Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
File: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft (raw, json)
Hash identifier: ytALn0V7sjsocB3Zo17dIFhWZmpOo6uxU4PM2UxgNsg=
Subject key identifier: A5:E3:D8:CD:30:3A:D9:E0:72:E6:11:23:B7:48:CC:77:E0:7C:D3:93
Authority key identifier: E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
Certificate issuer: /CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Certificate serial: 01974B56BC049D70533398C7B77396E7BAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
Manifest number: 063C
Signing time: Sat 07 Jun 2025 17:01:04 +0000
Manifest this update: Sat 07 Jun 2025 17:01:04 +0000
Manifest next update: Sun 08 Jun 2025 17:01:04 +0000
Files and hashes: 1: 6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl (hash: Og2fVDSjRdPxVm5X6exocqhYD6UATWArXU5INKsn7Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:bc:04:9d:70:53:33:98:c7:b7:73:96:e7:ba:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e972a6c2ebea46413072f90dd526d78f1102f4f2
Validity
Not Before: Jun 7 17:01:04 2025 GMT
Not After : Jun 8 17:01:04 2025 GMT
Subject: CN=a5e3d8cd303ad9e072e61123b748cc77e07cd393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:65:14:ab:12:e3:57:78:42:e1:ca:c5:c2:
cd:67:5f:fc:80:54:d1:a3:f1:c3:97:b7:ee:31:75:
f8:de:a6:c7:d0:a7:97:c2:ab:04:1c:ba:e0:18:0c:
30:a3:20:3b:4d:b6:e8:ee:1d:d1:0c:91:b8:c9:57:
a9:30:42:3d:31:bb:ba:61:be:98:9e:2e:76:6f:ca:
81:b3:4d:03:b1:77:fe:67:99:3a:49:9b:da:c7:cc:
bf:88:55:1d:9c:bb:ae:98:83:7f:9f:b9:43:26:1a:
5c:c8:9b:d5:4a:dd:59:f2:2e:63:73:67:ba:3b:9b:
d3:b8:0b:a7:45:0d:b5:1c:a7:8c:1d:a9:83:52:1b:
d6:86:74:1b:e5:ea:cf:04:18:72:43:04:d4:40:d0:
36:04:c5:63:34:8f:b5:22:3b:50:8e:48:d2:30:91:
be:59:1e:0b:32:cd:8b:6d:67:46:aa:7d:6e:d8:9b:
a4:f6:f0:da:20:71:cf:ce:6a:75:58:a7:00:fb:26:
37:f6:29:b9:ce:1f:aa:e2:89:30:ee:cd:ca:a1:85:
38:d4:55:06:4e:48:f0:61:36:26:eb:42:ed:94:38:
83:bb:b1:b1:4b:51:d5:03:ee:c6:46:d0:47:41:d2:
8c:ba:19:54:b1:09:b7:10:f4:24:a1:3e:3c:b8:7c:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E3:D8:CD:30:3A:D9:E0:72:E6:11:23:B7:48:CC:77:E0:7C:D3:93
X509v3 Authority Key Identifier:
keyid:E9:72:A6:C2:EB:EA:46:41:30:72:F9:0D:D5:26:D7:8F:11:02:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XKmwuvqRkEwcvkN1SbXjxEC9PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b7628d-426c-4889-a00c-4f974c977945/1/6XKmwuvqRkEwcvkN1SbXjxEC9PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5e:c6:62:e5:bc:23:c5:12:9c:9e:38:27:d7:f1:4a:55:b7:
17:ee:ab:4f:37:90:cc:50:c0:c6:5f:29:ff:d8:89:b4:ff:3c:
48:ec:b7:51:95:0a:cf:1e:19:6e:4e:be:43:02:d6:bd:1d:ff:
c3:99:b7:f9:0b:77:66:9e:3d:a1:d5:48:da:11:4e:28:c0:f9:
7f:03:6b:ea:e1:32:a2:fc:14:a6:af:76:f1:9d:01:1e:cf:60:
7f:4a:58:d8:3d:4f:6b:75:d9:0a:c1:a3:c7:76:3f:36:26:93:
c3:30:73:88:70:19:ef:f1:64:99:10:f3:4c:bb:23:4d:2f:65:
f7:d5:0c:99:33:f5:32:8c:3a:f6:4a:5e:8c:af:84:c8:ae:15:
ad:3d:db:88:15:fc:e4:76:b8:44:8f:ef:4e:c7:50:57:0f:2b:
31:67:42:76:95:4b:da:d7:3b:09:ca:0b:93:ce:bf:ce:60:a5:
9a:49:b8:28:16:b4:c6:5c:13:f0:1e:12:6d:8c:b2:bb:31:f7:
23:da:ef:ed:d3:c0:ff:51:4d:36:38:ab:11:c6:27:72:7f:ce:
4c:64:b8:96:d6:ac:91:f5:b5:80:81:ae:9b:6f:dd:31:5c:7f:
77:2d:69:98:15:dd:f0:f8:a7:59:dc:cf:ef:b4:53:77:37:38:
34:ba:5b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:47 2025 by rpki-client