Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
File: 6KCkA2ab6r8q124AHLl9FdB-Kdk.mft (raw, json)
Hash identifier: ZRgdWSuCqkIWNQiZL9gWIuvWGry7iBRvovoq+nTyGVE=
Subject key identifier: 54:EA:0A:B7:CE:24:F2:B8:D7:8C:2A:60:E7:78:E1:27:85:62:1C:12
Authority key identifier: E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
Certificate issuer: /CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Certificate serial: 0196504836AA5E3A85B7B9EFF60C571229CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 23:00:31 +0000
Manifest this update: Sat 19 Apr 2025 23:00:31 +0000
Manifest next update: Sun 20 Apr 2025 23:00:31 +0000
Files and hashes: 1: 6KCkA2ab6r8q124AHLl9FdB-Kdk.crl (hash: W2hAujGQfogf9D/pJNS+27YI1NqGzWIPWOHts91Yy7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:36:aa:5e:3a:85:b7:b9:ef:f6:0c:57:12:29:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a0a403669beabf2ad76e001cb97d15d07e29d9
Validity
Not Before: Apr 19 23:00:31 2025 GMT
Not After : Apr 20 23:00:31 2025 GMT
Subject: CN=54ea0ab7ce24f2b8d78c2a60e778e12785621c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:4f:2a:3c:6f:32:b9:01:58:25:63:57:61:
30:cc:90:0a:11:70:9e:7e:d5:1a:93:19:a4:2c:e6:
39:54:50:80:9d:17:81:75:34:34:a5:5f:62:88:96:
2c:ad:2f:ff:a2:d5:46:c5:19:db:b6:b4:3b:af:c5:
10:6e:1b:98:ea:bc:25:39:21:1d:b8:c9:df:18:0b:
2f:fc:60:42:e3:4e:66:27:c8:e5:69:8b:58:06:d6:
a0:53:76:16:51:b8:ec:38:68:06:6c:75:05:c8:8d:
04:80:a5:33:7d:8c:a5:24:66:ac:85:0e:95:2c:93:
1f:ad:ae:b3:ff:17:1d:b5:1e:3b:31:51:a1:21:5b:
ca:4d:09:d4:fb:63:6b:bf:35:28:b3:9a:45:90:96:
4d:ff:0e:f7:c9:45:1e:16:09:0b:bd:2a:5d:92:fe:
72:d8:98:f1:f5:02:2b:f2:79:4d:e9:c1:cc:54:19:
d6:5e:cf:36:48:b3:15:6d:21:34:ad:f6:4d:b0:b7:
54:5a:81:0d:78:2d:a6:ca:68:8a:e6:9c:d9:30:a9:
89:ac:97:34:da:e5:93:87:b0:c2:95:d1:08:4e:a9:
a6:65:c9:f1:48:1d:7f:88:f2:a7:de:b4:92:66:c2:
49:1f:90:ee:09:04:89:00:6e:ac:3b:64:79:78:30:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EA:0A:B7:CE:24:F2:B8:D7:8C:2A:60:E7:78:E1:27:85:62:1C:12
X509v3 Authority Key Identifier:
keyid:E8:A0:A4:03:66:9B:EA:BF:2A:D7:6E:00:1C:B9:7D:15:D0:7E:29:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KCkA2ab6r8q124AHLl9FdB-Kdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/50e026-2558-459a-b6d2-6ae3d006c64c/1/6KCkA2ab6r8q124AHLl9FdB-Kdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1a:a2:c5:f6:df:10:f2:bc:ab:33:ae:d6:55:ac:97:78:47:
c9:01:1a:cc:38:8b:2c:da:62:4c:95:a3:41:a6:09:94:ec:ce:
53:86:66:6c:bd:0c:21:ae:10:d3:63:64:76:9e:45:8f:63:1a:
2a:2a:48:1b:35:2f:a0:dd:44:bc:95:04:a3:41:1e:bc:2c:a9:
d8:bf:5f:54:20:18:e7:79:cb:c0:09:2f:eb:8c:1c:1e:9e:f1:
c1:7c:82:66:18:0d:b7:97:43:fa:73:df:14:1c:1c:c6:a7:27:
30:ec:88:36:43:cb:46:e4:18:c2:51:4a:fa:78:80:35:32:34:
be:29:ee:d3:a7:00:e7:aa:09:29:fa:e5:ba:dc:ec:e9:8f:29:
06:b3:cf:30:b5:dc:e1:45:66:5a:5f:34:d9:b9:6e:2f:a7:1e:
b0:3b:4c:de:68:1f:b2:91:1b:f3:7e:83:83:1e:f8:1f:e3:66:
21:d8:21:89:02:30:38:ca:03:0c:72:fd:7f:b7:55:58:42:db:
58:63:a5:cf:2b:dc:40:78:a4:9c:72:a6:6b:ec:ab:6b:29:a3:
5c:13:a1:44:98:d7:d2:59:d9:fe:90:24:b4:0b:ba:15:49:da:
4f:20:59:e6:84:6f:28:1e:0e:ad:e9:cd:11:41:7e:ed:6f:9d:
bd:38:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:43:51 2025 by rpki-client