Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/af847c-7e35-432f-a555-bb69a015919d/1/6bpYHRNjBB2iKqVlRi9iE58kNk8.mft
File: 6bpYHRNjBB2iKqVlRi9iE58kNk8.mft (raw, json)
Hash identifier: 8CjfWCEcRbv9J3hy4guJ5PY9n0/C2ER0REHpYSOIHpU=
Subject key identifier: 1A:C6:CB:6A:53:86:FF:2A:86:7F:58:68:33:E1:2E:B4:9F:90:9C:DF
Authority key identifier: E9:BA:58:1D:13:63:04:1D:A2:2A:A5:65:46:2F:62:13:9F:24:36:4F
Certificate issuer: /CN=e9ba581d1363041da22aa565462f62139f24364f
Certificate serial: 01958B16ACD81FBF59892AEF7C7539741FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bpYHRNjBB2iKqVlRi9iE58kNk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/af847c-7e35-432f-a555-bb69a015919d/1/6bpYHRNjBB2iKqVlRi9iE58kNk8.mft
Manifest number: 02E1
Signing time: Wed 12 Mar 2025 16:01:13 +0000
Manifest this update: Wed 12 Mar 2025 16:01:13 +0000
Manifest next update: Thu 13 Mar 2025 16:01:13 +0000
Files and hashes: 1: 6bpYHRNjBB2iKqVlRi9iE58kNk8.crl (hash: OJHIS4/i6NKQMkcRutJzmYQL+UlLD42QFoFsplDq+Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/af847c-7e35-432f-a555-bb69a015919d/1/6bpYHRNjBB2iKqVlRi9iE58kNk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/af847c-7e35-432f-a555-bb69a015919d/1/6bpYHRNjBB2iKqVlRi9iE58kNk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bpYHRNjBB2iKqVlRi9iE58kNk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:ac:d8:1f:bf:59:89:2a:ef:7c:75:39:74:1f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ba581d1363041da22aa565462f62139f24364f
Validity
Not Before: Mar 12 16:01:13 2025 GMT
Not After : Mar 13 16:01:13 2025 GMT
Subject: CN=1ac6cb6a5386ff2a867f586833e12eb49f909cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:b5:ee:1e:54:d5:de:1b:73:15:52:87:9e:
b8:82:15:87:14:a7:30:2e:da:b5:dc:bd:b4:eb:92:
fb:5d:a2:67:4a:5b:34:ab:37:5f:5b:9f:11:b2:9e:
0c:9c:65:49:db:c9:3a:bf:2c:87:18:18:fc:88:b2:
c8:d0:72:86:ba:b9:ff:ac:d2:d1:26:b4:76:69:fd:
a0:c9:33:a5:fe:39:2c:8a:59:cd:07:7c:0e:14:6d:
e5:78:8e:44:db:8b:4d:2d:bc:75:f2:92:b7:e3:df:
59:2e:ee:3e:e3:b0:e4:42:7c:66:95:5b:e0:c2:32:
09:dd:c7:83:c5:a0:59:16:c0:2e:b4:96:2f:85:a4:
09:95:94:30:ba:48:e6:e2:7d:e2:64:a9:38:d2:5a:
27:0c:c3:90:06:0d:05:42:2c:6d:81:5a:0a:21:4b:
d6:f8:c6:87:a6:b5:de:32:2c:7e:84:55:d3:6b:65:
42:a3:1e:5b:bb:df:2d:2e:a7:01:e7:72:06:dd:e7:
29:a5:56:d9:82:0c:ac:8b:e3:96:58:33:43:1b:fc:
dd:22:c7:de:0c:4a:23:3e:4f:90:c2:2f:84:a7:e9:
76:a3:fb:fb:d6:47:72:10:ab:52:2a:ad:18:6f:00:
6e:c6:cf:f8:64:92:ce:b2:e2:db:8f:58:c7:b4:e7:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C6:CB:6A:53:86:FF:2A:86:7F:58:68:33:E1:2E:B4:9F:90:9C:DF
X509v3 Authority Key Identifier:
keyid:E9:BA:58:1D:13:63:04:1D:A2:2A:A5:65:46:2F:62:13:9F:24:36:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bpYHRNjBB2iKqVlRi9iE58kNk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/af847c-7e35-432f-a555-bb69a015919d/1/6bpYHRNjBB2iKqVlRi9iE58kNk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/af847c-7e35-432f-a555-bb69a015919d/1/6bpYHRNjBB2iKqVlRi9iE58kNk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9a:4b:06:61:80:95:7c:24:17:8c:77:22:1a:43:c5:23:69:
8d:ac:b9:19:c9:da:92:79:6a:dc:c9:02:8c:46:d1:17:8a:48:
a1:74:e7:cd:f9:96:38:e4:8a:8d:bb:27:53:a2:32:c8:08:8e:
dc:89:8a:a0:f2:0c:a1:f0:c0:66:27:30:9e:7d:21:14:65:95:
c9:f0:36:a4:40:0d:de:15:d5:55:6b:8a:c6:bf:a7:8b:64:26:
c4:1a:e2:45:c7:ad:7b:5c:6b:2f:23:d2:b7:53:d5:bb:2c:6c:
ae:e8:a9:76:00:09:2f:19:39:10:1d:d6:22:f2:e9:d2:bc:5a:
8c:56:65:08:38:4c:c4:81:46:c6:f6:4e:e5:63:47:a8:45:8f:
80:de:e8:a2:0e:49:1f:63:38:94:9f:04:8f:4d:5a:3c:05:7f:
1f:78:f1:90:dc:95:2c:b5:1c:9d:2a:68:7f:3c:d4:8f:ba:1e:
f3:fa:f5:0c:1b:eb:7e:b4:b1:15:9c:71:f2:f5:8d:59:f6:89:
cd:e4:81:98:71:d8:62:b6:12:3d:ca:81:3a:56:cc:45:f8:23:
c4:1d:0a:2f:a8:b6:e4:e6:b6:97:ee:1b:4e:ee:34:22:f7:ed:
32:37:8a:2f:77:e2:ce:62:1c:5a:0b:4f:2a:78:5a:6b:02:58:
2e:27:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:44 2025 by rpki-client