Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
File: 6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft (raw, json)
Hash identifier: kNrXGTRMHvJrGXWKEtROR6oOv46YAA8RtthX+C/W3tM=
Subject key identifier: 5E:49:63:69:4A:54:F7:58:A6:21:ED:2A:AC:D0:1C:0A:9F:9B:34:52
Authority key identifier: E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44
Certificate issuer: /CN=e9fd01e250b4230276b31e0b8328d87e6974e644
Certificate serial: 01965613833E99F65D9751D0D089C3CCDECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
Manifest number: 14FB
Signing time: Mon 21 Apr 2025 02:00:41 +0000
Manifest this update: Mon 21 Apr 2025 02:00:41 +0000
Manifest next update: Tue 22 Apr 2025 02:00:41 +0000
Files and hashes: 1: 6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl (hash: zQnwTi3qPJ9DY7la1pIwBtUQcSyyRnNZElRcIdpc0O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:83:3e:99:f6:5d:97:51:d0:d0:89:c3:cc:de:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fd01e250b4230276b31e0b8328d87e6974e644
Validity
Not Before: Apr 21 02:00:41 2025 GMT
Not After : Apr 22 02:00:41 2025 GMT
Subject: CN=5e4963694a54f758a621ed2aacd01c0a9f9b3452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a7:40:ea:d7:dc:b4:e8:4b:c8:b2:9f:ce:fe:
b3:1d:86:26:a3:d0:86:70:17:c3:c3:a5:8d:b9:25:
06:68:22:6e:f6:d0:a5:c8:f7:85:c5:a6:b7:64:7d:
21:37:5c:92:a9:c0:ad:bb:98:b9:9f:bb:6d:77:37:
cd:32:56:d4:df:ed:fc:ef:f4:7f:c9:f7:e2:4e:30:
05:df:a8:1b:f8:7d:15:4e:00:4d:f5:46:f1:9f:aa:
91:f9:ac:0b:19:c7:44:68:e0:87:1b:1f:8a:52:33:
bc:fb:d6:23:42:5a:11:0e:99:b5:d7:75:07:d5:0d:
b5:90:9e:8c:99:a4:41:3d:b8:ac:b1:d6:64:d3:63:
dc:c2:4d:af:cc:b0:02:9b:75:4b:37:c1:e5:f4:b6:
06:a7:22:41:46:b9:b2:1f:71:68:3b:29:46:f4:c8:
63:ad:b8:7e:e1:d1:05:97:55:4a:34:45:cf:29:16:
4c:46:b8:ec:e0:29:2c:1e:36:ca:fc:d5:17:1f:29:
ac:19:5f:3e:a8:d8:82:9a:d8:2a:74:96:c8:07:9e:
18:67:b7:36:48:42:56:4b:43:13:73:7f:34:4e:fd:
16:61:25:9d:16:24:2c:04:61:0d:e1:78:34:e6:05:
bd:6d:b0:60:13:f4:85:51:11:23:91:f8:10:58:1c:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:49:63:69:4A:54:F7:58:A6:21:ED:2A:AC:D0:1C:0A:9F:9B:34:52
X509v3 Authority Key Identifier:
keyid:E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:36:e1:19:f8:aa:57:41:37:98:61:8d:ab:4d:de:98:43:b2:
be:63:3f:0e:06:e8:3e:73:f2:61:60:b3:b1:2f:0b:e4:61:87:
66:c0:9f:06:d3:8d:ed:da:84:89:57:2d:2b:ee:1a:6f:b6:92:
e2:f7:22:60:10:7b:22:6c:eb:c0:a9:32:7d:ca:18:18:66:52:
9c:36:6e:38:be:b6:ab:f2:2c:1e:2a:b2:ef:be:4b:48:68:fa:
d2:1e:6b:64:c1:bd:4f:d1:63:38:81:a3:e8:bc:da:eb:51:8a:
a1:cf:92:c1:30:1c:73:1f:22:06:19:70:ed:b9:2e:19:bc:5c:
e8:23:67:ae:4a:5c:bb:14:eb:6e:b6:13:8d:75:1c:32:60:f5:
8e:c8:f5:9a:33:8c:9a:58:d2:8c:e3:14:5c:50:c4:d9:7d:69:
84:3c:5b:9c:78:1c:dc:48:d0:3b:54:fd:9d:44:05:42:18:81:
0e:a1:ac:fa:87:e6:e9:d8:29:cc:bd:3d:68:f1:17:d5:01:4d:
42:8d:63:aa:b7:4f:af:94:66:cd:a2:d7:9c:e6:d8:80:c4:3f:
3d:15:04:85:6d:27:d1:b5:e6:bc:89:54:9b:ed:45:13:ba:8f:
15:5d:b8:13:58:31:76:94:c0:da:60:5a:26:63:29:a1:61:1c:
e2:5f:51:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:09:15 2025 by rpki-client