Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
File: 4tccU1qnoKzpP62r22WD-ISmxiY.mft (raw, json)
Hash identifier: zlk2MOEoJ1lWFU7ON1IUgbupS/ipaQGn9g4b8H1OIXY=
Subject key identifier: 6E:B8:36:F9:AB:84:3D:60:D7:09:41:3C:50:F8:74:9B:19:1B:14:EC
Authority key identifier: E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
Certificate issuer: /CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Certificate serial: 0196B7B5CD9F6E8C1BD3B9753C9395818C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
Manifest number: 060A
Signing time: Sat 10 May 2025 01:01:07 +0000
Manifest this update: Sat 10 May 2025 01:01:07 +0000
Manifest next update: Sun 11 May 2025 01:01:07 +0000
Files and hashes: 1: 4tccU1qnoKzpP62r22WD-ISmxiY.crl (hash: zqNMZfGOq64ABpGqB1kIGvFxyPndzYac6L094W6JiQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:cd:9f:6e:8c:1b:d3:b9:75:3c:93:95:81:8c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Validity
Not Before: May 10 01:01:07 2025 GMT
Not After : May 11 01:01:07 2025 GMT
Subject: CN=6eb836f9ab843d60d709413c50f8749b191b14ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:70:4c:ab:c1:14:6a:f0:e1:a9:92:39:d7:
38:c0:47:a5:14:d9:54:bf:1b:02:60:72:eb:6d:03:
7d:1a:06:08:2c:27:eb:7e:0e:7b:d6:85:2e:0b:46:
96:10:b4:ea:fa:42:d7:cd:ec:d1:30:d6:9f:fc:7f:
59:fe:78:48:6b:7c:a8:62:2c:cb:eb:82:31:48:3d:
e6:74:65:32:14:ec:ba:30:1c:4a:60:eb:d4:dc:30:
41:4e:60:5e:84:77:f2:58:16:9b:13:b0:40:db:35:
a5:02:b7:60:a0:7c:33:d5:62:01:6e:c6:95:e5:3c:
aa:5c:e7:7d:14:73:26:e3:2a:cf:cf:45:1a:e5:e3:
67:c3:42:54:23:91:c9:96:39:87:5c:fb:b4:a6:2f:
3d:1c:9f:c4:03:d9:5a:c9:0f:db:ee:0b:47:ec:9a:
93:a3:70:d5:ad:7c:63:c6:a1:36:17:a4:f4:5b:da:
dc:cf:0e:bb:77:5e:b8:5a:d4:36:d5:52:9b:df:f5:
9d:6d:c9:76:f1:cf:bb:0c:d8:11:7d:04:4f:d1:15:
50:27:f0:c1:92:ae:08:f7:bd:c9:c0:99:91:82:3e:
69:9c:fd:93:8c:78:8e:a9:33:bb:9b:25:d4:35:d5:
a4:8c:60:d1:39:f6:63:10:e0:12:cc:8c:fe:e1:63:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B8:36:F9:AB:84:3D:60:D7:09:41:3C:50:F8:74:9B:19:1B:14:EC
X509v3 Authority Key Identifier:
keyid:E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:b5:ce:e2:42:2a:46:eb:c0:ca:e7:1a:54:2b:a5:60:5c:7b:
00:38:67:7e:e7:8d:d6:f9:11:80:d4:47:f9:33:be:31:bd:d4:
04:3b:56:65:95:4a:6b:7a:24:48:8f:f1:c4:9e:51:15:22:4a:
c1:50:77:9a:78:fd:e9:e1:8d:90:15:b5:5e:2f:c9:36:38:8e:
61:4b:69:1b:85:19:7b:b5:51:66:87:f5:0a:6a:6b:0a:96:75:
25:e5:34:66:f3:3a:a7:42:df:6d:d6:2b:9a:3b:b5:45:43:80:
5b:b4:7e:d6:8c:f7:04:b1:1b:68:fe:e1:f3:c7:7c:60:bf:f8:
95:e6:03:4d:4c:33:0d:bb:46:62:80:ea:f5:12:56:c0:0a:ff:
81:e2:c9:46:3f:b0:95:02:a3:d9:c0:d2:c5:2d:87:02:3c:b9:
da:18:ee:73:c6:00:34:32:64:6a:ff:46:c5:c5:52:6f:8d:a8:
d1:11:7b:5f:52:14:df:46:7f:55:92:94:d3:af:0c:35:d7:0a:
87:a0:59:e4:84:2e:9e:8d:87:d3:f6:61:65:04:20:df:41:e5:
f2:a0:e1:1b:e5:f9:9b:d1:83:4a:b2:27:fe:fc:03:8b:fe:aa:
7c:fa:91:97:f0:7b:88:6e:39:8b:6e:f3:c7:67:3d:d3:76:55:
59:37:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:03:45 2025 by rpki-client