Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
File: 6hcPx2y4X6R2BtbFdHydSjhZK2E.mft (raw, json)
Hash identifier: /U7bGwjJ6CU6gbzIqQ6OCP8w1ga8WUvj3Pcye9NlJYg=
Subject key identifier: 66:0C:87:9A:B0:32:45:A7:19:20:D4:93:DC:E6:FB:8E:AF:94:D0:C2
Authority key identifier: EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
Certificate issuer: /CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Certificate serial: 019681A2AC67930303D14B20D3F8FD6511A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
Manifest number: 059C
Signing time: Tue 29 Apr 2025 13:00:43 +0000
Manifest this update: Tue 29 Apr 2025 13:00:43 +0000
Manifest next update: Wed 30 Apr 2025 13:00:43 +0000
Files and hashes: 1: 6hcPx2y4X6R2BtbFdHydSjhZK2E.crl (hash: mT5feGudbwYoFs19pKwhQ63QQqYM34GgW7/SOQL2dOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:ac:67:93:03:03:d1:4b:20:d3:f8:fd:65:11:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea170fc76cb85fa47606d6c5747c9d4a38592b61
Validity
Not Before: Apr 29 13:00:43 2025 GMT
Not After : Apr 30 13:00:43 2025 GMT
Subject: CN=660c879ab03245a71920d493dce6fb8eaf94d0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:37:66:d3:d3:0a:d9:46:8a:bd:aa:6a:7c:97:
22:ff:86:70:c2:08:bc:38:3a:88:f5:4c:94:28:ac:
3d:d5:a2:d7:98:06:04:89:09:63:9e:e5:22:ce:8e:
9d:94:01:14:9f:56:96:84:9a:75:c2:7e:25:75:25:
f6:d8:23:e2:4b:c1:7f:a1:e9:ce:f0:10:24:59:d3:
77:87:a4:0f:ec:04:d4:c6:53:d8:78:27:26:e8:56:
e7:ba:26:a1:bf:4d:e1:b5:84:68:b5:11:18:aa:11:
29:60:0d:c9:f9:ad:f3:f8:08:9c:d2:71:e4:9a:05:
06:e3:10:35:87:da:cc:f3:0e:23:01:27:04:51:72:
29:b3:13:81:03:7a:80:3a:4c:46:85:9a:f0:50:d3:
87:06:0c:05:64:06:e7:26:70:f2:c8:8d:3f:0a:be:
3d:b8:5d:ac:6a:7e:43:cd:3b:4a:f5:01:8a:a9:d8:
a8:58:92:50:3c:8a:91:c0:62:5e:dd:51:bd:95:bb:
ae:9c:5b:b4:0b:5d:bb:b8:63:dd:5a:0d:04:12:8c:
be:f2:38:3d:36:ea:d7:7f:b2:a7:c3:3a:ce:8a:4e:
12:9e:5d:26:e5:d1:cb:5d:40:1b:bd:f0:bb:8b:a8:
bc:6d:4e:c6:f3:06:06:65:f7:d5:c8:50:7c:bb:df:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0C:87:9A:B0:32:45:A7:19:20:D4:93:DC:E6:FB:8E:AF:94:D0:C2
X509v3 Authority Key Identifier:
keyid:EA:17:0F:C7:6C:B8:5F:A4:76:06:D6:C5:74:7C:9D:4A:38:59:2B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hcPx2y4X6R2BtbFdHydSjhZK2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/84a500-bf00-4e0e-8f35-e82881b5e2d9/1/6hcPx2y4X6R2BtbFdHydSjhZK2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2a:4b:6b:dd:0d:11:bf:48:34:20:01:f9:94:3f:e5:06:51:
86:b5:ca:b5:55:b8:30:25:c5:2d:30:22:61:03:97:d8:c8:96:
e1:72:71:18:bd:95:f1:29:1f:3c:44:14:eb:25:15:27:3f:2d:
cd:72:a5:fc:b1:de:c7:09:ab:31:b5:c4:7b:12:86:25:8e:36:
3b:70:eb:f5:01:21:94:96:35:3b:3b:2c:2f:37:c3:d1:49:87:
4f:ff:df:97:4c:a3:67:3c:b9:3a:4d:64:bf:c5:2d:c0:9b:3d:
61:1a:a9:dd:fd:73:65:0f:6e:c6:38:99:db:d7:ea:0b:dc:17:
8f:74:9c:9c:a5:e6:e6:01:4d:0e:0b:1b:c3:c0:02:b1:f8:eb:
3f:12:32:b1:4a:52:77:32:38:52:1b:7b:60:02:80:a1:a1:89:
03:7a:19:c4:67:fb:1c:fa:09:2a:41:fa:38:76:a6:9b:2b:97:
12:93:a8:d8:f1:33:04:a0:fa:45:05:cb:2a:72:63:68:e7:10:
50:f0:9c:32:63:72:3a:93:ca:34:a8:50:62:8d:33:d7:e4:d5:
a5:db:6f:0c:64:a4:63:1e:e8:46:70:6e:fe:f5:c2:1a:13:da:
d8:a3:96:46:91:95:11:09:fd:6d:5c:7f:03:81:e3:0f:93:24:
aa:46:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:15:04 2025 by rpki-client