Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
File: 6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft (raw, json)
Hash identifier: PwRXK7nPYodAleSJQu0huMWHGnMAJZcPMfNhFtKb7GE=
Subject key identifier: 95:B0:49:E5:F1:34:A4:47:EA:C7:1D:99:F9:42:C7:D5:26:F2:60:6B
Authority key identifier: E8:7A:1D:93:EE:4E:87:CD:55:09:9A:B8:AD:25:EE:C0:1C:4F:D2:4C
Certificate issuer: /CN=e87a1d93ee4e87cd55099ab8ad25eec01c4fd24c
Certificate serial: 01964D7E380B9A82F2280BFAD8F04C2BE8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
Manifest number: 0A3E
Signing time: Sat 19 Apr 2025 10:00:39 +0000
Manifest this update: Sat 19 Apr 2025 10:00:39 +0000
Manifest next update: Sun 20 Apr 2025 10:00:39 +0000
Files and hashes: 1: 6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl (hash: M/VroxfjYR7d8i342PqDFVkz+aWPfGFjCvYMpcf4fzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:38:0b:9a:82:f2:28:0b:fa:d8:f0:4c:2b:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87a1d93ee4e87cd55099ab8ad25eec01c4fd24c
Validity
Not Before: Apr 19 10:00:39 2025 GMT
Not After : Apr 20 10:00:39 2025 GMT
Subject: CN=95b049e5f134a447eac71d99f942c7d526f2606b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:0a:2f:8d:be:98:09:6b:9d:1b:42:ba:29:
d0:9a:fe:56:76:29:5e:3b:c9:33:4d:1f:1e:25:ff:
6b:a8:6d:75:0c:d6:65:b4:a7:d8:c8:55:88:40:45:
11:78:87:59:8c:a8:3c:f3:aa:bf:12:49:1b:5c:95:
1c:f1:c2:71:9e:8a:4a:59:af:8e:2b:07:2d:d1:62:
2d:33:98:f8:0c:42:58:b6:d6:aa:96:14:37:ef:96:
15:1f:ce:31:9a:61:64:eb:3f:3f:20:70:c7:07:0f:
48:d9:7c:a6:97:ee:98:dd:f0:c4:b4:62:19:f4:df:
cf:af:a5:97:b1:70:87:24:6b:b9:32:83:5f:f5:8c:
74:20:08:47:e6:fd:25:8d:b4:ef:15:23:a0:49:e7:
4c:99:af:01:57:a4:70:f7:dd:f1:60:3e:c7:3b:34:
b6:66:53:a7:95:f6:63:c9:8d:8d:80:9b:44:f3:15:
54:92:e8:53:07:9c:07:cd:65:9c:dc:d2:44:4c:e1:
f4:c7:70:6a:2f:83:83:94:51:d7:6a:0a:ec:25:2d:
fb:a8:1e:1e:2a:7c:d8:38:36:5e:e0:26:8a:57:9a:
89:e1:31:de:2e:cb:6d:98:7d:50:2d:ee:47:8f:ec:
f5:b5:c0:de:01:09:1b:f2:75:28:1b:3a:60:23:e8:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B0:49:E5:F1:34:A4:47:EA:C7:1D:99:F9:42:C7:D5:26:F2:60:6B
X509v3 Authority Key Identifier:
keyid:E8:7A:1D:93:EE:4E:87:CD:55:09:9A:B8:AD:25:EE:C0:1C:4F:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hodk-5Oh81VCZq4rSXuwBxP0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2b3e3a-998c-4035-a295-9d2f8476045a/1/6Hodk-5Oh81VCZq4rSXuwBxP0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8c:68:ca:85:93:b3:39:b4:05:14:61:54:83:c6:a2:9b:93:
5b:1f:9b:38:48:04:15:66:da:bb:9d:1f:12:f1:de:e5:a4:ec:
d0:a7:d6:f1:8e:64:aa:15:ce:f9:55:23:44:e8:1b:57:3c:15:
3d:09:f5:ef:14:42:f7:d3:8f:7f:08:58:6a:77:41:4f:00:6b:
7c:90:cf:d6:54:3d:a2:69:16:ba:ec:06:35:94:47:6c:8b:87:
03:57:54:4a:a3:12:4d:17:b8:12:8f:0d:b4:84:0f:72:ba:70:
a0:92:e5:4c:da:01:2f:6f:88:a3:ac:9a:db:4f:c5:26:50:03:
f3:60:87:8e:ce:a9:6e:0f:aa:a6:b0:3c:2c:97:45:61:d4:c9:
8d:07:95:81:b9:29:22:b4:0b:69:bb:8b:28:17:42:15:fd:5d:
5a:66:88:cc:ad:12:06:73:bf:d2:7f:2a:62:a3:63:ae:db:55:
e5:c7:9c:64:65:af:e5:3d:2e:a0:08:61:8d:91:4c:bb:cd:97:
a2:5e:53:56:93:3c:28:1d:31:75:27:d0:91:2a:47:29:a9:c5:
df:95:d1:90:dd:74:60:b2:3a:dc:4c:2f:c0:21:50:b6:66:f6:
96:a8:c4:b8:55:3b:95:4b:c8:a7:33:10:1a:59:86:a6:62:3c:
81:a9:eb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:27:57 2025 by rpki-client