Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
File: 6T5Zf3uhSto19PbFD4plg6BPzDU.mft (raw, json)
Hash identifier: T8LvXAEqaCMe5AOxEULcva5VfHKe1+9YIhfIPJ8znFs=
Subject key identifier: 23:EA:7E:B2:D7:6A:20:37:0F:44:09:8E:60:2A:62:D6:A9:CA:A1:DB
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Certificate issuer: /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial: 01967ED8A8EA2C3D6EFA866228D47A8C2E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
Manifest number: 02A0
Signing time: Tue 29 Apr 2025 00:00:50 +0000
Manifest this update: Tue 29 Apr 2025 00:00:50 +0000
Manifest next update: Wed 30 Apr 2025 00:00:50 +0000
Files and hashes: 1: 6T5Zf3uhSto19PbFD4plg6BPzDU.crl (hash: uHhpgcGoNkbD1fOegJm0yZxa7MewGyNPTjxmEUnNpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:a8:ea:2c:3d:6e:fa:86:62:28:d4:7a:8c:2e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Validity
Not Before: Apr 29 00:00:50 2025 GMT
Not After : Apr 30 00:00:50 2025 GMT
Subject: CN=23ea7eb2d76a20370f44098e602a62d6a9caa1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:33:4b:61:87:e4:dd:74:e6:f4:f4:19:8b:7b:
91:30:91:88:d5:81:40:dd:70:8d:25:88:c7:b8:e7:
32:23:43:2c:43:39:5e:af:e1:41:19:79:85:14:a7:
78:1a:35:53:e1:69:be:49:ed:02:25:46:5e:ef:2e:
c7:af:ed:f5:06:98:72:02:8f:89:da:70:eb:04:32:
b6:22:d8:d6:5e:6b:55:e8:10:fa:61:2d:c7:22:62:
a9:cd:e3:69:ec:f7:d1:93:c4:13:48:3e:21:89:78:
82:82:b9:ec:54:a7:70:84:3f:23:fe:de:9f:bf:40:
eb:a7:8b:34:35:dc:38:19:36:73:bd:d9:d2:ed:36:
04:fa:e5:22:8a:fa:ef:a7:eb:fe:01:bc:01:6e:f5:
93:9c:29:13:52:f8:73:75:80:c6:91:2f:63:a4:1e:
38:c1:0b:b4:ce:73:54:6d:75:77:8b:a3:c3:03:70:
10:4a:17:ac:c0:8a:14:37:78:00:a8:0a:0d:92:84:
9f:3c:7b:66:4b:af:d3:08:21:0e:53:cd:0b:f4:94:
5b:40:91:07:00:d9:ee:6b:9f:f1:7c:9b:91:07:04:
d9:db:e0:6b:ed:d6:76:b8:77:04:54:a0:73:60:89:
97:db:47:0a:3a:d6:0b:f3:ed:89:0f:05:64:3e:89:
cf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:7E:B2:D7:6A:20:37:0F:44:09:8E:60:2A:62:D6:A9:CA:A1:DB
X509v3 Authority Key Identifier:
keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ef:4c:25:57:b8:21:5a:c9:19:5f:bc:45:af:f2:d9:0a:57:
ce:1c:8d:32:ef:92:5f:59:33:5c:d5:ab:e8:20:64:b2:c2:7f:
b3:fe:c7:67:24:0b:31:c0:f4:dd:10:10:81:b6:1c:91:14:d6:
3c:7b:b5:2f:29:74:d9:40:cf:9b:cf:5c:72:43:2f:25:23:30:
3a:a0:26:ff:43:55:30:e5:55:f1:97:2e:7f:07:0c:fe:18:04:
7a:09:79:ba:5f:6a:60:d6:ce:dd:49:de:b6:22:05:5f:fe:75:
5c:30:78:64:b9:f8:7c:10:1d:54:42:7e:71:8b:7a:03:f6:41:
42:82:a7:d5:71:f7:4e:1b:8d:18:01:3d:f1:62:e1:a3:ca:9c:
0c:1f:13:cc:be:05:d5:65:89:f0:11:76:c4:07:28:79:02:4a:
b8:e4:a9:7f:bf:0c:75:ac:7a:69:ec:74:2b:eb:2c:92:f2:7f:
49:19:55:ac:6b:ea:bc:ab:5b:1d:7d:83:0b:ef:96:44:15:2c:
3a:32:63:e9:f7:16:5c:b7:d9:bd:4d:25:e8:9b:60:ba:50:b7:
7c:af:db:bf:17:ce:9d:cf:04:fd:0f:fc:15:78:40:76:7f:62:
32:34:57:b8:0f:ed:23:7c:78:dd:d4:6b:25:22:5f:43:98:95:
21:57:fe:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:50:18 2025 by rpki-client