Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier: JPaLtjhZTDRdmmZIWgqzwoGwESVeY3rojHxqPxQP82c=
Subject key identifier: 39:81:04:CA:D5:D3:45:71:A4:D9:10:60:99:7F:01:41:9F:35:43:99
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer: /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial: 01965A94D4EB0C7D926FD09D0BB3E78625EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number: 08E9
Signing time: Mon 21 Apr 2025 23:00:25 +0000
Manifest this update: Mon 21 Apr 2025 23:00:25 +0000
Manifest next update: Tue 22 Apr 2025 23:00:25 +0000
Files and hashes: 1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: K+ay7vE9PxmWyuzS2U6U6TpH2l+A95xeK+7kZ8n18Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:d4:eb:0c:7d:92:6f:d0:9d:0b:b3:e7:86:25:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Validity
Not Before: Apr 21 23:00:25 2025 GMT
Not After : Apr 22 23:00:25 2025 GMT
Subject: CN=398104cad5d34571a4d91060997f01419f354399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:90:14:92:ea:4a:ad:02:e8:86:47:a7:2c:
cb:ed:91:a5:ac:03:23:e7:be:90:8c:a2:c3:55:fa:
8a:b0:19:8b:22:02:ee:71:c6:e9:45:17:d2:1b:29:
5c:97:b0:df:48:39:ae:2a:2a:2f:74:1a:5d:cb:69:
e9:c9:35:46:16:27:4b:cb:aa:d0:7c:f4:53:e6:f4:
d0:29:03:5d:1a:d9:6e:26:bc:a1:90:73:c1:63:f4:
bd:ca:c4:7e:34:fa:81:72:3c:3a:5f:70:bf:bd:b7:
2e:24:8c:35:89:c0:7d:9f:6f:04:80:0e:f2:0d:f4:
b8:47:4d:7d:93:e5:a1:37:85:33:d9:c7:a3:ff:98:
21:79:b8:42:5b:f1:7f:b4:ac:18:b1:e2:dd:ec:46:
bd:7b:e5:1e:91:5c:2b:73:49:48:1f:fa:e7:b8:26:
2f:fa:d5:5d:87:65:f4:d5:ea:c2:bb:22:5d:be:ca:
85:f7:b4:a0:19:51:38:53:0e:d3:e6:b4:e3:d0:01:
27:93:70:f8:fd:5f:3a:1e:8e:a4:4c:bb:93:6c:c4:
de:6d:75:32:49:e4:c6:5e:49:d5:28:9f:60:42:d5:
f4:7b:f9:cf:fa:14:9d:9a:fb:74:38:1b:1f:a3:43:
ad:1c:20:7e:dc:c3:31:7a:13:ca:4f:63:8a:47:9b:
5c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:04:CA:D5:D3:45:71:A4:D9:10:60:99:7F:01:41:9F:35:43:99
X509v3 Authority Key Identifier:
keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:26:b1:68:2a:0c:0f:6c:12:91:93:90:7b:a6:6c:ac:40:22:
47:91:e5:d8:10:c2:75:77:00:7c:10:a6:cb:2b:86:c6:63:78:
11:39:32:d6:70:4a:b4:26:fa:79:67:bc:45:b7:50:e4:01:a7:
23:e8:9e:d2:28:06:ab:e1:01:f7:5a:51:b7:82:b4:00:83:b8:
c9:b1:3d:f1:31:db:f3:90:0d:56:92:f9:44:da:12:2c:e3:a6:
a8:a4:b3:a9:cf:b0:67:ac:b8:7b:24:d9:64:5c:44:7b:82:fb:
c7:bb:0c:5f:c9:af:a5:ce:cd:9f:1a:b7:45:03:40:ff:ff:9f:
90:0e:5a:57:fb:b6:48:41:e6:cf:a3:74:e2:42:72:63:fa:0f:
10:20:fa:df:44:59:d5:4e:b0:9a:90:60:40:79:ae:d8:2d:21:
2d:dd:70:7d:c9:b6:7e:7b:d0:81:b5:cb:f8:ce:e4:5f:27:07:
ff:1f:ba:59:c7:e4:7e:0d:8b:0d:8c:65:b0:fd:41:9c:85:2d:
69:b6:e7:d1:df:ed:82:ae:bd:35:70:ce:11:b2:4a:5d:62:de:
76:bc:0f:48:22:55:2b:29:1c:f6:f6:a4:86:ef:53:ff:ed:ea:
c3:ce:c8:25:0f:f2:db:1e:cd:8f:2f:18:ab:37:6b:c0:e3:d4:
e9:d1:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:42 2025 by rpki-client