Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File: 6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier: t9a/QH4BGmW9Y6LRhlp4LB+7ZwCRE5zMLhmpt8x43w4=
Subject key identifier: BF:F4:17:1E:C9:DA:AF:65:EE:46:76:83:B0:D0:A3:AD:8D:05:72:5E
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer: /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial: 01967D21337DEDA1D720590FCE21C6C97B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number: 03EA
Signing time: Mon 28 Apr 2025 16:00:49 +0000
Manifest this update: Mon 28 Apr 2025 16:00:49 +0000
Manifest next update: Tue 29 Apr 2025 16:00:49 +0000
Files and hashes: 1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: MuuI6E46BzvXsuwpfudFfMEKA07nqYpQu66MjJFaYLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:33:7d:ed:a1:d7:20:59:0f:ce:21:c6:c9:7b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Validity
Not Before: Apr 28 16:00:49 2025 GMT
Not After : Apr 29 16:00:49 2025 GMT
Subject: CN=bff4171ec9daaf65ee467683b0d0a3ad8d05725e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:16:43:14:33:33:c5:30:62:69:9d:c1:e5:93:
45:92:9a:5f:e2:1c:22:12:b4:22:3a:ad:e5:b7:4d:
57:cb:59:29:74:75:a1:5e:ef:f6:b4:1c:90:44:ef:
21:a1:1a:09:b5:2c:13:e1:97:4d:d3:c7:45:38:da:
35:43:bc:a3:01:73:32:a3:5f:c6:fb:bc:51:2e:a2:
53:f1:94:a1:68:5d:b5:e9:53:e7:59:8f:bb:6a:bf:
c6:35:49:9e:f7:23:39:b5:bf:c8:36:77:fe:3c:c5:
28:d1:8d:b5:09:cb:51:48:12:bd:ec:a8:fe:98:6f:
93:ab:81:e1:4f:24:d1:f5:5c:d1:d1:70:16:f6:e8:
7e:1c:77:98:4b:52:f7:9a:da:83:3c:84:c6:33:cc:
8b:2d:a6:a0:e8:69:60:3a:ff:14:4f:a0:87:51:f3:
b1:5b:72:6a:68:c3:b7:86:bb:2d:26:c2:5b:39:6d:
43:98:7b:d0:5d:49:6c:f6:94:69:f4:71:40:3e:b7:
bb:6a:1d:b3:5a:49:24:44:d6:59:98:0d:4b:87:0f:
c0:dc:4b:05:1c:b3:a7:8e:ac:39:41:a9:03:65:ee:
fb:71:f1:59:48:02:54:2f:5b:76:d2:3e:a9:34:dd:
9f:07:d6:30:d3:1c:8d:d2:5b:2f:85:15:8d:22:a4:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F4:17:1E:C9:DA:AF:65:EE:46:76:83:B0:D0:A3:AD:8D:05:72:5E
X509v3 Authority Key Identifier:
keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:5f:57:a5:ad:9c:a2:db:83:a8:fe:a4:b6:9a:6d:8a:be:db:
ee:3d:7d:c0:28:2f:97:ec:2d:74:5c:11:c2:dc:8a:1a:e8:1a:
ea:70:37:05:ce:ff:db:a6:c6:65:04:b7:26:f7:c1:04:e2:26:
59:14:5d:e5:75:3b:c0:90:ff:5a:fe:d1:47:3b:13:22:ae:78:
2a:1a:71:9e:84:77:d8:23:62:37:d9:05:64:86:84:8e:16:fe:
01:76:59:82:fd:3a:4a:39:33:0f:1e:5d:37:d1:69:e0:65:b9:
58:47:f5:0c:3b:a9:27:b6:6c:93:67:97:2c:ec:de:4b:24:d6:
50:0c:ef:36:1d:3d:a8:e8:e0:45:e2:7f:42:f1:13:2f:e3:21:
21:79:63:c1:bc:ed:f5:c4:56:18:cb:a5:9b:a7:37:5e:8c:33:
56:cf:a9:a6:7e:90:46:c9:63:ca:39:35:28:76:64:29:ee:77:
97:34:60:98:08:26:83:3e:d4:25:21:99:15:c9:4c:7a:db:d8:
93:d0:a6:44:24:b5:d7:d4:5e:ea:08:1a:f7:fa:df:df:c1:23:
94:da:5f:95:09:ce:d5:b9:34:58:70:9f:04:f7:50:21:11:7e:
37:aa:80:68:22:66:f8:a6:d3:06:6d:16:6a:80:2a:66:ac:08:
77:4b:d6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:02:03 2025 by rpki-client