Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: z84ywladG1glMxJG3GbNbIqdUp9lNEehqmb3TzvUOrg=
Subject key identifier: 28:E2:C1:62:24:8E:BE:76:6D:E5:0A:8D:FA:5B:84:2B:35:5C:32:AB
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 019643D5EB4DF47EADC7B7EF48CE7B302E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 069D
Signing time: Thu 17 Apr 2025 13:00:14 +0000
Manifest this update: Thu 17 Apr 2025 13:00:14 +0000
Manifest next update: Fri 18 Apr 2025 13:00:14 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: Z3TpjH+SZ9KuUFB2VAxvjFrAFb2Ogfgo5Uoatpsef78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d5:eb:4d:f4:7e:ad:c7:b7:ef:48:ce:7b:30:2e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: Apr 17 13:00:14 2025 GMT
Not After : Apr 18 13:00:14 2025 GMT
Subject: CN=28e2c162248ebe766de50a8dfa5b842b355c32ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:13:07:0c:19:a9:5e:41:4d:43:e8:6e:04:
ae:ba:0f:be:16:ce:21:22:80:51:8c:c3:dc:36:4a:
ca:fc:52:92:dc:cb:fa:24:30:e0:fb:85:fb:c6:52:
20:d3:95:9c:68:25:a2:21:8e:5f:7d:ec:b9:7b:de:
e3:80:b6:fe:ed:83:24:4d:fd:ae:69:11:b9:3e:e7:
b6:3f:09:9f:ec:d6:f9:8a:97:1b:eb:ec:ad:ac:43:
dc:e6:58:a1:ba:32:06:3d:4b:b0:9d:c9:e0:6f:a4:
11:94:54:f3:73:7c:6c:20:24:8c:98:80:72:69:a5:
f0:ac:41:af:28:1d:e5:43:5a:5b:54:7b:ae:da:ec:
64:ec:88:0b:1a:81:53:68:8c:a1:61:7e:93:00:57:
ba:d0:ac:ef:3e:6a:4a:76:e4:35:a8:1d:95:7b:46:
6f:0b:c5:c9:e6:a6:cd:ba:b0:d1:02:3a:b0:9b:e3:
2d:5f:d8:4b:ed:07:1d:37:7e:28:10:32:67:ef:ed:
f5:70:f4:01:8d:12:12:c8:73:82:7d:bd:92:17:15:
43:f8:33:3f:3c:5a:78:49:26:35:46:8e:c9:b3:fb:
32:37:5b:f4:96:e1:bb:e0:ca:c4:f8:85:bb:ef:4e:
6c:08:95:a8:71:10:86:7c:a6:8b:e1:0b:03:e9:d1:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E2:C1:62:24:8E:BE:76:6D:E5:0A:8D:FA:5B:84:2B:35:5C:32:AB
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7e:81:34:79:b7:5d:92:d7:06:00:76:20:52:69:e8:78:80:
ec:62:37:a9:37:0f:e2:b0:d6:2c:4f:7d:0a:e7:3d:fd:0e:9f:
5d:e1:d9:f8:bf:39:58:c8:bf:ec:66:11:38:92:e6:ae:05:12:
a0:95:62:97:96:e3:b1:1f:ea:1d:61:39:fd:ac:25:9b:56:5b:
f5:52:9b:2d:b9:c2:2e:33:54:3a:c5:e3:12:fc:39:3a:cd:35:
3b:5b:be:38:3b:d1:03:7b:d7:fa:15:45:d7:6e:c8:29:ea:15:
da:a6:ef:e1:d6:3e:95:3f:6e:f6:ee:e5:d3:5a:8f:90:77:f8:
33:41:de:a8:a9:7d:54:54:6b:8f:81:9b:9c:52:88:03:3c:8e:
1a:9c:db:ba:64:74:84:17:99:75:80:95:36:90:bc:a9:35:b0:
8d:49:52:e1:25:57:0a:9f:50:21:2e:df:92:99:f7:e0:b0:77:
ff:34:7e:8c:94:4f:e0:2e:d5:57:6a:11:14:36:05:90:36:60:
7a:10:99:4a:b0:0d:a2:5b:7a:bd:78:1c:ff:3b:f9:d5:96:37:
8e:fa:47:57:0b:00:b8:45:ff:ad:be:c0:d7:d5:26:0a:b9:7e:
ae:61:5e:07:cc:fc:cc:7f:23:90:cf:0a:98:63:1a:10:09:bd:
23:9f:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:27:40 2025 by rpki-client