Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
File: laR6hTtVKHanG3Vw0AFOBktDgPs.mft (raw, json)
Hash identifier: LcZo8npytFhsIWIwA2dILkAzaECeuJaE2e7DMkI1ttI=
Subject key identifier: 40:51:82:02:26:59:EB:02:59:C9:A8:64:06:85:79:F3:2B:71:3C:62
Authority key identifier: 95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
Certificate issuer: /CN=95a47a853b552876a71b7570d0014e064b4380fb
Certificate serial: 0196A6539A630AD8F8066B37E8E92CB67B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
Manifest number: 06D0
Signing time: Tue 06 May 2025 16:00:18 +0000
Manifest this update: Tue 06 May 2025 16:00:18 +0000
Manifest next update: Wed 07 May 2025 16:00:18 +0000
Files and hashes: 1: laR6hTtVKHanG3Vw0AFOBktDgPs.crl (hash: VCCiD53YmfMb4uoiG3dsj6qOfykjS2JWELQtuORxueM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:53:9a:63:0a:d8:f8:06:6b:37:e8:e9:2c:b6:7b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a47a853b552876a71b7570d0014e064b4380fb
Validity
Not Before: May 6 16:00:18 2025 GMT
Not After : May 7 16:00:18 2025 GMT
Subject: CN=405182022659eb0259c9a864068579f32b713c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:17:45:e0:f7:86:98:68:d3:f5:db:32:43:
3b:7f:9c:57:43:0c:be:45:76:9c:2c:5b:8e:2c:24:
5d:dc:ba:64:d7:c5:8b:4f:50:00:da:bf:57:56:3f:
e8:0c:01:ec:89:e0:9f:f6:a3:82:60:2a:c5:63:2a:
3d:f3:73:57:06:25:63:4c:4a:cc:fe:83:9e:8d:c6:
e7:6a:c2:b3:95:e5:db:56:af:66:f0:9c:3f:ef:e7:
f2:06:3e:3d:39:51:67:79:50:59:1b:22:e9:b5:e7:
e4:d6:8e:90:a0:73:71:2f:7c:af:c5:51:8f:8d:05:
9e:85:3b:28:ab:24:e4:34:a4:63:37:4d:64:38:8c:
4f:1e:c6:7f:02:6b:14:e1:72:bd:9a:59:47:f2:5f:
23:5b:07:a4:70:9a:a2:bb:b7:6b:92:bc:79:c2:c4:
3d:5a:83:4e:c1:3d:91:49:74:3a:e0:9c:ce:50:9d:
49:b1:1a:19:67:56:76:b8:db:9e:52:4e:9b:15:10:
5a:22:fe:ec:4a:43:16:39:85:aa:0d:63:5a:df:56:
6b:7f:ad:fe:cb:6f:0d:9d:88:67:d8:ab:3f:f3:cf:
20:57:95:a5:b9:6e:a4:67:1b:28:21:f0:26:c3:d7:
46:13:c9:a6:29:d4:8a:3b:a0:94:7b:b4:b6:b7:9c:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:51:82:02:26:59:EB:02:59:C9:A8:64:06:85:79:F3:2B:71:3C:62
X509v3 Authority Key Identifier:
keyid:95:A4:7A:85:3B:55:28:76:A7:1B:75:70:D0:01:4E:06:4B:43:80:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laR6hTtVKHanG3Vw0AFOBktDgPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/267fa3-621f-46b3-aadb-e865fd9a622f/1/laR6hTtVKHanG3Vw0AFOBktDgPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a3:7c:0f:62:8e:58:a3:e2:c2:86:59:f8:d4:62:41:f0:7c:
cd:b4:20:65:a5:51:de:9f:c5:0f:79:8e:8f:3d:bd:95:06:04:
73:28:9c:34:60:d8:a4:b4:de:8b:2a:20:ab:86:82:51:5e:d9:
09:14:0b:3a:f9:c1:e5:a0:7c:52:1c:4b:c5:d0:97:d1:b7:1e:
0e:63:65:39:1b:09:cb:dc:20:e2:6e:bb:bf:e9:63:89:3d:09:
b3:46:18:c1:15:55:b7:7d:23:49:01:51:64:59:b3:a4:b0:f8:
a4:63:b7:5c:d2:67:53:cb:d0:2d:57:32:df:8f:0a:7e:0b:0d:
c8:49:63:cb:6e:36:7b:fa:12:5f:e1:c6:9b:c0:fe:b2:06:c1:
7e:03:6f:11:71:c5:00:4a:16:d7:0f:f0:9b:85:65:26:49:de:
8d:57:46:56:9a:6f:00:ca:65:ea:e9:f7:f1:1a:cc:10:1d:f2:
4e:f3:7c:95:33:96:21:aa:04:26:96:0c:02:bc:d3:0f:b0:cb:
21:9e:85:0f:03:a6:c0:eb:88:8c:13:b2:6b:47:e9:43:ed:55:
2b:30:22:ab:8d:94:1f:20:58:07:b3:44:7e:8f:23:14:d0:96:
f3:6a:06:c6:18:cb:d0:7e:2a:52:b0:8e:b0:17:2b:aa:67:3a:
4e:ea:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:17:24 2025 by rpki-client