Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: s1rg6kUKjXH5SuGQJrK4wbST3vJSP6wzKFA7qWwAyb8=
Subject key identifier: 6F:BF:07:52:13:8B:7E:A1:24:82:B7:61:37:1A:56:98:EC:09:E4:0D
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 019677FBB85E508686E8B45ECAF8DE47D515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 0977
Signing time: Sun 27 Apr 2025 16:01:47 +0000
Manifest this update: Sun 27 Apr 2025 16:01:47 +0000
Manifest next update: Mon 28 Apr 2025 16:01:47 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: lRPTB5TdMGOzx5HRW3nJjzHD/yQNeUatdta00NHiDqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:b8:5e:50:86:86:e8:b4:5e:ca:f8:de:47:d5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: Apr 27 16:01:47 2025 GMT
Not After : Apr 28 16:01:47 2025 GMT
Subject: CN=6fbf0752138b7ea12482b761371a5698ec09e40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b4:cc:f0:95:92:6d:fd:80:fc:7d:77:10:70:
24:a8:73:64:f1:9d:d3:0c:07:d5:2d:15:6d:3f:12:
b7:f2:03:7d:ae:39:56:cd:15:c8:26:eb:2c:9e:aa:
a9:3b:c1:54:7a:35:29:af:e5:db:fb:50:f3:a3:77:
b1:17:e0:9e:c6:ac:57:c0:a2:cd:17:db:19:87:fb:
a2:58:3f:03:3f:98:6f:27:39:75:78:31:65:0a:c7:
30:c9:09:12:e3:c8:9f:ae:7f:a4:60:a2:62:ab:30:
76:21:c7:51:a9:f3:12:bf:53:4e:6f:30:92:79:a2:
5d:24:1d:93:6b:7e:6d:c7:72:6a:a9:4a:08:ab:da:
5c:9f:84:70:c8:e0:c2:b5:85:fa:96:9c:35:5a:d6:
39:41:d7:62:19:0d:06:f7:8a:03:e4:56:05:ec:4d:
61:fa:e8:09:45:85:b9:b3:41:22:1c:24:d3:23:91:
e7:57:df:43:f3:0b:5f:c5:fa:0e:15:7e:c7:13:cb:
3d:b4:ba:81:59:33:27:a6:01:92:66:17:39:35:17:
6d:d7:e7:87:56:cf:45:60:ab:12:46:a4:8a:90:13:
73:79:09:dc:9a:f0:9b:59:88:eb:b2:dd:77:cb:60:
e0:f3:8b:cd:46:ff:26:31:96:92:07:7e:56:dd:55:
87:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BF:07:52:13:8B:7E:A1:24:82:B7:61:37:1A:56:98:EC:09:E4:0D
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:ff:38:d5:e7:7c:68:a4:e6:b7:9d:02:03:b3:19:3d:26:
6b:6c:de:83:26:17:aa:55:a9:0d:74:f0:cc:7b:80:16:85:b4:
93:73:2a:cd:2d:1b:56:e3:48:76:97:d7:01:65:aa:5d:30:c2:
5e:16:d5:7e:d0:3c:2d:62:1d:09:52:15:e0:90:b3:9f:b4:b4:
d4:5d:23:39:4e:37:be:61:47:a7:1f:f3:84:f5:21:5f:e7:31:
86:8a:cc:7e:ee:96:e9:98:ca:35:8b:1a:16:ab:ca:7d:38:7d:
ae:5e:f9:f0:7f:51:5f:34:9f:74:6f:01:c2:8c:ed:b3:c7:b6:
1e:f7:0a:ef:84:e3:98:53:62:47:f0:72:a8:30:84:b0:78:42:
8b:31:e3:de:0c:7e:ea:aa:81:2d:65:73:c0:2a:52:a5:08:07:
7d:ef:06:36:c0:dd:89:ff:8c:51:1d:20:42:70:e5:3d:88:fe:
31:0e:04:d9:84:23:97:3f:db:b4:6a:5a:7a:7b:25:19:9b:4c:
69:6f:eb:d8:f1:80:78:21:61:01:ec:7d:d3:42:5e:d7:08:13:
01:76:43:25:c1:ea:af:4b:d2:3d:43:9b:0b:85:33:bf:d3:df:
27:4f:85:90:c3:80:ca:a9:c2:eb:55:e3:43:8a:b1:44:60:2e:
b6:ba:22:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:15:57 2025 by rpki-client