Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
File: 6lz30dxfvb1jS9YbgLfv_uxGKHM.mft (raw, json)
Hash identifier: xtkKSGwv6tLh9iZfBNUQq5UlSVnpgUomIJEx8s6GVsM=
Subject key identifier: 74:2B:A5:29:50:9E:F5:EA:44:2F:AE:F4:2B:2B:6B:9F:AE:1B:E7:CD
Authority key identifier: EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
Certificate issuer: /CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Certificate serial: 019655DCD2F0D0477B72652E8CE4CB42FD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
Manifest number: 13B1
Signing time: Mon 21 Apr 2025 01:00:57 +0000
Manifest this update: Mon 21 Apr 2025 01:00:57 +0000
Manifest next update: Tue 22 Apr 2025 01:00:57 +0000
Files and hashes: 1: 6lz30dxfvb1jS9YbgLfv_uxGKHM.crl (hash: b1PYBllpoHOqiUM7xvoC7PmHeOsXk8+e8QAzO8pOLck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:d2:f0:d0:47:7b:72:65:2e:8c:e4:cb:42:fd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5cf7d1dc5fbdbd634bd61b80b7effeec462873
Validity
Not Before: Apr 21 01:00:57 2025 GMT
Not After : Apr 22 01:00:57 2025 GMT
Subject: CN=742ba529509ef5ea442faef42b2b6b9fae1be7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1c:3b:ba:51:d5:63:24:7a:f8:2b:71:ec:25:
a4:e8:37:50:02:b1:e8:ce:ae:fd:9c:3b:40:90:ec:
8f:6c:76:c0:66:05:a3:4b:f1:e2:46:8f:77:82:82:
d5:7c:61:03:d0:e4:d0:80:95:5a:3e:20:09:22:f1:
56:d2:1d:1f:ec:23:f4:35:22:b3:60:66:df:11:f6:
78:49:a0:de:d9:1c:fb:e8:9f:f4:13:ed:9e:06:c7:
8f:5f:ca:bb:ea:c8:d0:73:68:37:53:0c:a9:22:aa:
f3:f5:24:ce:4e:b2:9a:50:79:47:80:c0:c7:bd:db:
ee:4f:25:cc:dc:4f:0f:32:c4:c5:82:9a:8c:5f:b1:
20:12:a9:ff:30:56:64:90:c3:4c:43:91:5a:21:5b:
67:40:b3:a3:8c:75:b0:5a:e7:8b:5e:7d:1b:15:67:
19:04:98:b2:a1:30:e3:d0:37:51:c4:42:26:7b:f6:
aa:e9:4f:1b:a4:d5:93:6f:ea:af:e8:02:85:d7:55:
f3:8a:aa:d1:08:80:2e:ba:97:c0:44:f5:10:a4:1d:
4f:66:e4:a8:47:78:0e:31:9e:1b:8e:3a:f5:b0:54:
09:df:08:8d:8f:73:dc:27:c6:18:28:48:f7:99:e8:
cd:a7:94:f4:ef:1a:e9:46:7b:2f:f6:6e:30:f9:2c:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2B:A5:29:50:9E:F5:EA:44:2F:AE:F4:2B:2B:6B:9F:AE:1B:E7:CD
X509v3 Authority Key Identifier:
keyid:EA:5C:F7:D1:DC:5F:BD:BD:63:4B:D6:1B:80:B7:EF:FE:EC:46:28:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lz30dxfvb1jS9YbgLfv_uxGKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dbd24b-8475-4eb0-9634-8132329ac35b/1/6lz30dxfvb1jS9YbgLfv_uxGKHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7f:a4:3c:a0:39:38:d5:b7:9a:85:bc:c9:a6:10:dc:e9:f1:
2b:16:8d:ac:2d:33:e8:d5:5a:2e:80:58:93:f6:02:ec:61:62:
f5:8b:e1:20:14:98:fc:71:12:d3:2f:a7:66:55:d5:c5:88:9c:
4e:11:cd:fc:0c:2b:b6:b4:4d:52:e4:93:1f:63:68:fc:43:c7:
30:1d:ba:ee:27:e1:29:69:87:ee:2b:70:42:43:68:ff:3c:1c:
f3:53:c2:1d:ac:40:f8:8a:5d:60:ae:fb:09:89:e9:27:50:c7:
e4:20:90:82:1e:09:ff:2b:36:80:92:a4:9e:60:13:59:42:46:
b6:7e:29:b0:f5:e2:ec:d7:b8:e6:92:40:0c:58:90:13:2a:57:
b6:60:06:1c:40:ac:f0:b7:2e:8f:9d:da:57:6e:a5:26:33:79:
40:db:c1:ab:9d:25:ee:5f:7e:87:cf:f3:c8:41:23:d5:f1:4c:
9f:6c:03:57:3b:46:a0:5c:f5:d0:9e:30:be:08:8c:a7:42:1c:
87:63:49:18:33:ea:90:44:94:4c:fc:aa:4d:d4:b0:6d:da:be:
4f:ff:61:f3:7d:42:2a:58:fd:00:7a:a1:dd:58:c6:49:22:de:
76:5e:a7:e2:9e:de:c7:0f:ee:7e:1e:8c:77:b5:e9:85:14:ae:
ab:30:c7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:47:41 2025 by rpki-client