
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
File: 6B8A4bRaGW0p_COM5zm6kUD2GUY.mft (raw, json)
Hash identifier: /g5i9hR9/hCp2EF1ufz9654hiFO6H4PBK0sjWdcwTN8=
Subject key identifier: B4:B7:54:79:CB:6B:71:AC:5E:E2:30:03:96:6C:1E:1F:DD:8C:83:83
Authority key identifier: E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
Certificate issuer: /CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Certificate serial: 01965CF197B540133570370E1DB84EB0F106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
Manifest number: AE
Signing time: Tue 22 Apr 2025 10:00:58 +0000
Manifest this update: Tue 22 Apr 2025 10:00:58 +0000
Manifest next update: Wed 23 Apr 2025 10:00:58 +0000
Files and hashes: 1: 6B8A4bRaGW0p_COM5zm6kUD2GUY.crl (hash: Koma9AvUO8UuE+Ta3Bg14dswU0Zsbql3C4FXl+V46l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:97:b5:40:13:35:70:37:0e:1d:b8:4e:b0:f1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81f00e1b45a196d29fc238ce739ba9140f61946
Validity
Not Before: Apr 22 10:00:58 2025 GMT
Not After : Apr 23 10:00:58 2025 GMT
Subject: CN=b4b75479cb6b71ac5ee23003966c1e1fdd8c8383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:a9:37:0f:45:6f:7d:3b:cc:9b:b5:06:5c:
ee:72:df:1c:13:a3:4c:18:78:a7:27:f6:45:ed:c6:
2c:e6:d3:1a:3f:37:a4:5b:c8:d1:e8:b4:a7:07:03:
f3:0f:eb:56:2f:1e:0e:9d:6f:fe:96:a7:70:9c:39:
31:91:31:c1:89:6f:7f:ac:e8:80:00:b8:43:dd:fa:
fa:e8:3b:3b:03:95:b4:42:f5:03:57:55:34:73:ab:
99:76:98:d8:23:14:cb:c4:94:ff:2c:09:94:5c:b1:
49:d0:93:79:ae:8d:03:a8:1e:92:7b:81:2a:9e:45:
1a:a0:6e:57:9a:21:af:99:db:50:8d:5a:b3:7a:bd:
1d:c0:37:c8:27:f2:05:67:b4:e1:6d:47:8b:bf:de:
9d:8a:14:e7:b0:26:16:e7:d4:7d:e9:75:a9:0b:30:
33:d4:86:5f:0f:54:e8:3d:d3:45:aa:44:d2:e1:dc:
8a:05:8b:85:e2:1d:e5:d8:96:c4:53:f4:c3:9a:76:
8a:39:41:1d:af:0f:97:c4:cb:24:2a:29:f4:65:3c:
ef:fc:49:d3:df:b4:51:33:9e:83:6f:95:ab:c7:48:
45:e4:f4:b8:d0:6b:63:71:45:92:48:2b:c7:7b:1a:
40:b6:ed:a7:ac:66:ee:87:54:c7:fb:fc:a4:70:d9:
01:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B7:54:79:CB:6B:71:AC:5E:E2:30:03:96:6C:1E:1F:DD:8C:83:83
X509v3 Authority Key Identifier:
keyid:E8:1F:00:E1:B4:5A:19:6D:29:FC:23:8C:E7:39:BA:91:40:F6:19:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B8A4bRaGW0p_COM5zm6kUD2GUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/35a1c8-e186-4ea8-b783-421d498b2092/1/6B8A4bRaGW0p_COM5zm6kUD2GUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c6:5f:e7:53:cd:89:d5:aa:5f:ac:0c:8f:ec:5f:ae:4e:a4:
68:69:6e:34:2d:03:85:2c:85:ef:09:18:d3:6e:ac:4b:41:e0:
8c:40:b5:04:8b:67:c0:15:b2:67:42:d2:8c:05:d4:f5:86:da:
2b:25:09:3d:55:89:36:12:8a:49:55:09:43:82:96:62:31:09:
dd:dc:b5:8b:cd:de:9f:89:55:e1:42:e3:7e:b2:66:e3:c3:06:
ec:ce:36:0a:98:40:25:ac:09:52:68:f4:18:1d:6e:e3:80:54:
c2:e5:4b:85:c1:4c:bf:25:b7:35:af:8b:8f:8b:5a:10:1e:f3:
4c:de:05:d1:bc:18:9a:e3:2c:e2:91:5e:b6:22:2e:e7:c0:89:
9a:11:d2:18:3a:36:4d:55:55:08:34:8b:62:d8:3f:4c:ac:f4:
ef:9c:2d:5d:98:41:9b:27:e3:ab:ec:12:b7:f3:0c:97:96:d0:
2f:ff:1e:64:04:da:96:d2:ae:1c:fe:26:3e:25:1f:f6:c7:e5:
a5:68:b3:bc:7a:15:f0:af:39:43:f1:52:c1:f0:e5:ba:bd:f2:
e1:ec:07:94:f5:5d:5b:37:07:9b:bb:d6:81:6f:b4:97:be:94:
df:0f:4c:7c:2a:4e:14:14:ca:08:ab:02:13:51:3c:9b:96:c5:
4e:44:ca:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:52:59 2025 by rpki-client