Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
File: a3tUza1xENOJd_mlkmCzkxLkSH0.mft (raw, json)
Hash identifier: zcoI0bt/RB8oUoLxfpHKKyDXQerOx6utCh2xo3LZ148=
Subject key identifier: 11:55:A3:92:E9:33:75:5A:5B:99:FD:F3:67:DD:23:3C:62:00:11:04
Authority key identifier: 6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
Certificate issuer: /CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Certificate serial: 0196BA11EA221D5E40AF3F1C2A1FE6D2FF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
Manifest number: 100D
Signing time: Sat 10 May 2025 12:00:58 +0000
Manifest this update: Sat 10 May 2025 12:00:58 +0000
Manifest next update: Sun 11 May 2025 12:00:58 +0000
Files and hashes: 1: a3tUza1xENOJd_mlkmCzkxLkSH0.crl (hash: q0cE03y/mulyLVJjOzRyhgrePoJNp9n+VbOJMcENeYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:ea:22:1d:5e:40:af:3f:1c:2a:1f:e6:d2:ff:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7b54cdad7110d38977f9a59260b39312e4487d
Validity
Not Before: May 10 12:00:58 2025 GMT
Not After : May 11 12:00:58 2025 GMT
Subject: CN=1155a392e933755a5b99fdf367dd233c62001104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:76:2f:4c:e0:2c:ae:12:8a:60:43:8c:7e:
c5:b4:62:21:20:59:4b:30:00:42:3c:57:d5:f5:4d:
ff:84:65:1f:c5:42:8a:ad:71:60:44:61:fc:c9:30:
ae:7a:06:de:b8:67:7d:37:0a:9c:9e:7a:3d:9e:d3:
84:0b:6a:5c:65:1c:8a:ec:f7:3a:fe:35:25:d8:c1:
33:87:9b:3d:58:e5:ed:e6:af:3d:71:85:b2:cc:61:
de:03:75:cb:7e:ed:9e:db:25:3d:d3:bd:34:28:97:
2f:3f:2f:c3:c2:cf:29:8b:03:90:6f:29:15:b7:fc:
5a:93:6d:41:60:c7:cf:2b:d0:0a:c2:7f:30:89:e5:
3b:30:fc:79:44:5d:eb:a6:89:e7:1d:65:82:7c:56:
74:65:ec:9b:b3:70:8d:d0:4f:0f:46:df:91:89:a4:
06:3b:bc:71:0d:16:99:49:1d:a2:b6:20:97:c6:45:
35:b8:a0:c6:1a:1b:06:cb:3c:02:d8:0f:dc:98:6d:
81:d7:68:1c:99:f4:6c:9f:10:be:4c:05:0a:3f:c2:
36:98:aa:f7:f6:1c:17:f7:3b:4c:7f:30:98:49:a3:
d9:33:b2:d7:5c:de:dd:3b:6e:83:0e:d8:0e:19:10:
9b:74:4b:c8:78:0e:fc:5e:57:9c:4a:6b:11:84:55:
21:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:55:A3:92:E9:33:75:5A:5B:99:FD:F3:67:DD:23:3C:62:00:11:04
X509v3 Authority Key Identifier:
keyid:6B:7B:54:CD:AD:71:10:D3:89:77:F9:A5:92:60:B3:93:12:E4:48:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3tUza1xENOJd_mlkmCzkxLkSH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/6281dc-9b5f-49c8-b455-41d7179ed951/1/a3tUza1xENOJd_mlkmCzkxLkSH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b4:93:76:3a:e7:52:b1:40:68:fe:95:ec:f1:35:a7:ae:44:
12:9d:b8:51:16:e4:02:57:a1:f2:34:a9:08:06:43:7a:4c:1d:
52:a1:9c:7f:6d:b2:d2:9d:6a:21:8e:3d:b2:ff:8c:26:05:d4:
e8:cf:90:c4:07:bb:34:bb:06:4b:5b:46:a8:57:22:73:9a:43:
ea:e5:60:bb:0c:34:44:45:c1:60:71:5f:0a:3f:57:d2:64:dc:
70:75:65:ec:8c:1f:02:12:0d:18:31:d6:54:c7:9a:b1:d2:9e:
97:9d:9c:70:76:9b:57:9f:d8:12:e7:92:86:70:ad:71:a3:e0:
2c:22:0c:79:0f:ce:72:2f:d0:0f:c0:ff:59:0f:53:8b:e7:fb:
7c:11:b7:37:c1:c9:ef:12:44:e9:56:88:21:f3:e8:91:3d:55:
4b:5b:e2:9a:48:44:29:ec:99:92:a0:05:e3:65:05:fb:cb:42:
2d:81:84:e3:8a:e3:99:03:9d:25:19:c7:69:d6:d9:23:8e:8a:
3a:31:f4:30:89:58:1a:ee:77:42:35:66:71:f5:23:51:f4:82:
44:18:1a:e0:7f:17:f4:92:cb:57:b1:1f:06:a3:c4:b8:50:60:
51:50:3a:3c:c6:04:70:23:e0:74:a8:33:9b:26:15:ac:3a:8a:
3e:9e:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:06:18 2025 by rpki-client