Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File: 6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier: 5Mf9abv7XamAF0r1ZxMAVyvVaty/AgHfJ6+kdGHFNRQ=
Subject key identifier: 23:66:EC:47:8F:64:45:0D:89:C7:76:F5:C1:04:58:14:CE:F6:CA:E8
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial: 01963CF85C1EB9CB7DB778F184257C50B948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number: 066B
Signing time: Wed 16 Apr 2025 05:00:31 +0000
Manifest this update: Wed 16 Apr 2025 05:00:31 +0000
Manifest next update: Thu 17 Apr 2025 05:00:31 +0000
Files and hashes: 1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: MPuuRLSL5jkH9mj1l0n9o1kk4nr+QkEcIuAEKlqcYmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:f8:5c:1e:b9:cb:7d:b7:78:f1:84:25:7c:50:b9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Validity
Not Before: Apr 16 05:00:31 2025 GMT
Not After : Apr 17 05:00:31 2025 GMT
Subject: CN=2366ec478f64450d89c776f5c1045814cef6cae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:fc:9e:bb:4a:06:48:6e:af:7c:d0:6e:3f:
37:7f:c1:75:30:ff:1c:8b:dd:8e:65:f2:55:3f:0d:
62:b8:d5:ce:c7:c6:69:5d:b6:87:0c:d2:f7:25:1d:
74:49:12:d2:63:02:21:70:00:8e:80:48:ca:05:57:
bc:25:7d:6a:2a:83:21:b0:83:91:95:bd:f4:2e:ae:
e1:bd:e9:a0:4c:10:6d:69:6c:9b:41:a4:29:28:e9:
b1:55:11:f7:d3:96:fe:7e:c2:03:51:2a:12:65:ff:
09:95:7f:85:6f:82:64:20:3b:fa:fd:f7:9b:0f:20:
bc:85:9e:0e:87:5e:3f:a4:c3:95:b7:71:05:99:57:
18:06:73:5c:94:c5:1a:47:20:e6:1a:f3:ab:f2:16:
bb:36:d9:4e:bd:80:25:1e:10:a3:40:45:7c:40:bb:
26:7b:e2:4c:3b:93:87:ea:68:1f:bd:8d:a2:23:1d:
85:32:7f:ab:e2:89:6b:77:cd:a2:40:da:53:de:53:
07:bd:2c:50:49:f2:b8:f3:ea:45:78:75:f8:8e:d9:
21:5f:c1:dc:e0:76:63:b3:6d:02:6f:60:af:a3:56:
8a:73:8f:3a:4e:ca:89:d6:29:b2:90:5c:1d:85:6f:
5d:6d:7c:fe:36:df:1b:0c:34:39:bd:80:30:8a:bb:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:66:EC:47:8F:64:45:0D:89:C7:76:F5:C1:04:58:14:CE:F6:CA:E8
X509v3 Authority Key Identifier:
keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3e:cd:10:9e:c3:0f:90:d1:3b:63:18:1c:d2:11:0c:78:23:
8e:40:b2:6b:33:a8:e9:1f:95:1e:c2:49:e7:32:99:a3:81:21:
04:de:fc:ad:dc:a0:0e:75:02:6a:c1:f6:8a:70:4b:5c:26:8c:
7e:4d:85:7c:a9:41:f3:c2:5a:57:b3:13:1e:12:8c:43:6b:20:
f3:90:e9:fe:26:e4:ae:c2:94:0a:03:e1:76:32:d7:06:bb:29:
2a:d6:e7:37:92:e0:83:97:ac:71:20:52:92:d3:21:87:5c:31:
20:19:bd:a6:f5:bd:d3:72:59:7d:22:c3:47:da:b2:82:69:df:
89:52:cb:4c:3c:65:3c:23:06:db:c2:91:60:bf:fb:4f:d8:62:
7d:80:72:26:3c:83:a2:ab:c7:cf:af:4c:d9:a9:2b:12:d1:13:
33:f2:bd:30:ad:82:9a:d5:21:f6:50:b7:4f:57:77:12:7a:43:
8c:19:24:2c:cb:7f:4a:1c:38:e6:3d:9e:4e:08:88:61:b3:79:
3e:3b:d6:4f:50:d0:a8:05:0c:c4:d7:db:fb:c6:b2:2e:23:34:
26:2c:ce:9e:d0:88:24:90:1d:6f:22:06:84:8f:05:59:ff:9a:
ef:fd:98:87:a4:12:2e:06:7d:89:19:b0:d4:5f:e2:53:fc:13:
7a:58:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:28:30 2025 by rpki-client