Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
File: 6laHr9YhtSqXTNOvC-iiWmcRhtI.mft (raw, json)
Hash identifier: SwVS3QwgUEjLf3285EghxBvwjI1kGe3jSJmVfZ8YEi4=
Subject key identifier: 47:E3:CD:40:2F:BB:9D:AA:A9:DC:BB:E3:B2:F3:0B:A9:AA:D4:2D:F2
Authority key identifier: EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
Certificate issuer: /CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Certificate serial: 0197488D3228878313A6AF4AD92289616A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
Manifest number: 05A3
Signing time: Sat 07 Jun 2025 04:01:42 +0000
Manifest this update: Sat 07 Jun 2025 04:01:42 +0000
Manifest next update: Sun 08 Jun 2025 04:01:42 +0000
Files and hashes: 1: 6laHr9YhtSqXTNOvC-iiWmcRhtI.crl (hash: qvviDViLQdM11bE0fyV95Sc+4vgoor/AUJ1TErj5Kr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:32:28:87:83:13:a6:af:4a:d9:22:89:61:6a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5687afd621b52a974cd3af0be8a25a671186d2
Validity
Not Before: Jun 7 04:01:42 2025 GMT
Not After : Jun 8 04:01:42 2025 GMT
Subject: CN=47e3cd402fbb9daaa9dcbbe3b2f30ba9aad42df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:9a:bf:2c:22:27:7c:0d:e5:20:51:c7:b2:
55:76:81:26:30:b8:5c:0d:4c:6a:06:65:8a:d2:c8:
54:04:17:b6:d6:46:fe:ee:3f:c1:b1:99:1e:f3:a7:
ed:22:ee:5b:71:ee:c3:c1:d0:f6:ab:39:2e:67:74:
ea:84:80:59:cb:b2:87:4f:e5:6d:72:fc:5f:d9:3e:
6c:e1:02:28:bd:ab:c8:e1:fe:cd:64:ff:f7:bd:10:
cb:47:eb:04:f4:f3:0e:a1:d6:61:14:43:27:54:0c:
d6:5a:8f:d6:d6:6d:03:c0:a2:3b:10:11:c9:04:63:
70:56:54:d8:64:3c:90:d1:80:a6:47:80:26:02:d0:
2f:d8:f1:b0:ec:db:5e:d9:5a:89:1c:d9:73:ed:94:
12:cb:5a:8f:dd:ad:49:77:9f:80:ce:a6:55:e6:12:
85:42:3c:c5:a4:2c:4a:68:09:2c:e9:7a:ee:22:c8:
95:6b:af:07:c4:30:32:78:c8:c6:1e:4b:31:9b:21:
de:1d:e8:49:02:0b:a1:6d:b4:ca:ec:70:6f:cb:b0:
fc:84:f8:7b:30:7f:b5:99:2d:62:78:9c:48:1d:7a:
81:54:0c:80:5d:12:9b:4f:21:a5:08:29:0f:98:c6:
00:9d:cd:0b:05:a6:70:ef:55:4c:a0:f5:b3:be:fb:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E3:CD:40:2F:BB:9D:AA:A9:DC:BB:E3:B2:F3:0B:A9:AA:D4:2D:F2
X509v3 Authority Key Identifier:
keyid:EA:56:87:AF:D6:21:B5:2A:97:4C:D3:AF:0B:E8:A2:5A:67:11:86:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6laHr9YhtSqXTNOvC-iiWmcRhtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6b2da2-3596-47ff-9ba5-b23856a1a803/1/6laHr9YhtSqXTNOvC-iiWmcRhtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6a:1b:04:a2:b6:ae:a6:87:79:0f:ef:af:4e:d0:a9:f1:0e:
52:87:e9:0c:4b:be:8b:83:b7:61:d2:e3:9b:de:b2:98:b4:b5:
fa:11:7e:72:85:3b:38:16:7d:31:8b:d1:83:ef:16:e3:58:68:
99:71:3e:c9:eb:b3:d0:05:e2:bc:3a:b1:37:ab:9d:d7:03:d2:
65:46:4c:41:fc:d1:38:df:6d:2a:af:e8:71:ce:78:e1:f2:a9:
64:f1:63:59:ee:8f:4f:9b:12:c7:3a:7a:e6:75:7a:96:46:48:
71:d9:6b:1b:bc:82:47:40:2d:94:1c:7e:68:38:e5:61:21:b0:
91:cd:a1:1c:c4:98:41:09:b8:19:96:9b:08:67:ca:2d:60:1d:
9a:24:47:00:5d:a0:e1:d4:33:85:1a:f6:01:6d:47:2b:c4:70:
55:6f:cd:f3:80:c1:6e:cd:d1:c5:c4:27:f8:aa:41:8c:d4:c8:
9e:8f:6b:d5:f4:68:3e:db:2e:d5:83:11:03:9b:c1:fa:2a:44:
a3:f0:97:08:65:4b:57:14:25:67:7d:6a:f7:af:32:d4:a6:ce:
30:ad:80:74:cd:d0:d2:df:7d:35:10:62:03:e3:cf:09:4c:c7:
d7:14:5c:db:f4:53:89:cf:98:89:6b:af:dd:ee:e3:6c:fc:f8:
df:1b:02:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:31 2025 by rpki-client