Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
File: aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft (raw, json)
Hash identifier: wMLhAKx1NlZVImfhdQOd3FCdj9bzUJcHWs6zMj5XrOc=
Subject key identifier: F6:E5:1E:E6:2F:B5:02:A0:F6:BF:13:8C:F9:B8:A3:95:DF:89:E1:AE
Authority key identifier: 69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
Certificate issuer: /CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Certificate serial: 019659152D61B1FB3D5982494D5B37F164F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
Manifest number: 0BB9
Signing time: Mon 21 Apr 2025 16:01:21 +0000
Manifest this update: Mon 21 Apr 2025 16:01:21 +0000
Manifest next update: Tue 22 Apr 2025 16:01:21 +0000
Files and hashes: 1: aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl (hash: I6VAGAln3KEZegNJ/LGC+Nieycurww2me6atIZLqMK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:2d:61:b1:fb:3d:59:82:49:4d:5b:37:f1:64:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6962bb3e9d35b5af9dca08ea7cceff43519a4a6a
Validity
Not Before: Apr 21 16:01:21 2025 GMT
Not After : Apr 22 16:01:21 2025 GMT
Subject: CN=f6e51ee62fb502a0f6bf138cf9b8a395df89e1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9d:3e:07:98:d2:b0:c4:86:b2:6f:99:d7:84:
49:88:22:a5:9c:bc:be:53:51:79:1f:d0:e5:a0:50:
f9:aa:4d:c0:ae:6e:60:64:e4:75:3d:a2:fb:db:ab:
42:cd:2b:bd:f8:46:cd:f9:af:35:65:c1:c9:45:04:
20:78:bd:a6:79:12:9f:3a:99:db:af:dc:7c:54:19:
73:d0:3c:97:3f:a9:72:80:04:f5:e0:23:33:92:9a:
72:2c:b1:b1:3c:41:c4:ad:5d:ce:e5:d3:45:5b:fb:
30:35:2b:34:31:7e:e6:92:ad:7f:dd:7a:2f:06:f1:
5e:3f:75:5d:cd:1a:ab:dd:c3:2a:37:e3:e8:4c:c7:
1e:f0:2e:a2:7b:1c:d2:85:07:75:42:e5:13:84:7c:
fc:b2:a8:9e:29:aa:87:a4:06:32:48:1b:29:db:5e:
5b:96:30:c5:5e:04:16:57:8f:aa:fb:ae:7e:42:08:
e6:29:2c:d0:03:5b:52:71:a6:25:6e:c7:a3:5a:c0:
bf:a4:5a:ab:0a:ad:4a:6f:dc:8c:22:f4:23:6d:c0:
9d:da:28:e1:3a:57:04:1d:d7:c0:5c:2d:11:48:31:
ff:97:fe:53:17:ec:35:b3:0e:93:15:4e:15:3b:dc:
04:3e:02:e2:37:12:67:7f:7b:52:44:ee:9a:ad:9b:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E5:1E:E6:2F:B5:02:A0:F6:BF:13:8C:F9:B8:A3:95:DF:89:E1:AE
X509v3 Authority Key Identifier:
keyid:69:62:BB:3E:9D:35:B5:AF:9D:CA:08:EA:7C:CE:FF:43:51:9A:4A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWK7Pp01ta-dygjqfM7_Q1GaSmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2edd37-8140-48c5-beaf-5136f2622641/1/aWK7Pp01ta-dygjqfM7_Q1GaSmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:b8:14:15:ee:6c:71:47:68:35:76:90:20:02:f9:db:a1:a6:
b4:0d:80:95:49:94:31:1e:27:c2:8b:4b:bd:26:20:de:c7:9a:
7e:77:29:bd:0c:ec:d6:9a:dd:6a:53:e3:70:2b:63:54:67:96:
2e:a5:13:2d:a1:4a:d0:3e:60:6a:d6:31:6b:17:64:84:0c:b0:
57:91:4d:36:74:26:4d:4b:e0:ea:92:c0:d2:2c:4d:c4:25:2a:
ba:e9:b3:88:71:5d:f9:45:33:6e:64:6f:e6:67:3b:99:7c:58:
83:eb:f4:da:1e:6a:30:9f:e2:e5:89:d7:f6:c9:1a:d3:36:d4:
02:61:1d:3f:b0:e3:43:de:29:59:97:ff:99:c4:56:4e:29:7f:
01:f8:88:10:28:2c:52:fc:33:5e:b8:d7:64:b1:09:10:76:8e:
54:43:52:4d:c4:97:e5:2f:27:88:6c:b4:8b:d3:e9:19:0e:2c:
8c:04:8b:af:bc:52:9f:23:9b:90:9b:0a:31:c5:be:a0:a8:e8:
c2:92:0d:73:95:b0:70:bf:b5:4c:db:af:11:ab:62:1b:25:9d:
2d:e0:81:c2:a3:9c:d6:bf:4e:61:20:5d:3c:3d:d2:98:9f:47:
45:ff:94:71:38:d8:ce:79:e0:f4:fe:d9:48:39:53:79:bf:2e:
d8:d1:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:25 2025 by rpki-client