Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
File: bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json)
Hash identifier: 09GNsVyUxGdf7n1RseMo0m9fjO1sPp3iLX41tZlUVyk=
Subject key identifier: 46:DB:B8:BF:05:08:DF:8F:66:5D:8E:C0:D7:9E:38:37:94:F1:CC:2B
Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
Certificate issuer: /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Certificate serial: 01965793CC384723C94849871C57901AB7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
Manifest number: 1191
Signing time: Mon 21 Apr 2025 09:00:25 +0000
Manifest this update: Mon 21 Apr 2025 09:00:25 +0000
Manifest next update: Tue 22 Apr 2025 09:00:25 +0000
Files and hashes: 1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: qEny9kzkLYnSGB3Yz5wdMvRUOdOMZfSy+xZOXPh1GaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:cc:38:47:23:c9:48:49:87:1c:57:90:1a:b7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Validity
Not Before: Apr 21 09:00:25 2025 GMT
Not After : Apr 22 09:00:25 2025 GMT
Subject: CN=46dbb8bf0508df8f665d8ec0d79e383794f1cc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:26:3a:69:a8:5c:82:eb:29:3a:be:3f:54:
d8:c4:3b:ce:27:b9:68:a8:00:c8:54:26:04:a0:e3:
fa:73:3a:de:f1:ad:b6:b1:c7:3a:b5:08:4b:21:18:
23:1e:2b:09:20:b5:38:e3:b9:e6:11:cd:58:c4:8c:
76:a1:81:fe:4f:81:f5:8b:f7:f4:45:67:a8:16:37:
58:74:6d:36:a6:93:f2:f8:ce:6a:5e:c2:a9:d0:78:
62:dc:8c:78:89:63:15:d4:d5:84:14:a3:a8:bb:41:
c0:c3:aa:27:ce:5f:4e:01:fc:2d:51:f7:11:4e:ae:
11:ff:00:c2:ac:f5:5b:ed:be:83:29:68:20:ff:b3:
38:6d:3a:8d:d3:99:f6:80:d1:8d:57:ed:55:8f:1e:
f3:44:5d:e6:7a:ea:2e:db:52:95:20:3e:35:01:8f:
83:03:f4:56:d4:f4:ed:c7:ae:3f:08:15:93:f1:21:
36:70:96:c2:0b:51:5a:1b:60:11:0b:c8:60:23:d4:
35:cf:4e:08:a1:9b:fb:b7:cc:3f:6f:32:03:48:cd:
53:da:6f:08:77:ca:ad:98:95:d7:d2:59:9e:1c:fb:
36:9d:11:29:9a:41:d3:a6:b9:88:d1:a3:fe:74:88:
a9:8f:ec:ce:58:f5:e2:41:81:d2:83:b9:39:b5:57:
9a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DB:B8:BF:05:08:DF:8F:66:5D:8E:C0:D7:9E:38:37:94:F1:CC:2B
X509v3 Authority Key Identifier:
keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e7:90:d1:49:3f:79:6e:de:1e:78:fa:49:3a:42:93:96:10:
c1:1f:bc:7b:5b:f0:80:4e:9c:5a:a7:ed:6f:de:42:2a:af:58:
c9:46:e3:85:2d:00:4e:fd:6d:a3:d9:97:e8:58:f8:9c:98:fb:
ce:12:74:90:2f:19:e1:76:a6:e0:2c:2f:07:fb:cd:28:c2:3c:
c1:8c:5c:81:44:bd:10:cc:d9:c9:66:c5:53:24:13:6f:5a:9d:
89:78:ed:30:11:71:23:ae:3e:19:55:ca:c9:04:72:09:d6:c0:
e6:24:ca:df:99:ec:fe:5c:29:8f:ad:b9:cc:da:bb:e7:75:90:
42:ad:e2:21:5e:ba:ef:d7:45:f7:75:ea:d0:ca:df:ff:a7:13:
eb:1b:75:5d:02:64:f2:46:fe:72:fd:ca:37:6f:db:24:b5:15:
d9:d3:f5:f1:4c:eb:03:05:7e:87:35:97:02:ac:72:43:71:4a:
44:3b:e2:37:b5:03:99:cc:54:fc:8f:11:5c:c5:41:1e:cf:3d:
45:fc:54:54:7b:82:6f:33:4e:4e:10:30:4e:c6:61:c0:95:fe:
a9:9c:14:f7:9c:43:cc:f0:a6:4d:5b:90:f5:f7:f7:25:31:3e:
9d:05:b7:7b:aa:2a:6c:32:6e:6c:23:89:58:d0:5e:d4:64:ab:
8a:fc:b5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:19 2025 by rpki-client