Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
File: t6K9aUc7So6Fp2r72OW77ptLs0s.mft (raw, json)
Hash identifier: kyo3PZSlL8moJKoM6rLnVP2ozc0PLuc6WUiWWQkYZ5w=
Subject key identifier: 1E:AD:71:21:CD:CE:5F:52:85:A2:CF:BF:58:B5:0A:32:20:2D:C8:FF
Authority key identifier: B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
Certificate issuer: /CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Certificate serial: 01969E9A4D49A7F2F93FF368247F09FC3DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
Manifest number: 0E88
Signing time: Mon 05 May 2025 04:00:34 +0000
Manifest this update: Mon 05 May 2025 04:00:34 +0000
Manifest next update: Tue 06 May 2025 04:00:34 +0000
Files and hashes: 1: t6K9aUc7So6Fp2r72OW77ptLs0s.crl (hash: SsKSQgPuHbpU40HUyLHMIyyvNxfgw7WeKe6PnyIjFgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:4d:49:a7:f2:f9:3f:f3:68:24:7f:09:fc:3d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a2bd69473b4a8e85a76afbd8e5bbee9b4bb34b
Validity
Not Before: May 5 04:00:34 2025 GMT
Not After : May 6 04:00:34 2025 GMT
Subject: CN=1ead7121cdce5f5285a2cfbf58b50a32202dc8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:e4:92:a5:9e:ca:6d:3c:21:17:1f:0a:d7:
a5:21:7b:77:09:87:15:fa:ae:c5:25:e1:73:14:78:
89:05:bb:7a:f0:2a:d0:57:4d:82:4d:5a:f5:f9:62:
f2:61:f1:90:c6:ec:d5:e1:1a:45:57:4d:5d:76:91:
99:12:c6:b8:be:41:dd:2e:90:01:d4:36:cb:3b:7b:
71:e5:4e:8b:c9:3f:29:b4:b7:a3:fa:29:18:27:14:
82:06:8e:e4:cb:1d:e6:4c:83:15:3a:80:07:67:0c:
21:2a:f7:ed:2d:03:16:8b:a7:d7:c6:21:8f:92:88:
95:b2:cc:9d:27:96:dc:ea:d5:b0:3a:00:43:c8:4a:
5b:fd:07:b3:9c:9a:1c:7e:63:80:49:7d:a7:77:f0:
54:ef:11:32:c4:69:cd:92:a9:7d:83:5f:45:0c:a5:
55:2b:94:6f:d7:11:45:e7:ca:0b:09:81:55:18:a7:
3a:0f:8c:88:78:17:3e:19:58:3f:d4:64:9e:a9:bc:
5e:95:22:64:19:2a:36:ca:14:e9:02:c5:5b:e1:3f:
69:6c:48:33:02:d0:d1:dd:f3:06:95:df:ae:b7:c2:
8c:f1:d7:0f:da:f6:28:a9:04:e7:58:2d:73:8c:c6:
ce:b8:66:80:d1:02:c9:42:88:0b:57:6a:ef:d5:6c:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AD:71:21:CD:CE:5F:52:85:A2:CF:BF:58:B5:0A:32:20:2D:C8:FF
X509v3 Authority Key Identifier:
keyid:B7:A2:BD:69:47:3B:4A:8E:85:A7:6A:FB:D8:E5:BB:EE:9B:4B:B3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6K9aUc7So6Fp2r72OW77ptLs0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/74d5f6-e641-4408-a76e-53889bdc84f5/1/t6K9aUc7So6Fp2r72OW77ptLs0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8a:c8:39:49:b2:97:d6:7d:18:96:07:3e:88:2e:64:5b:65:
39:ec:6c:b4:6a:1a:1f:4b:10:71:31:2d:f7:04:9b:e3:73:d8:
20:81:ad:06:ac:27:05:85:58:39:9b:ce:21:d5:06:30:0b:2e:
0f:5d:b9:a0:36:ab:43:7f:cd:22:95:f9:87:4b:23:40:d7:d4:
91:fa:fa:b1:80:eb:04:11:57:55:4e:bb:6b:74:7e:20:6b:56:
5b:ed:35:6a:6f:e8:b5:4b:3a:cd:da:59:05:14:3a:28:84:d0:
59:21:c0:4a:92:29:1e:3d:5e:1d:ef:9b:37:57:77:45:9c:7d:
9f:2b:ce:48:c7:f5:2c:3c:50:94:3b:a5:9f:dd:a7:72:ea:c2:
b3:79:42:fc:cd:91:c0:a0:17:c3:05:53:5f:85:22:25:6b:29:
be:fb:67:1c:a0:57:15:4d:4e:84:43:8e:bc:7b:c8:46:f6:7c:
f3:3f:3b:a4:d8:2a:f8:a6:c1:01:a6:49:33:fc:34:bb:26:c1:
31:8b:d4:8e:2c:32:ee:a0:90:d2:15:47:09:59:1b:6c:97:3b:
6f:c7:af:0b:12:1f:b2:90:46:cb:96:c2:fb:e8:03:48:a6:87:
67:0b:af:9c:e4:15:b5:1f:51:39:8d:92:d4:da:80:b4:db:4c:
a1:12:94:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:42 2025 by rpki-client