Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json)
Hash identifier: /tHtZytyT+LIXA80zF/YMUB/WU48kJRsj8jwmbfAcRY=
Subject key identifier: 3F:7E:62:24:17:2D:58:0A:8B:71:85:CC:1D:B1:44:B9:95:6C:8A:87
Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Certificate serial: 0197575A3FDF7B64AD1E9BD0E591C3B1156B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
Manifest number: 01E0
Signing time: Tue 10 Jun 2025 01:00:21 +0000
Manifest this update: Tue 10 Jun 2025 01:00:21 +0000
Manifest next update: Wed 11 Jun 2025 01:00:21 +0000
Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: 0MxAt3ftm1sauNp0I4egpYkfdlxZizqBXH8U2Lx7HSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:5a:3f:df:7b:64:ad:1e:9b:d0:e5:91:c3:b1:15:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Validity
Not Before: Jun 10 01:00:21 2025 GMT
Not After : Jun 11 01:00:21 2025 GMT
Subject: CN=3f7e6224172d580a8b7185cc1db144b9956c8a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:6f:fa:fd:1a:23:f4:f1:7f:9d:93:6e:18:
34:39:cf:f5:81:91:b9:d2:a7:bc:51:f3:85:f3:fd:
9c:16:d8:8b:7a:0d:a7:05:c1:31:85:4a:f6:82:5d:
e3:91:d3:3f:95:f5:37:37:67:ae:e0:85:f3:42:63:
27:11:07:03:f9:5f:6f:dc:be:39:19:46:fb:de:46:
71:07:95:9d:ee:eb:10:4b:55:0f:94:6d:ea:12:f7:
18:74:8a:56:bb:e7:06:ca:02:0c:22:2b:b0:f3:82:
89:42:81:a8:00:b4:c8:ae:38:54:2d:d3:30:3f:e5:
3a:7f:5b:6b:85:5a:8d:20:b1:fa:70:95:6f:bd:f7:
b9:5d:ef:f5:b0:0f:9a:70:1d:6d:a9:38:f9:c5:cb:
9f:5e:39:e9:15:50:58:82:af:20:90:53:a3:9e:20:
f7:cd:80:87:8e:de:72:95:8a:a7:8f:2b:5d:d9:72:
8c:da:16:af:f7:cc:a8:2a:a5:c9:79:e8:7f:ae:d8:
85:2f:4b:5c:98:57:4b:52:da:02:7d:ce:b9:ba:92:
7a:b8:df:77:ca:6f:d7:65:d8:4b:7f:dd:53:0e:94:
b7:41:2f:67:7b:7e:5c:73:7c:32:0f:c9:fe:2d:44:
f9:13:d2:f8:ae:ef:14:13:03:0f:05:e1:ea:77:8d:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7E:62:24:17:2D:58:0A:8B:71:85:CC:1D:B1:44:B9:95:6C:8A:87
X509v3 Authority Key Identifier:
keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f5:22:06:7a:10:6d:fb:cb:8e:c3:62:4c:c4:5e:7c:4a:c0:
06:af:1b:1f:ca:41:e2:a5:b5:db:84:2b:e2:19:fe:df:bb:06:
b9:c2:f0:8d:fd:29:e3:0f:35:31:67:48:38:e7:cc:29:15:67:
09:ca:b1:d6:73:dd:87:d4:64:b9:32:8c:ed:15:80:20:dd:fe:
8e:8f:d1:9e:b5:87:96:9f:1a:dd:b3:1a:38:0f:74:5c:38:3f:
7c:ee:b4:c3:46:c9:a4:49:21:5b:37:89:c1:b8:89:3e:ea:37:
6d:c8:f2:96:28:a6:0a:94:c1:16:03:37:5f:c8:19:04:3e:d8:
ee:ab:bd:ba:a0:6f:27:52:37:15:66:87:d8:a2:27:ed:4c:a8:
73:52:b8:b9:cd:46:10:4e:8e:16:e7:de:fb:5a:b0:84:53:b0:
82:96:a2:8c:f4:b0:c0:b2:b3:6b:b6:07:52:6a:cd:6c:28:38:
2a:38:71:62:cd:0a:11:30:d1:44:4d:16:e0:af:54:f2:1c:64:
72:29:fb:09:da:d5:87:10:31:16:3e:1b:b2:74:fa:48:94:08:
6a:a4:a4:3c:ca:87:d1:10:ea:c5:3d:71:a8:ab:d8:73:e2:31:
3f:bd:60:90:16:39:d7:82:72:81:a5:98:2c:66:50:d7:22:20:
02:b4:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:50:16 2025 by rpki-client