:92:3E:F5
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e6:53:3f:26:fb:f1:69:92:a5:9d:6e:ea:cc:6d:c8:50:a9:
76:ff:0b:8f:50:c8:15:c1:d3:d5:b8:db:9b:17:36:84:d2:41:
a6:87:33:b4:5d:0c:6e:b6:c6:40:24:22:92:84:5a:16:7b:e4:
be:5a:1e:47:67:7d:16:2d:2e:19:08:6d:c3:d0:38:37:3d:44:
af:ea:b9:08:c2:3b:c9:c0:6c:0b:7e:13:50:7f:3d:0d:64:86:
4c:63:24:12:ce:ce:f9:13:22:00:69:81:33:64:fd:aa:d0:73:
9d:8f:cf:9c:20:69:3e:f3:99:11:4f:72:02:fc:54:84:96:e5:
62:f5:d0:e8:82:b2:a6:e2:69:70:dc:d5:ed:7e:63:03:a8:e2:
d7:f3:59:9a:2b:66:cb:9f:4c:f6:77:51:33:4f:50:e7:5d:7d:
53:d3:d1:4d:81:99:21:2c:59:f2:32:76:28:d3:d9:a7:7a:c3:
85:b3:1c:14:2a:c7:a5:69:d9:b9:30:9f:89:a7:c6:52:84:17:
c7:e6:8a:14:01:2e:a4:dd:d9:b1:33:ba:b0:34:95:8d:f0:27:
c3:0a:15:18:b0:67:c4:68:1a:f8:ce:51:b7:b7:28:cd:41:ed:
9f:25:46:4d:04:15:02:ce:04:c5:3b:75:94:bd:34:fd:75:28:
c7:d1:8a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:53:40 2025 by rpki-client