Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: OrR+oC48clAgfDjseqx5pYqm+/9blN1Di6k7jZgzqcs=
Subject key identifier: 6B:2B:D1:46:53:F1:E0:FB:BB:A8:7B:2E:FB:2A:F2:1D:B6:6D:0D:2C
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 01964067646AA2842F28C8379DC5124E85FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 04D1
Signing time: Wed 16 Apr 2025 21:00:39 +0000
Manifest this update: Wed 16 Apr 2025 21:00:39 +0000
Manifest next update: Thu 17 Apr 2025 21:00:39 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: Vwowc/JgHwgkEfcIkaa+DFmMDCCIwdnuYw11rVC/fLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:64:6a:a2:84:2f:28:c8:37:9d:c5:12:4e:85:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: Apr 16 21:00:39 2025 GMT
Not After : Apr 17 21:00:39 2025 GMT
Subject: CN=6b2bd14653f1e0fbbba87b2efb2af21db66d0d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:05:fa:4f:b0:d3:59:e9:fb:d1:61:cf:1e:
b5:28:30:12:1b:bc:79:bf:dd:2a:fe:59:e1:69:a9:
f5:ec:b5:2a:52:2b:c4:38:ab:49:f7:52:c5:79:ed:
9d:79:e7:19:e8:14:f7:a9:73:d1:b5:43:1e:86:8b:
3b:48:8d:5d:08:81:85:00:4f:e3:1d:63:ae:a3:14:
6a:7c:05:6b:c0:e2:92:c3:3b:20:ea:c5:88:ab:60:
9b:59:68:d3:8b:f5:ae:18:7c:f4:c1:68:3c:37:26:
a9:6b:17:d9:7e:39:d5:fc:cb:56:db:66:6c:15:ea:
32:a1:bf:fc:59:ce:4a:c8:c1:57:bb:11:f4:4a:68:
12:1c:e3:ed:cd:31:3e:4b:2a:31:c7:54:83:18:22:
fd:a9:d6:a5:cd:4a:6b:6c:8a:88:46:01:56:a0:2f:
40:0e:01:17:9d:48:59:9a:87:dd:bb:f5:a1:11:08:
4b:d4:52:ce:a9:22:42:3a:08:6c:b4:b5:78:e6:6f:
15:56:10:2e:71:14:04:c5:a1:e3:6e:0b:97:7f:98:
0c:dd:1a:23:76:0c:56:a4:54:65:6f:1c:9f:cb:1a:
46:a7:be:5c:cb:8e:12:77:cf:54:77:b7:41:d0:4a:
d5:98:d8:4d:83:05:9a:ce:d4:27:8d:8d:b3:15:7c:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2B:D1:46:53:F1:E0:FB:BB:A8:7B:2E:FB:2A:F2:1D:B6:6D:0D:2C
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:57:6e:8c:6c:68:35:b5:ab:7a:42:59:d3:39:d3:36:4c:20:
21:6b:20:1b:73:d7:74:d8:3d:81:8c:b4:28:8e:a2:2d:54:a4:
6d:e7:36:77:a7:cb:9a:92:b9:bf:6d:dd:19:6d:b2:7b:5c:aa:
0e:5a:9d:49:d0:ec:e9:9a:35:2e:aa:6c:65:0a:04:eb:5e:92:
c6:ad:76:5a:5c:04:0e:82:75:b2:e5:04:f8:57:95:b2:5f:3d:
67:04:25:b4:91:8a:0d:1a:44:0f:45:fe:18:06:76:f8:db:93:
b6:99:fc:4b:fa:12:f7:91:11:87:4f:d4:60:99:81:67:d9:6b:
e1:1a:b5:ae:36:e8:fa:4e:32:ba:a4:26:d9:d8:d9:3a:72:2f:
75:e2:68:11:20:2d:1f:f5:70:05:6d:4c:9a:5f:e4:04:71:00:
93:8d:d5:cc:20:1c:dd:21:16:e9:64:6e:4e:c0:c3:7f:ad:23:
51:8d:c9:3c:05:45:74:02:8c:d8:3a:54:e3:36:9a:90:f9:12:
f9:75:62:50:c8:79:37:98:db:ab:f4:3f:d7:a3:56:35:d5:86:
4a:ff:bc:53:15:cd:2b:13:e6:32:3f:5e:13:e2:c6:d5:46:27:
44:2e:4d:c5:75:27:80:a2:e8:0f:89:ec:58:36:7d:31:f6:24:
90:d0:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:44:51 2025 by rpki-client