Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
File: a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft (raw, json)
Hash identifier: WjbWq8R0v2qy4zvPrZEYLcWNf2cz0QAtd+aGVMf8jxY=
Subject key identifier: E6:EC:9D:C4:B6:BA:05:05:22:BF:71:D3:37:76:AA:4C:2E:46:F4:51
Authority key identifier: 6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
Certificate issuer: /CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Certificate serial: 0196CEAB0F6774B8E74C80E7CADC8C165530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
Manifest number: 0954
Signing time: Wed 14 May 2025 12:00:39 +0000
Manifest this update: Wed 14 May 2025 12:00:39 +0000
Manifest next update: Thu 15 May 2025 12:00:39 +0000
Files and hashes: 1: a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl (hash: WbbxijlHwvhJK4nVwacOFNr2oPZgThin+KlWuzimQ8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:ab:0f:67:74:b8:e7:4c:80:e7:ca:dc:8c:16:55:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6baa05c6f8f9bfd70e3d41fe05bafc50d1253bf5
Validity
Not Before: May 14 12:00:39 2025 GMT
Not After : May 15 12:00:39 2025 GMT
Subject: CN=e6ec9dc4b6ba050522bf71d33776aa4c2e46f451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:34:6b:48:12:ef:e3:1d:1b:63:50:8b:2c:
86:35:c1:51:0c:4b:10:52:ad:50:7f:db:b3:a4:35:
e7:10:6b:71:d4:08:de:69:11:a6:e1:d6:58:e5:d3:
f0:9e:69:82:79:6d:fd:c1:57:08:f5:6c:75:7b:30:
fb:c7:6b:5e:90:ce:5b:57:d1:4c:31:f0:43:2b:a4:
d8:cd:8f:2c:a6:e0:c6:d1:28:14:58:a4:b6:f1:c2:
4f:29:5a:d7:1b:23:2c:d3:22:e7:09:db:f1:50:d4:
f5:02:8d:89:00:ea:0d:93:00:1f:1e:f5:2d:4e:22:
86:b0:4b:49:ed:97:72:4b:24:93:db:41:ef:2b:19:
ed:ec:04:55:f4:9f:15:b1:f0:bd:ca:db:24:a2:f9:
63:ad:f6:59:34:e5:21:3f:60:7a:ab:44:7a:5f:09:
56:1c:ed:a2:03:3d:ab:92:9d:2f:47:4f:b2:be:ad:
80:9c:3e:f7:59:b3:31:4c:5a:7f:22:60:62:ea:1f:
bf:16:66:35:49:b1:83:70:bd:d7:fb:35:34:4f:fd:
12:9b:58:8e:ce:26:75:99:c2:e7:85:71:7f:34:51:
32:01:8e:a2:37:ed:6e:7a:2f:e5:c1:e6:de:dc:37:
63:cd:45:e5:b5:2f:a1:79:f5:e6:f8:a7:e6:b4:3e:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EC:9D:C4:B6:BA:05:05:22:BF:71:D3:37:76:AA:4C:2E:46:F4:51
X509v3 Authority Key Identifier:
keyid:6B:AA:05:C6:F8:F9:BF:D7:0E:3D:41:FE:05:BA:FC:50:D1:25:3B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6oFxvj5v9cOPUH-Bbr8UNElO_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8f5119-6dcc-43a2-8daf-f3211d91520d/1/a6oFxvj5v9cOPUH-Bbr8UNElO_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8b:c6:a1:cd:68:dc:09:21:82:6b:37:87:b6:e4:fd:03:37:
00:a9:ed:d9:b0:31:d7:0c:55:62:54:45:d0:10:13:ff:8c:d1:
5e:0c:88:55:2e:5b:64:a9:ec:7b:fc:85:c6:f1:83:1c:3b:c4:
84:72:f1:d6:8a:f8:2f:3a:68:96:ff:bd:4f:98:64:28:cf:63:
e7:e4:93:d1:f4:6b:17:41:4e:fe:01:42:f6:78:9c:85:b6:60:
b1:cb:30:d1:bd:2f:8f:5e:66:6b:fa:cd:5b:14:24:80:8b:55:
ba:25:35:08:51:ef:95:e1:cf:87:03:a0:4d:00:b8:74:76:1e:
22:ec:4a:c7:10:52:15:e8:88:a8:45:67:df:a2:37:81:75:4a:
11:47:79:98:6b:3a:3a:e0:9c:e3:4f:05:b9:8d:85:e6:ac:e9:
65:6d:1a:02:79:92:53:4f:f7:91:35:5b:b3:ff:b1:42:2e:4b:
86:d4:68:03:4f:77:de:39:ae:42:39:b6:a7:dd:55:7c:cd:2c:
f0:3e:9a:71:5c:ac:4d:8a:53:2a:ee:6d:cb:e7:5b:1c:9a:85:
a0:ba:73:ae:1b:6a:0f:1e:69:85:73:73:a2:1c:90:b2:db:2b:
da:dc:a9:40:f3:5d:83:d5:f3:15:fd:aa:60:e4:8c:4f:11:d3:
42:eb:b7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 14:50:34 2025 by rpki-client