Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
File: 6gHK_4k1RpEKJfvM64YjVfejcmA.mft (raw, json)
Hash identifier: ncRwjRZxwa0ol6fLF22m1WSPDktL/MAJJkhrOCC0iAA=
Subject key identifier: BC:C8:60:A7:03:03:5E:C2:69:00:99:BB:C9:E3:DB:29:E6:42:8E:72
Authority key identifier: EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
Certificate issuer: /CN=ea01caff893546910a25fbcceb862355f7a37260
Certificate serial: 01965CF14A0240C0E22CEC562198E8D8F352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
Manifest number: 0C1F
Signing time: Tue 22 Apr 2025 10:00:39 +0000
Manifest this update: Tue 22 Apr 2025 10:00:39 +0000
Manifest next update: Wed 23 Apr 2025 10:00:39 +0000
Files and hashes: 1: 6gHK_4k1RpEKJfvM64YjVfejcmA.crl (hash: EZ6KtOorDFbD4bYcdTJIuUvtJcsp++H6MyEWuOBAcG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:4a:02:40:c0:e2:2c:ec:56:21:98:e8:d8:f3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea01caff893546910a25fbcceb862355f7a37260
Validity
Not Before: Apr 22 10:00:39 2025 GMT
Not After : Apr 23 10:00:39 2025 GMT
Subject: CN=bcc860a703035ec2690099bbc9e3db29e6428e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:d1:f8:31:6f:ac:af:da:0e:6a:99:ab:8a:
22:1c:6d:15:b8:0e:85:e5:e9:5c:4b:59:62:e5:88:
7f:95:4c:03:e6:2e:7f:29:9f:74:7d:5b:3a:cc:78:
58:0a:d2:e0:40:59:14:88:f9:51:cb:74:a1:17:c6:
77:d4:b1:45:11:8f:ee:91:78:c0:c6:ec:7e:ba:4c:
52:77:f6:34:cb:c5:bb:2b:97:ae:5c:f5:2b:c2:f5:
4e:cb:3a:71:ab:ab:b9:5d:2e:27:12:10:fa:f7:24:
97:84:19:28:ed:b1:5f:f7:14:f5:9f:a2:12:63:e7:
a1:5f:2a:ce:4d:78:e0:f6:cd:c8:68:5d:d2:b2:4d:
9b:0f:54:45:15:57:28:f1:56:f7:87:cb:e8:14:14:
d0:02:e3:0c:95:6d:2a:b5:c3:00:8b:55:1b:01:91:
bb:51:a8:d3:23:d9:7d:58:25:f9:9a:1f:42:c3:10:
b6:0e:c8:07:c8:95:63:1c:52:57:ce:ce:98:f1:9a:
50:79:61:39:7c:0a:84:3d:bb:ca:4c:db:eb:bf:cb:
6e:ed:b2:e2:29:b6:07:8e:09:5d:df:f3:78:ce:e8:
e5:ba:a0:aa:53:a2:de:d7:56:bc:4b:34:e1:bd:12:
72:e5:b2:38:73:6f:26:cc:f0:43:04:a8:0f:32:45:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:60:A7:03:03:5E:C2:69:00:99:BB:C9:E3:DB:29:E6:42:8E:72
X509v3 Authority Key Identifier:
keyid:EA:01:CA:FF:89:35:46:91:0A:25:FB:CC:EB:86:23:55:F7:A3:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6gHK_4k1RpEKJfvM64YjVfejcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0a7ea2-5030-4e64-bdd6-2e9eda199a78/1/6gHK_4k1RpEKJfvM64YjVfejcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4f:c9:d7:37:e4:5e:77:e3:6d:3f:dd:8b:8b:e0:60:8e:5a:
12:34:5f:0e:0c:88:91:8a:67:c2:b9:19:0e:f4:72:72:41:0d:
f2:40:46:ce:ee:b6:98:fc:9f:2c:5a:4e:3e:64:35:db:ad:78:
b2:6e:f0:cc:63:33:a1:2e:dd:e2:d8:5c:bb:dd:f8:81:c5:1f:
2e:b8:cb:f2:61:88:be:58:5f:8b:70:62:09:c9:bb:11:14:9a:
60:c3:36:a6:94:04:9d:74:bb:f8:87:b1:74:62:5a:4b:3a:80:
83:4d:52:94:91:db:00:a2:b1:e3:a6:7b:44:16:0a:48:a6:4c:
61:31:18:f4:db:c0:95:cd:32:10:cc:0f:24:14:a0:fc:6d:9a:
3b:5d:dd:1a:fb:35:e5:d8:54:97:25:7e:2c:6a:6d:59:f2:30:
e4:0f:fa:d9:a2:84:c8:b8:88:e7:13:5d:5c:b6:8b:31:fb:55:
b8:31:b1:e4:74:5c:a6:bd:12:4d:e8:84:26:24:a4:e8:19:81:
ba:dd:03:cd:af:07:16:86:ea:76:15:71:f1:02:09:53:72:ac:
59:dd:6d:d9:38:0f:b1:96:cb:ce:7e:03:2a:34:4b:56:63:4f:
1e:9f:45:85:e6:10:c4:5f:6a:e9:f9:19:17:5b:43:7d:e8:83:
ab:69:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:00:11 2025 by rpki-client