Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
File: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft (raw, json)
Hash identifier: VBELNEs4e5xFC/moFCUVVd6FHcRJO2T40I6X0KisZAY=
Subject key identifier: 9E:4D:8F:4A:D2:75:C0:5E:AA:AB:36:EA:0A:A1:24:C3:18:A8:4A:10
Authority key identifier: EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
Certificate issuer: /CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Certificate serial: 0196C539D1B23CD507943BEB285FBC7C2375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
Manifest number: 1018
Signing time: Mon 12 May 2025 16:00:22 +0000
Manifest this update: Mon 12 May 2025 16:00:22 +0000
Manifest next update: Tue 13 May 2025 16:00:22 +0000
Files and hashes: 1: 6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl (hash: ekvlfMzU3eo4P6yTpbk45iP1gM5Mh3QKYhKrbGjJmWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:d1:b2:3c:d5:07:94:3b:eb:28:5f:bc:7c:23:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea501a68d91093e7def2f4e031031d114d43ba3c
Validity
Not Before: May 12 16:00:22 2025 GMT
Not After : May 13 16:00:22 2025 GMT
Subject: CN=9e4d8f4ad275c05eaaab36ea0aa124c318a84a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:df:3a:16:2f:95:fb:a0:85:14:b7:5f:27:
57:80:35:2c:95:3e:bd:39:07:ca:ac:f9:72:75:fa:
68:6c:50:93:a5:e2:ee:d7:3f:0e:1b:ea:46:6c:a4:
ec:dc:2d:78:7a:0d:2f:4b:0e:ee:d3:a6:c5:30:67:
c9:d7:43:92:cb:f3:15:cb:ab:24:73:6c:eb:41:25:
14:e2:af:22:cd:9b:90:a1:ee:95:0b:bb:bb:54:1c:
37:83:b7:c0:c9:89:0d:a0:71:75:81:43:eb:04:9e:
15:fa:d6:0d:ec:71:a4:79:0e:15:a6:fa:30:15:7a:
d0:c8:08:36:7e:33:f7:10:03:e1:c0:2c:90:bf:74:
8e:35:65:31:d8:c2:be:b9:b5:c2:5f:a7:bc:54:2b:
7d:61:d0:89:7e:79:2a:03:f4:85:76:ea:55:13:fc:
7b:f2:c3:e9:48:68:41:aa:a9:be:2c:a4:cd:cd:b5:
28:d3:c0:97:5a:4f:66:dc:1c:e5:cb:87:20:27:54:
52:32:9c:17:5a:31:6d:54:c0:46:13:93:74:2f:32:
49:1a:39:16:d1:89:86:39:47:5c:80:3f:f7:12:11:
b2:40:b6:7b:b0:0d:4d:ca:39:a6:73:1a:c6:bc:98:
f9:6b:45:dc:b5:0c:e8:c1:b3:2f:b6:58:53:ed:f7:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4D:8F:4A:D2:75:C0:5E:AA:AB:36:EA:0A:A1:24:C3:18:A8:4A:10
X509v3 Authority Key Identifier:
keyid:EA:50:1A:68:D9:10:93:E7:DE:F2:F4:E0:31:03:1D:11:4D:43:BA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lAaaNkQk-fe8vTgMQMdEU1Dujw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f4d653-6f77-4ce0-a6f2-345e17f9d632/1/6lAaaNkQk-fe8vTgMQMdEU1Dujw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:75:a9:1b:d5:49:11:64:a9:fb:c8:30:97:db:60:f2:89:d4:
50:06:db:31:1c:e7:07:53:7a:f7:e8:33:76:0a:b7:c1:c7:33:
b2:4d:dd:b8:96:c6:66:24:44:c3:f5:f2:de:8f:2d:ca:57:7d:
d4:5c:99:da:09:ac:6b:43:f1:e8:1a:62:10:78:e6:ab:28:cb:
0e:29:59:f7:40:fb:b4:6a:10:4f:47:70:76:18:6b:cc:83:54:
76:9a:36:a3:f2:cf:ca:18:3e:e5:42:21:f8:26:04:4a:e8:a6:
86:37:c4:aa:b1:4f:26:61:ae:0b:0b:c6:76:63:74:ef:bb:d7:
d2:45:c6:15:ed:f2:3a:39:20:b3:6a:a9:6e:42:9b:1d:f6:72:
e2:38:df:55:ba:84:58:40:6f:e1:d9:57:16:fa:4c:8b:e2:90:
e0:42:69:92:18:30:d5:1b:5b:e9:a6:cc:23:53:40:62:15:83:
c1:ae:25:db:9f:87:bc:45:4c:3d:52:87:17:03:11:f0:40:61:
c4:e8:fa:ca:43:1a:a9:25:66:04:fa:e9:c6:02:b0:a1:5a:53:
6b:2c:b5:2c:bd:a0:eb:15:4f:9d:d0:e6:1b:21:4f:4e:d2:71:
d6:91:69:0a:b0:1c:8e:22:2d:f7:0c:10:07:81:70:d3:6d:4c:
5e:8c:8b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:11:32 2025 by rpki-client