
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier: dvADSIi8UeGZnMmcUnQm3Iz3bVN3lokbaENtgC0WkMQ=
Subject key identifier: E4:EB:40:4E:B6:44:23:98:3E:09:2C:E6:74:3D:2C:05:DA:89:76:C2
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial: 01974A7AA540E3E013FEC53DC2B94B413A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number: 105D
Signing time: Sat 07 Jun 2025 13:00:41 +0000
Manifest this update: Sat 07 Jun 2025 13:00:41 +0000
Manifest next update: Sun 08 Jun 2025 13:00:41 +0000
Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: kxCnmbZnrDaczJUWAMI6AVglt+Weq5uE60qciGjTT5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a5:40:e3:e0:13:fe:c5:3d:c2:b9:4b:41:3a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Validity
Not Before: Jun 7 13:00:41 2025 GMT
Not After : Jun 8 13:00:41 2025 GMT
Subject: CN=e4eb404eb64423983e092ce6743d2c05da8976c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:c5:13:20:45:8a:91:18:3b:5e:77:b8:32:
b8:aa:eb:21:ac:04:37:8f:ad:5c:b6:20:a2:d3:69:
38:3c:24:2d:4c:3d:52:14:df:78:58:d5:e6:93:cf:
12:b1:02:33:d9:a4:1e:40:2c:48:ba:cd:5a:c7:10:
7b:ae:d1:b1:30:21:68:99:b9:60:71:95:6c:47:24:
92:29:ed:f8:bb:5f:f6:7e:ae:ca:3a:81:c7:24:49:
da:f4:4b:a3:b0:c8:99:f8:0e:d9:c6:6c:b5:c2:7d:
08:d0:e5:d1:f9:b1:bc:39:5e:a4:d6:31:10:4b:e7:
86:f0:f9:21:52:e4:9b:17:07:e5:09:1d:28:27:80:
f1:80:60:24:97:2c:75:d0:12:1b:15:76:c2:6f:1b:
b4:be:6f:e0:dd:e0:fd:38:74:5d:cd:bb:17:45:85:
86:8b:25:62:bc:f6:2d:b2:07:db:9e:0f:32:31:de:
e7:a4:26:5d:b4:c1:23:07:6c:84:d6:ea:73:82:69:
8d:d8:2e:35:85:7c:c0:5d:a4:0e:3c:12:f6:9c:16:
bb:3d:8f:47:f2:47:0d:09:e2:0e:10:49:9d:58:d4:
9a:dd:4b:ad:ee:9a:01:09:c5:d2:92:41:74:fa:45:
74:cc:41:6c:25:53:4c:c7:fc:46:a1:66:a5:35:66:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EB:40:4E:B6:44:23:98:3E:09:2C:E6:74:3D:2C:05:DA:89:76:C2
X509v3 Authority Key Identifier:
keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a8:75:3d:fe:40:61:5f:cb:32:28:4f:09:ba:6f:0a:0d:20:
0a:12:b2:fc:36:3b:86:ca:a8:30:8c:8e:40:2e:f3:ae:d9:0b:
37:f5:1d:f6:aa:34:ce:c8:b5:d6:8d:bb:cc:79:e0:d3:44:00:
23:2d:31:38:27:94:f0:ed:f8:66:ec:01:8e:1e:79:7d:c3:45:
57:a2:e6:70:53:a4:8a:19:6f:6c:fb:08:61:3e:42:dd:cb:9e:
c7:f7:79:81:91:20:05:aa:58:2a:27:84:5f:2b:b8:be:7d:92:
4b:9b:74:df:b3:86:f3:39:cd:27:97:f5:44:8d:71:40:e3:0b:
f1:16:9c:5c:42:70:70:3b:b3:67:ee:f5:a5:10:9d:e1:a4:0f:
a6:e6:ce:e4:e4:9f:47:15:b5:56:fa:4b:4f:8a:c0:d0:b4:c3:
bc:61:75:9c:6f:89:1e:f6:3a:0e:ff:e1:f0:91:e8:6c:15:b5:
9f:8f:c4:60:ea:aa:20:f8:a1:34:fd:80:6b:1c:f8:c4:ba:53:
99:3f:80:f2:de:0c:c9:10:32:ca:1a:5b:9c:04:ba:35:b7:8c:
04:cb:b4:1b:e3:37:96:f9:3e:3e:3d:39:df:83:42:0d:d9:5f:
66:db:a2:cf:1b:0f:0d:44:f0:c8:78:6c:3a:f4:d6:11:e4:24:
a3:32:d0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:04:13 2025 by rpki-client