Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
File: a3tUza1xENOJd_mlkmCzkxLkSH0.mft (raw, json)
Hash identifier: L78wfsNM5hbOVzSgjFNgL8mKFn8Tv7YTZ3fPes9R5C0=
Subject key identifier: AA:9B:E3:60:DC:C1:6F:0D:B5:48:77:1B:D1:F4:14:4A:93:60:41:A5
Authority key identifier: 6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
Certificate issuer: /CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Certificate serial: 019590ABA8F093F96C29049133BBAB208460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
Manifest number: 0F73
Signing time: Thu 13 Mar 2025 18:02:03 +0000
Manifest this update: Thu 13 Mar 2025 18:02:03 +0000
Manifest next update: Fri 14 Mar 2025 18:02:03 +0000
Files and hashes: 1: a3tUza1xENOJd_mlkmCzkxLkSH0.crl (hash: vcKfUCPromppU7fjv0ui0HI5NbkdQ+7/TuTriTg1keA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:ab:a8:f0:93:f9:6c:29:04:91:33:bb:ab:20:84:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Validity
Not Before: Mar 13 18:02:03 2025 GMT
Not After : Mar 14 18:02:03 2025 GMT
Subject: CN=aa9be360dcc16f0db548771bd1f4144a936041a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:9a:ed:f7:7f:a6:4d:03:8f:e1:a6:52:93:
db:b9:ed:95:6c:83:46:1a:27:46:0d:7f:04:0c:dd:
f9:ce:74:ec:5c:80:47:2e:c3:3b:b9:57:d9:7d:72:
76:a7:f5:93:bf:95:de:45:05:16:fe:78:a7:fc:4f:
ee:bb:12:98:7c:b2:9c:93:cf:2f:3e:b8:12:89:ad:
d9:e1:58:5f:eb:cf:19:7f:e1:52:e9:b7:c7:df:b6:
af:21:63:b0:29:1f:3a:a5:2c:11:44:cb:44:15:ac:
2e:8f:4f:4c:88:d0:62:69:f1:35:59:f1:ec:0e:fe:
23:95:72:dd:9a:dd:ab:e4:3f:a0:9f:2a:4a:40:ce:
24:bf:09:9e:dd:56:49:ed:5a:54:5f:ab:5f:b7:3f:
b3:9d:bb:07:0e:5b:5a:90:99:e9:84:4a:b3:bb:9d:
45:74:22:83:5f:b2:14:74:d2:ee:1d:38:6c:99:c2:
e4:54:22:a5:df:37:0a:be:22:ce:cf:1e:2f:64:f8:
5c:0a:74:97:0f:31:a3:d4:33:23:e4:01:ab:26:71:
c6:d5:4d:3c:16:a2:05:bb:53:33:8d:f4:7b:3e:1d:
8e:a1:78:6a:c9:62:41:44:8c:4e:01:8b:f0:d7:4b:
3d:5e:43:a6:76:34:e3:aa:1c:cd:bc:6e:21:49:5f:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9B:E3:60:DC:C1:6F:0D:B5:48:77:1B:D1:F4:14:4A:93:60:41:A5
X509v3 Authority Key Identifier:
keyid:6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5b:5a:65:22:aa:83:25:41:34:3f:15:40:8b:11:b4:d1:60:
11:35:88:6e:89:01:ac:45:4e:37:cb:23:94:53:32:f6:11:e8:
d2:fd:4e:dd:23:ad:60:17:8d:61:b0:72:bd:41:cf:7c:b8:fc:
5a:4d:d7:db:b5:1a:21:ad:12:a8:3c:37:73:bc:e0:04:eb:92:
26:52:f1:dc:1a:10:95:40:26:77:59:00:58:4e:0e:b6:47:83:
d6:a8:27:80:11:96:ba:1d:c0:38:40:37:b1:96:de:80:82:22:
70:87:c1:85:8b:5a:48:5f:6f:6b:fa:cd:c3:02:bb:4c:f9:d4:
6d:7e:9a:b7:d7:db:2a:da:51:28:24:6a:86:b8:f8:42:86:a3:
19:8f:70:78:d2:7c:44:b2:af:e1:f5:d7:f6:38:d9:6f:af:61:
4b:02:20:00:bd:f8:fa:33:37:25:42:ef:f1:df:8e:c6:7c:fb:
20:5a:67:77:ae:b8:c3:64:26:d3:ea:c7:93:4e:86:c0:55:ab:
c0:72:30:f8:ba:f0:45:95:e4:2b:e2:64:d0:4b:7a:29:f3:4f:
99:6d:57:54:5f:48:a1:c2:d5:6e:e8:0e:39:2e:b3:ad:ca:80:
45:7a:5f:ff:cf:64:1b:e6:68:8f:00:e7:d7:ca:ce:b7:bf:d7:
8f:62:51:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:18 2025 by rpki-client