Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
File: _hEX6Xaz4zlTuTYbtLseui9Ane0.mft (raw, json)
Hash identifier: PG9IIUkYpVOysTucbWNMZI/UaNK9zciavXEARjeWH3k=
Subject key identifier: 7A:DE:C6:22:FA:35:D6:0C:9C:E8:96:32:12:9B:4A:C7:ED:CA:59:69
Authority key identifier: FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
Certificate issuer: /CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Certificate serial: 019656131F46C5B1EE8535E901107A8DE9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
Manifest number: 061B
Signing time: Mon 21 Apr 2025 02:00:15 +0000
Manifest this update: Mon 21 Apr 2025 02:00:15 +0000
Manifest next update: Tue 22 Apr 2025 02:00:15 +0000
Files and hashes: 1: _hEX6Xaz4zlTuTYbtLseui9Ane0.crl (hash: GqCfVsZsJLny+Fty0dvZmKBvcjxdSoT6VLB+6ieOjjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:1f:46:c5:b1:ee:85:35:e9:01:10:7a:8d:e9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Validity
Not Before: Apr 21 02:00:15 2025 GMT
Not After : Apr 22 02:00:15 2025 GMT
Subject: CN=7adec622fa35d60c9ce89632129b4ac7edca5969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:4c:1f:69:e4:18:4a:4f:99:a1:51:da:04:
fb:61:43:4e:34:07:cf:ae:a1:1f:f7:25:2b:e1:da:
b3:a5:c3:45:39:d7:f2:67:4f:49:2d:67:ce:42:c9:
e7:2d:36:c2:3d:0b:e7:10:21:99:e0:06:d3:be:0e:
1e:92:01:9d:fd:73:76:e8:ae:d3:92:f1:a6:1f:2c:
91:75:76:6d:5f:8f:a5:a7:b4:0e:37:32:b8:d9:12:
8d:6f:ea:7c:63:95:45:bf:bf:e2:21:c1:12:92:35:
73:2a:6a:ef:df:bb:ec:ce:33:34:79:d7:c1:53:30:
05:68:42:c8:bd:d6:0b:57:3b:be:4b:fe:e9:1c:f4:
83:61:91:af:a7:e6:ec:94:f7:b7:7b:c4:a4:79:23:
c0:ee:98:9f:e7:56:d8:5d:60:fe:6e:89:da:05:9d:
7c:41:e7:c5:21:ee:ed:54:75:23:65:7c:8a:48:4b:
48:87:a2:96:08:38:d2:f4:c9:8e:2a:b2:21:d6:d0:
02:b3:4d:f2:13:e3:25:56:d6:7b:92:26:e9:e6:ad:
4c:ed:e7:40:eb:0c:e6:60:f6:48:70:98:3a:82:3b:
f1:c9:01:96:55:62:0f:eb:d8:e8:b6:4e:c3:43:ce:
a5:01:6e:8a:a8:9d:27:61:df:20:0a:90:fd:5b:e7:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DE:C6:22:FA:35:D6:0C:9C:E8:96:32:12:9B:4A:C7:ED:CA:59:69
X509v3 Authority Key Identifier:
keyid:FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a3:35:c6:03:25:c1:8b:1c:99:b0:4f:41:44:fd:02:90:72:
28:58:b1:7b:14:cd:40:1f:3f:7c:c1:5b:e8:7e:0f:2a:f5:a7:
76:ac:d0:e0:98:9d:6c:a6:7a:96:a8:0a:b2:33:17:e4:e3:fe:
31:50:6b:d6:cd:8b:5e:b2:cc:c8:0b:b9:b7:f5:56:b4:98:84:
22:92:01:e8:89:a5:0e:90:2b:9a:ed:3f:65:fc:52:f3:7a:fa:
9a:ca:3e:6a:45:4f:e2:24:ec:5f:49:55:e5:41:fb:8a:87:3c:
fc:d8:d0:c6:58:95:22:e2:f3:db:de:56:3b:38:89:c2:cd:c2:
c1:c6:d5:5c:f2:db:af:03:b8:14:65:d4:56:63:b8:7a:64:91:
cc:a5:8d:36:99:1a:0f:ea:0c:ed:b8:3b:26:af:d7:3f:cd:d7:
4e:29:8e:38:c9:49:7a:6b:84:42:ff:d6:64:da:08:77:44:59:
d9:2f:05:a6:52:92:ea:8f:fa:73:50:2b:23:0d:04:dc:d7:b3:
5a:5b:79:a0:f8:20:7c:51:6d:3f:98:32:40:19:fd:09:b6:6c:
dd:dc:b0:9b:3f:6b:3a:dd:ce:9d:c6:df:39:c5:29:d5:73:1b:
99:a7:36:5a:4d:89:ce:57:94:c9:59:3a:dc:85:3e:2d:0e:35:
29:e8:9e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:32 2025 by rpki-client