Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
File: SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft (raw, json)
Hash identifier: 51AdmPA+DVH2Eu5jwVieYZ4eXRGMo7eCxrbNDoiS/q4=
Subject key identifier: E7:B1:63:24:E2:89:6A:C0:E7:F2:07:EC:A2:3F:DF:07:D0:FF:13:F6
Authority key identifier: 4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
Certificate issuer: /CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Certificate serial: 01969DBED86523A3E7C681043464D79A5757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
Manifest number: 0102
Signing time: Mon 05 May 2025 00:00:52 +0000
Manifest this update: Mon 05 May 2025 00:00:52 +0000
Manifest next update: Tue 06 May 2025 00:00:52 +0000
Files and hashes: 1: SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl (hash: 9KNOVmrBSjBQ2rUq1D3+Mx2e0lS12UrU6pXXPMl45/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:d8:65:23:a3:e7:c6:81:04:34:64:d7:9a:57:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Validity
Not Before: May 5 00:00:52 2025 GMT
Not After : May 6 00:00:52 2025 GMT
Subject: CN=e7b16324e2896ac0e7f207eca23fdf07d0ff13f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7c:0b:93:b0:12:44:6a:b4:f9:cf:29:1a:33:
d2:b7:c5:33:d9:43:8b:ba:a3:5f:01:70:4b:90:c2:
c7:8f:a8:3a:6c:5d:55:93:60:ad:d3:fe:73:c8:34:
67:23:c2:37:f7:cd:80:80:a5:7e:3b:63:44:10:ef:
48:a5:7b:84:b7:4e:29:b2:fa:75:62:a2:48:6d:61:
e0:0a:dc:65:e3:e0:e0:6c:9e:c2:ca:aa:c4:ec:08:
2d:cb:22:e0:4d:0f:2b:93:37:3a:53:44:d3:86:bd:
ee:b1:3e:ce:43:ef:75:4f:9f:c6:24:bd:6f:b4:06:
6b:c0:39:80:47:27:18:db:ac:12:48:b8:96:9b:7b:
0a:03:3c:0b:87:59:5e:06:81:1b:31:2f:17:ad:7a:
8a:5d:55:8d:de:ac:01:89:bf:b3:d7:5c:92:41:71:
ed:13:0b:99:15:b8:d5:b1:cb:ca:42:9f:5a:3f:0e:
fa:2a:ce:f3:ba:49:2e:04:bf:96:27:3e:9f:35:03:
83:5f:3f:ae:e1:4c:f5:68:c3:9b:fa:ab:7d:de:32:
c8:cc:54:62:31:21:43:6b:51:6b:93:a3:87:5e:27:
31:32:ef:f0:22:bb:04:1b:d8:31:39:2d:81:ca:a2:
76:0b:8f:f2:8f:e0:2f:85:22:76:6c:4f:b4:cf:96:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B1:63:24:E2:89:6A:C0:E7:F2:07:EC:A2:3F:DF:07:D0:FF:13:F6
X509v3 Authority Key Identifier:
keyid:4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:53:c0:9a:bb:91:0c:13:64:fb:72:3b:cb:4e:97:2e:c1:3b:
84:6a:42:45:4c:73:5f:ba:17:40:54:57:fb:db:be:b9:a9:39:
43:a9:4f:90:7a:2f:89:1e:96:59:ed:4c:ad:88:3a:c5:7f:3f:
c9:bb:60:f7:c1:ba:63:7d:38:b2:15:02:46:6b:6b:bc:37:56:
ef:6e:8e:ec:dd:84:b0:1e:45:be:6f:ab:cf:7b:db:1e:08:74:
a2:68:52:4a:89:09:35:17:e1:fa:66:e1:b2:ab:33:31:8b:a7:
b7:06:19:88:2e:d6:96:14:99:35:1c:24:21:f4:89:1d:69:e5:
15:cb:e5:03:dc:0e:1d:15:17:fb:88:c6:48:42:52:08:bd:22:
8b:47:21:9c:34:2b:bc:6c:51:55:ff:c8:c9:ac:3c:51:ee:f3:
bf:12:26:ed:ec:eb:05:c5:bb:be:c8:a1:23:99:00:6d:3b:72:
63:ea:2d:4c:14:62:d6:59:d4:03:5b:50:72:a7:f1:00:ea:82:
ce:a3:6a:61:0d:7c:f9:98:7e:56:ff:d5:ff:8d:fe:89:6f:6c:
6a:6f:78:26:c9:04:38:ae:8c:b7:8d:6f:f6:d8:18:ca:12:90:
84:1d:e7:52:7e:d5:35:db:b1:0a:38:f4:8b:7d:34:e1:6c:53:
a4:03:08:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:37:04 2025 by rpki-client