Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
File: 6KLSPD104jfeTjH3EuQUtdTvXIY.mft (raw, json)
Hash identifier: BUyDIU686KgY8UILq+Dbnfd4w4M6ipVfwJwjw5AuDsg=
Subject key identifier: 55:2B:08:26:94:A2:47:B3:95:5C:E0:9A:9A:BE:64:3C:BA:E4:FE:06
Authority key identifier: E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
Certificate issuer: /CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Certificate serial: 0196586FB0DBD9A5DB1337679A9F0EAE1053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
Manifest number: 1209
Signing time: Mon 21 Apr 2025 13:00:36 +0000
Manifest this update: Mon 21 Apr 2025 13:00:36 +0000
Manifest next update: Tue 22 Apr 2025 13:00:36 +0000
Files and hashes: 1: 6KLSPD104jfeTjH3EuQUtdTvXIY.crl (hash: /jhQXJ+Hgi9Hu+rcBP5g8bKao5ibOUEj41B3thDauZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:b0:db:d9:a5:db:13:37:67:9a:9f:0e:ae:10:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a2d23c3d74e237de4e31f712e414b5d4ef5c86
Validity
Not Before: Apr 21 13:00:36 2025 GMT
Not After : Apr 22 13:00:36 2025 GMT
Subject: CN=552b082694a247b3955ce09a9abe643cbae4fe06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f1:f2:2a:ec:b5:5f:5e:fa:de:34:ea:7d:17:
1b:c9:fa:ca:ee:4f:c9:cf:02:11:98:7d:fd:43:4f:
95:f0:89:86:fc:f5:61:63:47:74:a2:22:ac:7a:85:
48:bc:51:fd:53:77:7a:34:2e:c5:10:ae:af:41:85:
a6:75:f7:5b:78:57:c7:a4:c9:1e:47:ce:ed:3d:15:
a6:de:9e:9b:5d:73:a5:6b:06:9f:43:5a:47:6d:e4:
95:31:72:0b:71:0b:23:c4:3d:9c:74:86:89:a5:a8:
18:6c:fb:7a:44:6f:96:5e:eb:3f:e9:48:60:ef:2c:
6e:73:2e:b3:a8:d5:b2:2a:82:83:fd:aa:60:d8:8d:
8b:41:7f:c1:df:ac:8a:69:0c:75:31:66:a6:d8:2c:
f0:d2:72:7f:2c:96:48:fd:b4:dd:87:a7:5d:7f:de:
8a:e9:dd:f5:ae:44:6c:6f:38:bb:08:94:6a:43:f8:
c4:76:7e:b0:23:3c:39:03:7a:eb:95:3c:94:27:da:
c4:ed:22:fa:5e:ec:b9:66:bc:49:2b:64:70:56:02:
d1:99:44:9d:9b:3c:75:92:99:2b:17:18:6f:d0:a6:
7e:be:c7:f7:ae:6d:27:35:14:8b:b8:af:2e:d5:d3:
48:0e:1b:66:68:f1:d5:7b:ca:61:a6:42:4c:27:06:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2B:08:26:94:A2:47:B3:95:5C:E0:9A:9A:BE:64:3C:BA:E4:FE:06
X509v3 Authority Key Identifier:
keyid:E8:A2:D2:3C:3D:74:E2:37:DE:4E:31:F7:12:E4:14:B5:D4:EF:5C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KLSPD104jfeTjH3EuQUtdTvXIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/106632-ca5a-429d-9ad4-81cc90826e8e/1/6KLSPD104jfeTjH3EuQUtdTvXIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:58:52:ef:f0:7b:a9:0b:3c:15:2c:d1:81:35:20:c7:09:21:
a2:56:ac:79:3f:ba:8e:d9:93:6c:4c:38:a7:b9:7b:36:f1:31:
35:a1:9e:36:91:69:da:72:69:18:50:12:c7:c6:ff:c9:00:b4:
0a:19:7e:42:db:eb:00:1c:3e:9f:56:fa:fb:88:42:d0:3a:3d:
cd:9d:3e:2a:17:b7:59:0c:bb:61:6f:c5:9d:c8:bc:ae:ff:90:
24:d9:f7:dd:ae:49:82:3b:3a:a5:5d:f8:dc:cd:05:c7:b7:dd:
06:6d:ac:27:e4:61:5c:2d:6d:72:cb:be:cf:93:21:47:e9:da:
31:d5:47:e7:e3:4d:7c:3d:88:ac:26:55:ba:5d:be:03:88:76:
07:4e:9b:00:e4:6f:9c:26:51:1c:e5:73:bd:92:d4:6e:69:85:
26:05:5a:93:a4:18:c1:c9:5a:17:14:d3:ed:f4:4f:3e:08:0c:
58:ef:63:cf:7b:3e:57:99:4c:ad:c2:df:64:bd:c2:1a:54:9a:
2e:01:65:46:85:af:cb:ba:ee:ed:77:08:1d:e9:96:9f:fa:57:
1d:db:d6:db:68:fd:84:12:c9:37:17:09:68:66:98:e9:73:c6:
8a:54:45:45:cd:a9:08:0c:52:c2:3e:d1:7a:08:e0:68:9b:8f:
04:a5:44:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:09:07 2025 by rpki-client