Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier: sun+b1qwetUHGTtYsYXa9eRh/KxzLQiBnfpGCylxuR0=
Subject key identifier: 3D:33:33:23:C7:0F:85:95:7E:A1:5F:C3:3C:C5:78:1B:E8:9A:95:F2
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial: 0196572613D2051B7198B1E966096563BA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 07:00:35 +0000
Manifest this update: Mon 21 Apr 2025 07:00:35 +0000
Manifest next update: Tue 22 Apr 2025 07:00:35 +0000
Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: E3pJ6ZbqkjO6OTLcQmeSk2dlmxFKfbzbmBdwgzLnqm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:13:d2:05:1b:71:98:b1:e9:66:09:65:63:ba:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Validity
Not Before: Apr 21 07:00:35 2025 GMT
Not After : Apr 22 07:00:35 2025 GMT
Subject: CN=3d333323c70f85957ea15fc33cc5781be89a95f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:d0:80:47:a4:4f:9f:74:25:5b:d0:16:ac:
c7:07:e3:21:ce:3c:5f:86:ff:b5:40:5e:fc:89:49:
08:de:73:d8:b2:a5:8f:d4:c7:5f:7f:78:cd:e1:14:
86:75:a8:49:fa:5d:3b:a3:21:68:cf:a1:57:c4:b9:
7c:13:ca:7a:ad:3a:05:b3:1d:40:da:ba:d5:5f:e9:
53:d5:2c:60:ad:77:22:5a:6c:cc:54:e1:b1:29:a4:
51:bc:f8:ea:37:3d:dc:75:9e:34:eb:96:72:98:71:
46:19:b0:ac:27:6e:7f:a0:2f:14:b8:58:da:34:30:
54:2b:f8:3c:03:c1:9f:c9:fb:e1:8a:15:e6:35:0f:
bd:ba:c2:70:3d:69:3a:b9:9c:bf:b4:b4:8f:ee:33:
a9:09:5b:f7:fd:47:35:1d:55:f6:cd:55:2e:0f:63:
e1:17:33:7c:18:20:e7:c4:ff:e7:39:50:3c:f5:f2:
91:fd:40:b2:7c:5a:b7:c1:ff:61:b7:b5:5c:62:41:
4b:71:0b:32:ed:94:95:4f:7b:49:f7:99:50:72:a0:
1e:ba:3b:76:24:3f:2c:58:d6:f6:d4:3b:d5:dc:9e:
f9:d3:84:73:03:55:8e:74:70:5b:b2:d5:94:11:a3:
99:07:20:00:c8:85:e4:22:c0:fe:61:c5:85:90:7c:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:33:23:C7:0F:85:95:7E:A1:5F:C3:3C:C5:78:1B:E8:9A:95:F2
X509v3 Authority Key Identifier:
keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:87:7a:ed:37:52:42:7d:0c:eb:99:23:e0:29:1d:68:e5:55:
46:f5:de:96:f0:b2:6a:a2:68:71:c3:9d:88:6a:46:09:1f:a0:
e3:63:a5:8c:2d:e8:54:93:84:c7:d0:6f:0e:c4:6e:b7:09:e1:
7f:00:aa:ae:d8:64:d9:14:44:29:c8:3f:d5:9c:21:42:db:10:
a2:85:19:ba:36:c9:6d:69:a8:c1:5f:18:14:ba:b5:b1:fd:bd:
99:eb:96:d6:be:79:bf:93:3f:15:5d:e0:fc:07:ff:f5:39:a0:
62:8b:db:80:30:65:db:f3:e0:30:6c:d1:e3:ad:fd:4c:11:df:
cf:18:6b:ac:bd:48:11:4a:47:6a:48:87:b6:8a:95:d4:43:ba:
72:e0:87:ca:fa:93:29:94:eb:ed:b6:6a:4f:9f:dc:1a:20:da:
32:46:96:67:ff:dd:0f:b1:6c:23:35:41:48:81:c0:f1:89:45:
c3:0f:da:74:4f:0a:90:59:6e:45:31:77:3b:74:9d:ab:bf:d8:
5f:16:69:b9:5f:de:26:bf:07:d5:a7:ab:ea:d3:4f:02:22:c7:
7b:f6:7a:80:d6:c7:e7:f8:23:3f:dc:89:d2:bb:25:da:8e:f8:
65:a0:28:ba:c0:7f:03:4b:3e:ee:f9:06:c4:83:90:89:03:ef:
8a:e5:a3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:31 2025 by rpki-client