Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json)
Hash identifier: zyA3ezuuEhaVQv34153U4cPHk/6ANfLrZqxKuoonkZI=
Subject key identifier: 59:69:BE:3F:49:27:75:15:7D:91:17:46:82:C3:E8:22:FF:84:EC:BA
Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Certificate serial: 0196553849A344A33A8FA10198CB37B86FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
Manifest number: 0FD7
Signing time: Sun 20 Apr 2025 22:01:14 +0000
Manifest this update: Sun 20 Apr 2025 22:01:14 +0000
Manifest next update: Mon 21 Apr 2025 22:01:14 +0000
Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: Q5hHQobJO9RD2Sv9txA2yrhodANiv8z496NU7i+9/QE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:49:a3:44:a3:3a:8f:a1:01:98:cb:37:b8:6f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b
Validity
Not Before: Apr 20 22:01:14 2025 GMT
Not After : Apr 21 22:01:14 2025 GMT
Subject: CN=5969be3f492775157d91174682c3e822ff84ecba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:2c:cb:35:68:6f:72:77:b8:f5:e8:94:3b:
01:9b:74:e7:cd:5a:a7:8e:7b:f2:f1:d9:2a:a3:f1:
3c:01:9e:26:bb:76:94:8b:5a:3c:99:81:43:10:c6:
19:7e:d0:f3:bb:12:67:e8:67:c5:af:8c:97:6d:48:
b2:f0:a5:40:7e:19:ad:4c:60:d6:73:2c:fb:43:38:
39:8f:01:99:3f:08:24:a3:31:b2:b8:5a:15:7f:81:
0d:58:e3:9d:28:cd:14:6f:44:33:36:99:a1:7d:be:
b2:6b:58:a3:a9:42:77:14:47:ac:73:f6:0e:81:9c:
0e:3e:da:59:a5:5a:71:48:90:63:4d:fc:16:fc:dd:
e4:11:50:e2:23:03:5c:82:4d:05:ee:29:e8:d0:09:
0f:9f:55:45:0f:12:1b:de:b9:22:65:20:f1:a6:c4:
d5:c2:c3:14:8e:88:27:44:9d:3f:c2:d4:5a:a2:69:
8e:0f:18:0e:89:71:fc:3a:f1:8f:5a:98:22:ea:fc:
b0:df:f1:68:86:3d:c0:58:d9:12:1b:f4:6b:8d:b7:
82:30:84:22:b1:54:c0:09:13:9c:69:57:d0:62:c2:
cb:d5:40:36:43:e1:e8:fd:99:f5:4d:73:2c:85:e4:
96:7d:18:e0:df:32:b6:9b:d3:a0:5a:91:aa:a7:95:
3d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:BE:3F:49:27:75:15:7D:91:17:46:82:C3:E8:22:FF:84:EC:BA
X509v3 Authority Key Identifier:
keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bb:ae:93:5d:74:fb:52:94:72:18:d4:d6:f9:93:60:6e:32:
02:3d:2b:f0:ab:c2:da:d4:fc:c8:75:39:f3:1d:c9:c0:1e:b7:
30:e9:12:c8:97:16:8e:27:6a:2d:68:06:ca:2e:9e:8d:19:60:
ee:b3:44:d0:43:d7:18:4b:7a:e2:92:79:72:b6:88:84:b5:f9:
a5:61:75:24:06:35:20:6f:65:4a:09:4d:6e:1e:d9:c0:86:22:
e2:99:49:3e:76:ff:c9:65:f1:ba:05:57:6e:f3:6e:85:c3:a8:
cb:ed:00:53:b7:d7:6a:1f:00:6f:61:bc:83:f7:3f:58:6b:f4:
cd:03:4a:ca:e9:c4:be:17:d2:ca:8c:95:fd:a7:96:d4:6a:8c:
bc:00:17:ab:ba:59:e2:58:57:97:b9:37:8a:71:85:82:88:92:
09:3b:31:20:3e:41:67:19:ad:0e:9a:5c:f6:31:43:f2:7d:67:
2e:76:b6:a1:79:46:21:b1:98:c4:5e:ea:60:15:d4:b9:83:45:
5b:81:c7:5d:fc:22:a4:87:7a:79:eb:c1:00:b3:db:3f:7c:93:
f1:d0:de:a6:8b:30:0f:af:92:95:5f:66:58:6e:97:f2:72:b6:
93:81:0b:4e:fb:54:34:df:a0:95:71:df:e0:82:e0:58:17:c8:
2e:23:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:51:19 2025 by rpki-client