Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
File: 6T3OhQyyYnpSvfS5k0oRKIy20nc.mft (raw, json)
Hash identifier: bhon+DkRUohHQhnPjfoQGivpI+8lTvn3jA+A749q4V8=
Subject key identifier: 39:9F:6F:9B:2A:2E:E5:43:AA:09:F9:64:3B:9A:BE:1C:19:00:12:D2
Authority key identifier: E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
Certificate issuer: /CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Certificate serial: 0196B9A42564B7D1B142B6289AE2366E0873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
Manifest number: 0864
Signing time: Sat 10 May 2025 10:01:04 +0000
Manifest this update: Sat 10 May 2025 10:01:04 +0000
Manifest next update: Sun 11 May 2025 10:01:04 +0000
Files and hashes: 1: 6T3OhQyyYnpSvfS5k0oRKIy20nc.crl (hash: vIxHqOj4W12PFijZmSK/icdswUQ+/LETcA817WvYsRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:25:64:b7:d1:b1:42:b6:28:9a:e2:36:6e:08:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93dce850cb2627a52bdf4b9934a11288cb6d277
Validity
Not Before: May 10 10:01:04 2025 GMT
Not After : May 11 10:01:04 2025 GMT
Subject: CN=399f6f9b2a2ee543aa09f9643b9abe1c190012d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:3c:a9:fe:e5:43:6a:19:0c:dd:dd:b2:c8:
1a:29:c5:2a:b2:f8:1d:57:c2:b8:a7:ac:0f:0c:7f:
61:af:ab:2a:cb:d1:7f:6a:92:54:a5:5a:27:59:67:
ac:02:2d:d6:e5:79:dd:c9:a9:a1:bb:25:12:f1:4e:
38:33:7b:93:6c:35:ff:de:f9:94:d3:ee:a9:48:8b:
c1:77:53:bf:23:83:0c:45:36:36:3f:ac:e8:0c:69:
a9:88:e0:a4:ba:ce:b5:aa:a1:0c:aa:f6:3f:52:06:
3a:36:d8:6a:c7:49:5c:c6:71:5a:f2:80:db:a3:a8:
49:39:56:0c:3b:de:d8:4b:14:96:c6:95:5a:cf:22:
fb:00:36:aa:fd:c2:31:86:2c:61:8f:13:64:6f:ae:
81:28:95:eb:cd:7a:7f:88:39:61:83:b1:c4:ad:1d:
d3:4e:d5:c5:3b:ef:6f:d8:d4:a4:ec:14:d0:ca:e3:
4e:5e:74:a0:6d:3a:31:95:27:6a:9f:5d:a2:99:56:
89:34:2b:00:40:1d:d1:cf:a8:44:a4:13:af:a2:97:
a6:60:74:09:86:86:38:91:5b:fd:e6:bf:11:33:31:
2d:c3:54:7e:6c:13:55:15:5f:a5:72:12:61:5b:43:
55:25:96:b0:39:ea:36:2a:e9:a6:68:50:e5:a1:f3:
d5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9F:6F:9B:2A:2E:E5:43:AA:09:F9:64:3B:9A:BE:1C:19:00:12:D2
X509v3 Authority Key Identifier:
keyid:E9:3D:CE:85:0C:B2:62:7A:52:BD:F4:B9:93:4A:11:28:8C:B6:D2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T3OhQyyYnpSvfS5k0oRKIy20nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/d4f2e8-d619-4869-98e3-f5e93646698e/1/6T3OhQyyYnpSvfS5k0oRKIy20nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:62:92:0e:f8:60:67:a3:0f:68:e3:02:64:46:cb:9e:f3:29:
fd:91:28:c6:5a:22:a6:32:5a:16:e3:fa:a6:b1:64:80:bd:e6:
e8:40:9c:ca:a1:32:bb:17:b4:ce:a1:a6:79:91:52:5f:ee:eb:
6f:db:6e:70:8d:75:52:3a:2c:a0:f4:9d:45:47:33:7a:f5:68:
7b:50:c0:9b:d3:fb:85:08:4f:44:19:66:69:dd:59:ac:c3:3c:
c7:f9:14:70:94:53:a7:cb:20:99:d4:30:a8:c7:14:f2:a4:c9:
f1:6c:a8:4e:df:dc:03:33:97:d5:f1:ed:ce:df:9a:db:eb:ba:
3f:2e:4e:1d:70:19:b2:65:fe:9b:ab:ff:80:cc:54:24:01:18:
d7:12:32:8d:f4:ff:59:8c:8b:7c:dd:6a:11:c6:e3:00:fe:2c:
a3:bf:03:53:9d:8b:73:9b:d4:45:f7:38:8d:e9:07:0a:b1:dc:
c3:62:9c:39:31:b0:ee:85:f3:07:6a:28:0d:51:e0:20:67:2d:
12:79:c6:83:fc:89:c6:94:f8:b2:34:71:d3:88:01:e8:7e:92:
55:cd:01:ef:bf:ed:83:f9:89:da:7c:12:cd:17:52:8f:76:19:
b6:f6:6f:e2:61:46:94:08:6c:0e:d0:5b:f6:0a:0f:8b:22:d4:
ad:0a:25:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:23:30 2025 by rpki-client