Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
File: azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json)
Hash identifier: tjCOnXmnUb8eVW4u5rbTNkRPBDZ2pFs1kkNF54ZaJFg=
Subject key identifier: DC:98:13:BF:93:79:E2:6C:FF:D6:49:53:01:2F:DE:45:CE:45:5B:8C
Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
Certificate issuer: /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Certificate serial: 019655A58AEDD2BB00DE17B1580750ED57D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 00:00:34 +0000
Manifest this update: Mon 21 Apr 2025 00:00:34 +0000
Manifest next update: Tue 22 Apr 2025 00:00:34 +0000
Files and hashes: 1: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: rXQHgUWbpaKP/JODjKs/w/LsL80MGuCZb50jaCQYcMY=)
2: yFAScqy1SZnNR2xfePl0FenNN0g.roa (hash: vURxboeBcUQDk9P166WC/cJAnLRENen5C6McIffi+y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:8a:ed:d2:bb:00:de:17:b1:58:07:50:ed:57:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Validity
Not Before: Apr 21 00:00:34 2025 GMT
Not After : Apr 22 00:00:34 2025 GMT
Subject: CN=dc9813bf9379e26cffd64953012fde45ce455b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:15:bd:60:d8:f1:21:74:7e:43:02:b7:7f:
70:75:48:c6:a7:26:01:33:47:77:01:d8:f7:f0:51:
2a:b8:7f:6d:c5:ea:41:d4:91:c2:eb:0a:08:3e:17:
3c:15:b2:83:ae:53:e8:b3:47:14:24:c5:46:45:16:
39:e6:4c:e3:d2:b4:5b:68:24:61:b6:a0:35:b7:41:
34:c7:1b:10:b6:b9:12:97:57:09:08:fe:c9:18:34:
89:76:5a:f0:01:56:6f:45:80:aa:b5:50:34:cf:f4:
ad:80:89:93:fc:af:30:e3:2c:43:9f:90:23:22:f5:
fd:0c:23:13:a8:25:ff:19:fc:4d:f3:56:c0:ab:f2:
1c:bb:31:ef:ba:0d:61:b0:ee:9a:51:82:f3:86:9c:
53:a5:5a:e7:21:5b:c5:a8:a9:c0:ca:ca:55:5d:d0:
38:3d:5b:85:86:c6:d2:4f:a5:87:8e:6a:8d:c4:f0:
82:31:4b:07:64:0e:ad:04:e3:87:14:7d:8c:58:28:
c1:5e:98:5b:10:5f:1f:08:f0:16:4c:4e:e8:c4:e4:
72:69:dc:d3:d0:73:d3:8f:1b:ac:bf:03:cc:50:5d:
e0:bf:8a:e1:7d:e9:ee:6a:e7:18:d6:f4:2e:db:80:
71:3f:e9:d3:01:c9:a0:79:fd:03:60:da:2f:fd:ac:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:98:13:BF:93:79:E2:6C:FF:D6:49:53:01:2F:DE:45:CE:45:5B:8C
X509v3 Authority Key Identifier:
keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:55:e6:ac:49:ee:fc:d4:d3:a2:64:4e:33:8e:b0:3c:06:7e:
7b:c9:f5:bd:66:fc:21:1e:20:21:83:e6:04:db:ba:38:71:80:
70:4e:95:bb:eb:9d:1e:cc:24:ef:64:94:a0:57:40:69:c8:2c:
8d:20:b3:56:48:43:d3:61:1d:da:45:d5:45:79:1b:05:89:19:
29:a0:10:ce:a4:c9:8b:54:1a:39:d5:6e:0b:20:12:f1:7c:da:
bf:7c:78:7b:c3:67:fd:b1:0e:6d:a2:81:38:a5:e4:f4:9e:cd:
87:38:13:7c:d8:e5:50:fa:8b:1c:78:fa:bd:42:c1:ee:28:fc:
f3:cf:10:37:30:55:be:e2:a4:9a:d7:59:27:93:6e:fa:3b:36:
34:f2:a9:9d:38:8e:bf:9b:5e:a9:57:b5:f8:ea:f7:3a:aa:e3:
5e:bb:86:25:fc:24:dd:e6:71:76:91:fd:1d:ee:f5:e7:66:ee:
22:ae:ed:40:ff:63:b1:9f:47:57:23:2f:c0:4c:b0:d6:b1:7f:
33:4e:4d:d8:ce:88:31:f9:bb:2e:26:79:cd:e4:aa:c7:58:d6:
e2:05:a5:3b:6c:d6:9f:42:d0:38:0b:2a:01:fa:89:13:7e:6e:
79:61:a4:31:8d:9e:ab:f2:2e:2a:09:a9:4d:59:73:86:ae:2a:
de:ec:e5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:27 2025 by rpki-client