Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
File: RX6_qZz102gBj6f-DBEjQfXTZcA.mft (raw, json)
Hash identifier: +fN7/dkbQSjkpkv3VXjopGF6BVosExyYRGuDTdMYelQ=
Subject key identifier: DB:D3:B8:9B:BC:AB:7D:B7:12:39:DD:A3:CC:EA:B8:8C:EE:16:3E:5D
Authority key identifier: 45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
Certificate issuer: /CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Certificate serial: 01964C6BD95CC87ED9800AA0D7E8CBEEFF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
Manifest number: 02AE
Signing time: Sat 19 Apr 2025 05:00:58 +0000
Manifest this update: Sat 19 Apr 2025 05:00:58 +0000
Manifest next update: Sun 20 Apr 2025 05:00:58 +0000
Files and hashes: 1: RX6_qZz102gBj6f-DBEjQfXTZcA.crl (hash: DfzUkzNtlAXQsRoAbdtEEBRTA0QM1//8pMv0BPPnI+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:d9:5c:c8:7e:d9:80:0a:a0:d7:e8:cb:ee:ff:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Validity
Not Before: Apr 19 05:00:58 2025 GMT
Not After : Apr 20 05:00:58 2025 GMT
Subject: CN=dbd3b89bbcab7db71239dda3cceab88cee163e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:86:fd:d3:a1:b5:f1:87:ab:0a:e0:bd:30:
2c:06:c8:6b:78:d6:cf:86:fe:cd:ca:16:9f:db:f9:
c3:ca:13:ae:b5:60:a4:a9:44:fa:f4:2b:f6:74:d8:
a7:28:df:fd:b3:0b:e8:3f:fd:93:35:7b:47:0f:a1:
55:4e:75:a1:d7:a3:f7:47:e6:6c:c0:a3:18:ce:a2:
ab:54:04:7f:ff:f2:cb:62:8f:68:7c:95:18:de:03:
51:26:e3:4d:a6:fd:4f:e2:ce:fd:47:31:48:39:5a:
d4:88:37:b4:52:7d:4d:06:16:8f:9e:4d:66:b7:f1:
f8:e6:db:98:aa:3e:b8:1d:b5:ae:c2:1e:42:61:37:
75:4b:54:28:7c:3c:1a:8a:20:0f:c2:cb:c9:74:76:
cf:56:6f:cf:bb:72:6e:80:bb:ce:e3:5d:97:5f:74:
39:b9:be:68:a7:e9:14:61:6d:d9:fe:8b:95:57:b5:
e0:3f:d5:67:60:d1:5a:f6:af:d9:92:d4:84:60:41:
4b:e8:0f:bd:5b:70:22:f0:b8:58:b2:c5:83:2f:5f:
e6:d5:1a:0c:3f:d6:67:4c:ff:0f:68:5f:1b:31:f1:
6c:50:7c:e6:8b:b8:f3:f7:ec:0c:c3:23:50:5b:7a:
05:c0:24:39:e5:b0:d9:4b:80:1a:8e:74:1a:a9:8a:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D3:B8:9B:BC:AB:7D:B7:12:39:DD:A3:CC:EA:B8:8C:EE:16:3E:5D
X509v3 Authority Key Identifier:
keyid:45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:54:63:b4:9b:88:c8:91:bf:29:27:f3:8c:97:ea:fa:0c:e4:
10:68:f0:e9:d1:7b:9b:4e:b5:73:ae:d9:86:ce:32:d8:51:74:
2b:fa:8b:65:f0:a3:19:66:8e:5c:b6:5d:ad:03:0a:82:89:9b:
58:84:95:b2:0c:15:17:5f:62:cc:06:25:d0:93:49:b6:63:67:
55:73:ca:f6:23:84:39:3b:73:77:d8:aa:52:a3:f0:05:01:03:
93:e5:3b:0a:35:e6:cb:8d:55:6e:8c:cf:75:82:87:c0:a8:8a:
38:42:00:1d:aa:39:c4:8d:be:c5:af:58:1b:f6:8f:75:39:24:
91:40:ca:3c:89:f6:77:ee:af:10:ce:8d:ca:aa:9d:58:79:19:
0e:53:dd:02:5c:f4:38:31:b7:b9:7f:d0:05:f8:e3:0a:f2:9c:
ad:65:48:2a:5a:a4:e2:49:73:33:07:28:3b:7b:b2:e9:ef:9e:
9f:1d:9b:c3:42:5a:0c:1b:b9:35:82:55:ce:d6:38:5e:20:7e:
42:f1:95:6a:03:c5:7e:9c:e1:c5:ff:8a:9d:81:48:50:e8:55:
35:41:37:2c:ef:6f:d5:b0:53:4b:59:be:51:3b:95:c2:35:ca:
81:63:e6:82:12:aa:b4:29:e6:d0:fb:02:fc:66:15:fd:70:61:
78:21:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:45:18 2025 by rpki-client