Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
File: 6hnxNhI41O6MRqpBsJwyLGLIh_0.mft (raw, json)
Hash identifier: NHC2+rsgBn5rJq8E9xbzpwoCEchoTV46PQR0XHrrAEE=
Subject key identifier: FA:C7:F6:07:3E:38:2D:99:66:69:96:7F:72:63:05:94:81:6D:D6:AE
Authority key identifier: EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD
Certificate issuer: /CN=ea19f1361238d4ee8c46aa41b09c322c62c887fd
Certificate serial: 0196591582918BE3AA85664509007A27716D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
Manifest number: 148D
Signing time: Mon 21 Apr 2025 16:01:43 +0000
Manifest this update: Mon 21 Apr 2025 16:01:43 +0000
Manifest next update: Tue 22 Apr 2025 16:01:43 +0000
Files and hashes: 1: 6hnxNhI41O6MRqpBsJwyLGLIh_0.crl (hash: QJ4vKIL+xht6h5buLWRlQB4rP8Ni3AsVpSzoMQ1/HcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:82:91:8b:e3:aa:85:66:45:09:00:7a:27:71:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea19f1361238d4ee8c46aa41b09c322c62c887fd
Validity
Not Before: Apr 21 16:01:43 2025 GMT
Not After : Apr 22 16:01:43 2025 GMT
Subject: CN=fac7f6073e382d996669967f72630594816dd6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:c8:b2:40:e6:4b:ac:d0:95:f9:04:11:c7:
f1:95:8d:ef:7f:8d:82:d6:16:46:02:4b:c7:df:0c:
98:76:35:57:9a:0d:7a:21:50:56:de:08:c1:cb:ae:
1f:2d:cd:71:8a:d7:be:23:ee:9b:e8:c9:0d:ec:a3:
d4:57:23:7d:96:b1:b9:bb:67:07:4b:a7:e4:c0:a8:
48:63:6b:55:da:17:19:05:93:78:98:38:58:30:80:
8f:31:95:33:03:4b:ce:96:eb:86:e8:14:0f:09:37:
20:f0:c8:f4:76:61:f3:86:ab:10:04:14:47:41:ac:
7e:cf:25:36:ac:29:50:da:51:65:94:f2:ca:2b:9e:
0c:85:0b:c3:8a:17:c5:c2:28:79:5c:9e:64:48:4f:
b4:62:c0:46:45:28:c5:5f:d0:c8:8f:3c:0c:d8:b5:
70:98:cd:e8:4f:70:1a:a0:dd:f1:c5:70:95:ff:f7:
11:af:44:54:01:7d:33:60:d0:31:f4:04:cc:c3:40:
11:a5:cc:16:9c:d3:40:a9:8a:26:28:59:43:56:60:
e2:a3:62:85:07:be:4a:0d:4e:81:a3:8a:43:dd:1c:
0d:fd:10:bf:50:7f:19:47:c8:57:7c:81:63:33:0d:
4a:31:96:d6:e1:bf:ff:fe:e7:92:df:c1:4a:09:60:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C7:F6:07:3E:38:2D:99:66:69:96:7F:72:63:05:94:81:6D:D6:AE
X509v3 Authority Key Identifier:
keyid:EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6a:72:dc:f9:68:e4:0e:ad:8f:a4:6b:a1:4d:dd:96:51:01:
3c:35:90:e5:f5:6a:ba:03:e8:20:f3:22:5f:9d:b6:4d:6e:ab:
14:b9:ee:5d:65:f2:e1:83:0c:5b:f8:a8:58:28:15:f0:dd:a2:
06:12:3a:85:c2:8e:de:1f:c5:9d:5d:e8:19:53:0c:57:83:ed:
7f:81:c1:59:2e:5d:16:15:2b:ae:59:be:2a:08:6b:f6:c8:60:
75:61:34:e2:83:80:cd:c3:90:cc:6b:e6:e8:9f:ce:e8:b0:8e:
c9:9f:28:8f:fb:36:01:57:dc:28:7c:1e:b6:d9:4b:30:6e:c8:
eb:64:ca:62:3b:f7:aa:e9:6d:ea:a8:5f:eb:f7:7a:1a:58:e7:
c8:64:f6:cb:69:bb:d0:8a:b2:fe:fe:90:26:ff:29:f2:28:de:
79:60:30:de:aa:ea:67:82:e2:90:c8:6d:0d:e4:36:af:cc:c9:
a6:df:32:fd:b9:68:33:3a:40:17:9f:74:bc:13:12:c9:7e:17:
a8:7e:be:32:46:88:56:4c:39:e6:8e:c4:13:e0:89:28:08:63:
34:0f:8a:03:31:17:17:4c:82:da:53:cf:68:a5:51:6c:5e:82:
db:ac:48:52:36:0b:39:bf:79:a8:cc:ed:6c:3b:74:3e:80:48:
fd:5e:b3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:12:26 2025 by rpki-client