Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
File: a9wGwwC61lEu6H_dJAEF8u8n1eA.mft (raw, json)
Hash identifier: lxXDSc6WikkRRq+8JHZHuyQcBwz7xp+SCG+kh6r7rzA=
Subject key identifier: C3:5B:C4:86:B4:51:16:F5:E2:99:7C:1A:6B:EB:D2:B2:B5:6B:C5:14
Authority key identifier: 6B:DC:06:C3:00:BA:D6:51:2E:E8:7F:DD:24:01:05:F2:EF:27:D5:E0
Certificate issuer: /CN=6bdc06c300bad6512ee87fdd240105f2ef27d5e0
Certificate serial: 0196D889D865E5FB3A8E5B713F6649561C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
Manifest number: 04DB
Signing time: Fri 16 May 2025 10:00:34 +0000
Manifest this update: Fri 16 May 2025 10:00:34 +0000
Manifest next update: Sat 17 May 2025 10:00:34 +0000
Files and hashes: 1: a9wGwwC61lEu6H_dJAEF8u8n1eA.crl (hash: BaTPrt3xYfr6gcLCQeU8MJYQjhG/n8T++/vq11qAFZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:89:d8:65:e5:fb:3a:8e:5b:71:3f:66:49:56:1c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bdc06c300bad6512ee87fdd240105f2ef27d5e0
Validity
Not Before: May 16 10:00:34 2025 GMT
Not After : May 17 10:00:34 2025 GMT
Subject: CN=c35bc486b45116f5e2997c1a6bebd2b2b56bc514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:85:52:41:43:d4:01:29:a4:7b:c1:f3:9a:
53:c6:94:69:1e:90:4e:5d:65:02:45:1b:8c:db:f1:
ff:62:06:90:15:c0:a4:b4:12:7b:77:5c:f7:d9:e4:
0f:e4:1e:98:2e:d9:92:68:80:a2:a7:e3:26:5c:e3:
72:fd:8f:03:ae:58:4c:46:30:32:98:d2:cd:28:30:
71:dd:72:49:0f:70:ed:6d:3b:95:2a:19:46:dd:15:
4d:e8:37:53:90:37:a1:ea:c9:a7:1e:d4:97:0a:c3:
7c:66:0a:c6:1d:72:73:41:3c:33:35:ae:da:9c:8f:
3b:2b:57:ea:07:fc:77:d4:f3:13:28:41:05:65:af:
ad:62:2b:71:f2:7b:33:a5:81:04:08:b6:89:c8:65:
2e:e2:d5:66:56:96:b8:4f:3c:e5:c8:1c:31:a0:a3:
df:a2:53:c9:82:4b:e5:14:8f:34:7d:0a:4d:c0:6a:
81:74:bb:90:f2:a3:70:8e:16:36:2a:d3:01:ca:91:
eb:19:bb:8b:e3:54:c2:3c:bb:3b:6d:3f:79:4a:be:
c1:fc:e4:73:72:75:2a:8e:70:b0:79:13:da:29:28:
27:4d:7b:c5:72:b4:58:bb:8d:71:d5:de:0f:8c:36:
61:93:00:49:c3:2f:3e:bb:e0:94:0c:12:51:09:9c:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5B:C4:86:B4:51:16:F5:E2:99:7C:1A:6B:EB:D2:B2:B5:6B:C5:14
X509v3 Authority Key Identifier:
keyid:6B:DC:06:C3:00:BA:D6:51:2E:E8:7F:DD:24:01:05:F2:EF:27:D5:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9wGwwC61lEu6H_dJAEF8u8n1eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1225aa-fa90-49bc-830d-262d2a569bd2/1/a9wGwwC61lEu6H_dJAEF8u8n1eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:33:6a:b8:70:8f:27:cf:4d:e9:c8:64:5d:db:db:33:62:5f:
0b:2a:be:90:06:c1:56:23:1d:be:7b:39:df:89:bc:4d:be:31:
f4:88:31:21:82:e8:27:67:0d:3a:66:49:02:16:df:94:3f:65:
24:b1:6e:7f:1c:47:b7:cc:f6:f0:c0:62:5b:99:88:51:54:e7:
bc:ad:c3:9f:8a:df:5d:42:75:7a:22:de:ad:a5:96:d6:cc:7b:
da:7a:4e:f4:9b:17:2f:d7:a4:57:9d:1c:1a:45:10:74:f9:ba:
dc:77:87:19:fb:76:c0:d7:18:fc:2d:10:83:77:77:5d:a0:61:
88:20:dd:d0:f9:80:c3:78:8c:c0:ea:07:d5:b5:41:60:fd:6b:
ff:24:4b:ea:8f:4b:88:79:73:26:04:ff:10:fc:f2:26:a4:f3:
ff:e6:6f:66:3c:d9:c0:b7:65:c3:12:2d:f2:dd:1a:75:b8:f7:
ef:87:e1:c9:4a:4b:54:6d:d2:c7:98:4e:76:b1:5e:9d:d1:08:
6b:e7:96:db:cc:36:4b:72:40:87:e1:a6:f4:c0:64:a6:3b:61:
d0:f6:54:0d:f5:9a:b1:60:1a:d3:27:7a:c4:55:b2:57:45:ef:
02:94:e5:0e:50:a2:fc:80:57:93:bd:cd:a8:ad:b5:fd:1d:98:
46:df:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 17:53:59 2025 by rpki-client