Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File: 6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier: hI/13GSJHBuYQLSYZboHuIP+WLwc1+Pxf9IpyL97+04=
Subject key identifier: 3E:60:94:3E:A2:AA:05:2F:4C:B9:13:01:BC:34:5A:08:C9:72:C2:76
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer: /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial: 01967F0F481717D1CF472BA095C23FE4F9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number: 121D
Signing time: Tue 29 Apr 2025 01:00:30 +0000
Manifest this update: Tue 29 Apr 2025 01:00:30 +0000
Manifest next update: Wed 30 Apr 2025 01:00:30 +0000
Files and hashes: 1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: clNKDDAKOto1ymSbeZL3YHVTOyQ/Ro5pTEbCc2q7Lw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:48:17:17:d1:cf:47:2b:a0:95:c2:3f:e4:f9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Validity
Not Before: Apr 29 01:00:30 2025 GMT
Not After : Apr 30 01:00:30 2025 GMT
Subject: CN=3e60943ea2aa052f4cb91301bc345a08c972c276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:51:b5:f4:f7:86:c0:53:36:2f:fd:7d:50:
37:c4:77:af:26:c0:94:40:97:04:8a:70:83:6b:b7:
35:02:36:5e:20:36:59:3e:a1:62:87:5b:b1:e7:e3:
56:5d:28:da:f6:db:83:18:20:44:ac:23:13:eb:2b:
0b:67:f6:83:24:49:c5:3e:be:17:35:44:3f:66:11:
62:6b:44:20:b2:96:67:fd:bf:bc:22:3f:e5:10:f3:
99:37:bf:33:86:84:12:4f:50:1f:66:c3:3f:a1:cd:
d5:8f:b0:52:89:18:bc:1d:b1:c3:cd:8d:b3:33:39:
93:e2:7c:eb:ef:a7:54:75:4b:75:31:d9:fb:83:04:
c7:99:9d:5c:fc:da:7d:d1:cd:5a:2c:53:15:c7:38:
55:23:35:01:ec:c9:3b:08:78:a6:c5:50:17:60:b1:
1c:e7:44:e6:6e:ca:ee:31:71:0b:6a:df:7d:ba:26:
2d:15:45:42:be:c8:1a:ce:ce:8d:e8:75:05:e8:fc:
aa:cb:d6:80:29:b6:de:f9:10:71:32:79:ab:c5:b3:
51:e2:c2:d4:9f:83:be:a5:27:45:36:f8:83:ed:c6:
62:f6:c2:12:03:57:03:83:42:cd:4e:23:4e:0a:6d:
f2:a2:0e:af:a9:5f:4c:10:93:a9:a7:25:85:2c:dc:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:60:94:3E:A2:AA:05:2F:4C:B9:13:01:BC:34:5A:08:C9:72:C2:76
X509v3 Authority Key Identifier:
keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:11:7e:fa:75:37:87:34:f4:73:ed:20:db:64:cb:61:fd:45:
a6:b4:72:85:e5:9b:18:fd:a0:48:83:87:ad:e6:f5:f1:0f:16:
46:48:e5:b9:41:82:dc:06:d0:48:67:50:67:f5:e2:8f:b3:0d:
4b:4b:4c:eb:70:ce:25:43:9b:6e:12:11:51:22:2d:1b:de:9d:
b6:cd:7d:02:2b:2d:08:d4:2b:87:eb:a1:38:1a:88:c4:6f:7c:
64:b7:3d:99:83:f3:b6:55:ff:10:33:40:2b:11:32:f6:da:9f:
dd:bd:49:26:c2:c4:2a:51:02:34:1c:49:70:dd:22:47:59:81:
84:d2:0c:8a:d4:25:1e:98:3c:db:fe:6c:26:78:2b:47:2d:ab:
a0:84:b9:27:aa:8d:1e:28:b7:cf:23:2e:1c:c3:41:36:fc:00:
98:67:c6:14:37:7b:75:3a:7c:c2:07:55:f0:3d:9c:6a:0b:24:
11:b2:ca:7e:b0:fe:f3:26:0b:e6:04:71:97:79:30:bb:73:d8:
fe:9f:98:a0:bf:ea:b1:cd:36:bc:9e:2f:4a:8b:e6:8f:c1:b1:
61:d8:da:89:8b:6c:a0:63:a5:7d:0a:24:90:cd:e0:b7:d0:e3:
1d:64:35:de:c4:b7:f4:d6:34:17:e4:6f:d4:c5:d3:5e:74:20:
65:37:76:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:45:11 2025 by rpki-client