Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
File: a3YD1VVBw1n46HRHfL6K8h9peHw.mft (raw, json)
Hash identifier: rQDyEbQEoIrz8t63supNoWP5ohFcCsjjIKTwXvmNmso=
Subject key identifier: E1:C8:CB:C8:99:ED:53:D0:CD:D6:D0:6E:90:7A:72:49:1D:5A:9E:AB
Authority key identifier: 6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
Certificate issuer: /CN=6b7603d55541c359f8e874477cbe8af21f69787c
Certificate serial: 0196A42E835963EC18BADBD03D57A83949AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
Manifest number: 021F
Signing time: Tue 06 May 2025 06:00:33 +0000
Manifest this update: Tue 06 May 2025 06:00:33 +0000
Manifest next update: Wed 07 May 2025 06:00:33 +0000
Files and hashes: 1: a3YD1VVBw1n46HRHfL6K8h9peHw.crl (hash: E68hGNpQiB26uEqZmp65tdbi/zKK3gNVQatc4Fnkf4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:2e:83:59:63:ec:18:ba:db:d0:3d:57:a8:39:49:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7603d55541c359f8e874477cbe8af21f69787c
Validity
Not Before: May 6 06:00:33 2025 GMT
Not After : May 7 06:00:33 2025 GMT
Subject: CN=e1c8cbc899ed53d0cdd6d06e907a72491d5a9eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:79:ac:5a:39:45:31:cb:9c:3f:28:5c:41:
96:a8:36:cb:54:d4:3a:5d:a3:94:24:78:57:2d:ab:
4c:64:3f:28:32:b6:7c:07:b9:ea:5f:e8:fb:2b:60:
37:96:16:8f:4c:b3:b0:34:33:1e:27:cd:6d:e1:7f:
be:72:37:f0:1e:20:67:00:2f:28:87:d3:7a:7e:23:
49:f8:e6:6e:c9:2c:cf:49:9f:ea:b6:49:81:4d:d7:
cc:8e:d4:fa:99:72:9f:de:a4:43:70:10:ee:be:1b:
7c:55:4a:a5:6f:bf:62:7c:a9:49:73:0d:cf:47:61:
65:79:f0:97:27:82:6f:b0:4f:3c:27:28:d5:b1:ea:
fe:3a:2c:c8:ba:95:b8:28:22:a6:9f:68:46:1d:64:
78:ef:b6:2c:c6:82:57:70:1b:54:5d:e9:2f:81:7c:
f1:0e:c2:f9:c7:b5:e2:08:e4:e4:e4:1a:47:d5:2e:
dd:e9:c9:24:b8:92:e6:f8:3a:c0:ba:aa:5d:f4:17:
35:12:ac:5d:38:9d:4a:2f:56:87:da:d6:a4:f0:36:
8b:c7:c9:d5:15:d1:be:94:67:51:4c:cf:bd:de:6b:
1b:e8:55:c6:61:06:3a:2e:e8:88:a8:52:ac:8f:2b:
1b:db:40:6e:71:10:24:f8:d7:36:77:8d:24:38:e6:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C8:CB:C8:99:ED:53:D0:CD:D6:D0:6E:90:7A:72:49:1D:5A:9E:AB
X509v3 Authority Key Identifier:
keyid:6B:76:03:D5:55:41:C3:59:F8:E8:74:47:7C:BE:8A:F2:1F:69:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3YD1VVBw1n46HRHfL6K8h9peHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3c589f-2bd2-49bd-bd81-57e6320b118f/1/a3YD1VVBw1n46HRHfL6K8h9peHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:35:96:eb:7a:64:be:eb:83:d8:8d:40:a6:3c:70:e1:bc:24:
92:fc:b9:8a:28:23:c5:65:2f:7a:de:11:17:b1:81:43:88:d1:
24:6b:89:e3:dc:b5:31:a6:08:48:43:e9:59:20:11:c2:f7:9d:
a4:14:ba:04:85:6c:68:ad:43:b1:52:2a:63:01:bc:9b:d3:9f:
46:90:37:1b:77:ea:9b:d1:f2:09:84:e8:a8:06:58:88:f9:41:
91:24:95:cc:b5:29:92:c3:b8:7e:05:18:58:e8:30:bb:23:4c:
87:81:81:70:64:b1:5b:67:7f:f7:50:d9:94:76:80:65:75:9a:
cd:81:f4:74:b3:dd:32:0f:60:71:d1:05:b8:09:e4:6d:3d:d3:
53:5e:b4:88:04:fb:08:48:59:c1:13:6c:f0:38:f4:fa:2e:b3:
d8:6b:1f:16:bd:95:97:44:40:5b:ff:c9:be:bb:ef:06:78:47:
18:e5:54:09:6f:ad:a8:e4:e3:48:63:0f:e3:88:c2:e6:18:59:
b9:0f:da:89:77:60:79:8c:5e:f6:a2:35:d8:a7:99:28:82:5b:
4f:4e:40:74:9a:15:05:e8:68:92:11:07:8e:27:f9:7d:e0:97:
e6:1b:e4:63:38:ad:d4:2b:94:91:1e:60:b6:87:79:5b:10:67:
d9:8a:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:03:12 2025 by rpki-client