Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
File: bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json)
Hash identifier: JlZQ0jLA3lzXn4yRvRCKk0xByVourFlkNEHYvaYsi50=
Subject key identifier: AC:AF:80:4E:FB:66:91:7D:94:53:6D:1E:B0:95:3C:58:69:BD:FC:E0
Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
Certificate issuer: /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Certificate serial: 0196CB72DF3434BC2E49836C56B63B116AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
Manifest number: 11CD
Signing time: Tue 13 May 2025 21:00:25 +0000
Manifest this update: Tue 13 May 2025 21:00:25 +0000
Manifest next update: Wed 14 May 2025 21:00:25 +0000
Files and hashes: 1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: CDiObpSHCoWFWynU5hIzntH1Pf82so6HhFP1Ky/R4lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:72:df:34:34:bc:2e:49:83:6c:56:b6:3b:11:6a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Validity
Not Before: May 13 21:00:25 2025 GMT
Not After : May 14 21:00:25 2025 GMT
Subject: CN=acaf804efb66917d94536d1eb0953c5869bdfce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:7c:19:6c:c2:15:d5:81:82:b8:41:ca:48:
c4:89:80:7d:63:ee:c4:79:04:2b:3f:33:89:ac:2c:
99:89:2d:51:9f:f3:97:e2:8d:d1:a8:2f:88:78:d0:
c8:4c:9f:da:40:17:31:94:75:37:e3:a0:8e:09:5e:
c3:4e:08:cb:aa:e4:3e:b1:8b:ff:07:6e:e6:53:f1:
e3:06:e2:17:9c:f1:db:8b:e8:3f:aa:6c:9c:45:fc:
0f:88:88:f5:90:7a:1f:66:15:27:bf:e1:73:ef:e1:
c1:67:17:99:bc:d1:14:f5:4a:8a:16:e8:35:1d:b0:
5a:d6:79:b4:02:cc:26:0e:f2:76:59:de:0e:eb:25:
4f:41:c7:7f:40:22:09:4e:28:d2:72:08:05:29:42:
8e:ad:29:dc:64:35:97:38:5d:68:de:54:49:16:43:
18:56:56:e6:b4:9b:b2:f3:4e:81:67:17:1e:52:94:
44:2a:29:91:6a:0c:86:b6:55:b0:36:fd:e0:ae:8c:
5c:99:36:fe:bf:c4:a4:de:92:56:bc:ea:6c:48:02:
5a:eb:98:00:67:80:f0:10:c3:f3:cc:af:2d:58:54:
4f:89:e8:b4:c0:cd:1f:6c:cd:db:a8:5d:eb:3b:ce:
b4:c3:6c:d7:4b:13:98:22:82:98:40:0d:23:17:52:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AF:80:4E:FB:66:91:7D:94:53:6D:1E:B0:95:3C:58:69:BD:FC:E0
X509v3 Authority Key Identifier:
keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c2:18:b9:2e:b7:18:b8:75:77:04:c2:70:f8:a6:38:73:ff:
11:4d:d8:0c:13:f7:43:36:7a:1d:83:da:f9:02:4d:d5:6c:2b:
ca:21:36:48:5f:b4:06:48:0f:56:80:1a:af:f8:3d:3e:7b:a2:
eb:2e:03:d6:6b:66:16:f1:d6:a3:14:18:97:67:70:7f:61:5f:
a3:46:5f:bc:b1:aa:02:9e:49:0c:aa:af:37:78:bc:82:13:75:
83:fc:a6:2e:4a:fe:35:e0:9c:2e:0e:14:d3:c3:07:05:e3:b3:
0f:56:32:d7:1d:d6:81:2b:db:df:54:4c:c6:b8:9f:40:9c:64:
58:22:12:19:72:97:96:00:e2:c3:c0:16:fc:ff:10:59:7f:20:
f7:83:e8:a1:10:72:83:c4:19:4d:68:23:b1:17:81:8b:d5:e6:
df:ef:e8:61:8b:80:5f:6b:d8:ce:53:f8:07:52:44:bd:b5:2d:
5a:8a:20:57:24:82:99:02:f4:69:a6:37:f8:81:a4:41:95:8c:
0c:25:ca:52:ca:9a:a1:f3:1c:78:fc:eb:82:9c:90:21:30:57:
59:93:b5:52:27:d1:f4:3d:8a:4d:66:fe:be:ca:fe:e8:6c:eb:
44:e9:ec:21:5e:ff:94:42:38:14:da:94:4d:28:44:41:e6:45:
e6:50:c1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:02:07 2025 by rpki-client