Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json)
Hash identifier: Fe9H4m2B1yXf6Gr5BUKoeLUYrUlyc5zTTpFTFgB3QAk=
Subject key identifier: 53:49:6A:6F:79:60:3C:25:FF:34:85:68:40:F2:A8:AE:E9:D9:33:79
Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Certificate serial: 01976E86CE3F656ED91E7E67CE3062E3A69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
Manifest number: 01EC
Signing time: Sat 14 Jun 2025 13:00:17 +0000
Manifest this update: Sat 14 Jun 2025 13:00:17 +0000
Manifest next update: Sun 15 Jun 2025 13:00:17 +0000
Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: kwCI4YTdQiXCfbpTvFU71q0TAfrIqVR79sBLfPLQUjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:86:ce:3f:65:6e:d9:1e:7e:67:ce:30:62:e3:a6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Validity
Not Before: Jun 14 13:00:17 2025 GMT
Not After : Jun 15 13:00:17 2025 GMT
Subject: CN=53496a6f79603c25ff34856840f2a8aee9d93379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:84:b8:3b:ad:eb:ff:b4:2d:94:f7:99:93:
9f:ad:50:2d:a3:80:0a:7c:2d:32:27:46:3c:77:60:
88:03:5f:45:ad:5c:75:37:a7:ef:83:c0:88:18:bf:
cd:61:cb:3d:19:eb:6e:08:f4:60:01:d4:eb:e3:0e:
50:96:4c:07:21:56:2a:6a:08:cc:01:0f:cf:80:69:
45:4b:38:b3:e0:1e:36:43:8e:8c:84:65:19:d6:fa:
a7:0c:7b:79:ca:df:22:6c:59:47:b3:19:87:0e:c9:
38:06:93:23:64:07:8a:52:6b:e7:c0:0d:48:d3:49:
d4:0f:ca:ee:fa:3a:7d:89:28:d3:58:9c:29:46:1e:
6a:c6:c4:87:1e:33:67:65:2c:e8:b8:01:db:70:4e:
ac:db:64:9a:30:14:86:a6:41:fc:e6:88:29:d0:d3:
ef:e5:f5:d4:39:5f:5a:70:02:bd:d6:21:aa:a4:01:
c5:07:bb:1a:a6:62:7e:b9:2c:76:ee:11:bc:c0:69:
d3:e9:aa:b8:f5:3b:d2:dc:e0:d7:1e:d5:0d:20:c4:
b3:b1:f1:af:ec:0f:43:04:24:b5:81:89:72:e1:bc:
30:ae:7b:65:5a:a3:6e:e6:c8:eb:a4:2f:dc:b6:29:
f7:df:dc:5b:d9:fd:7c:70:82:30:91:18:af:7e:7f:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:49:6A:6F:79:60:3C:25:FF:34:85:68:40:F2:A8:AE:E9:D9:33:79
X509v3 Authority Key Identifier:
keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e4:bc:2f:87:b5:2d:b6:78:06:df:b3:95:7a:56:3f:f1:7c:
c6:40:94:dc:fa:81:0f:24:0d:56:51:0a:c1:84:5f:03:ac:56:
73:c5:8b:3e:b6:89:39:ea:3f:1f:49:56:16:49:3e:a8:f8:c8:
be:ba:12:ab:63:3a:86:13:53:95:79:e4:d9:21:3a:84:a3:00:
cf:18:72:6f:aa:ab:62:31:ad:21:f8:d8:47:d7:ca:05:9b:ad:
99:d5:1f:2e:31:88:5a:8f:96:09:f1:08:43:3a:26:d9:6d:95:
99:1e:32:6e:89:35:04:dc:aa:de:7b:0d:a6:91:ac:ad:bf:3e:
0e:30:9f:31:fa:dc:9e:f9:6f:b0:1c:74:4a:c0:c8:49:6b:88:
2d:88:ce:1b:1a:03:2f:c2:e0:22:48:34:1d:1a:d1:82:0d:bf:
85:81:1d:8e:e6:01:84:53:d6:49:e1:11:a9:b3:a1:15:0b:4d:
a1:d9:7d:4c:a8:0a:5b:2d:58:0b:0b:71:f3:ce:38:c9:50:ba:
a5:0e:c3:78:c7:55:d6:e6:95:e7:0f:73:a8:02:5e:32:a5:ad:
66:3f:e0:96:6e:df:9e:cf:21:07:27:04:00:b6:85:a2:cc:9c:
47:4c:5c:b5:c6:0e:a1:b1:93:d9:56:bd:e4:39:ef:9c:fd:66:
31:dc:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:19:01 2025 by rpki-client