
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File: r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier: lteNL3r2KH2L1Vqo+A2GA69k5HnDfsWkVURJDMc7Byg=
Subject key identifier: 41:45:58:81:67:7F:F5:A3:63:FE:AD:DC:C1:01:E0:83:DF:35:80:3F
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial: 0196A50A701F76532FF19DE07A8AE5A959E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number: 0C0C
Signing time: Tue 06 May 2025 10:00:46 +0000
Manifest this update: Tue 06 May 2025 10:00:46 +0000
Manifest next update: Wed 07 May 2025 10:00:46 +0000
Files and hashes: 1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: Nqf/ZIrM7T1skVi04XyRBkDnjSyPS/gItM+hgKQcvdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:70:1f:76:53:2f:f1:9d:e0:7a:8a:e5:a9:59:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
Validity
Not Before: May 6 10:00:46 2025 GMT
Not After : May 7 10:00:46 2025 GMT
Subject: CN=41455881677ff5a363feaddcc101e083df35803f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:37:6c:2c:fb:17:04:e3:c9:1e:15:7a:7d:
f3:b6:fa:8f:41:6a:f0:79:fc:aa:1b:1a:4c:96:40:
39:eb:be:5a:ec:0e:03:63:cf:5c:ff:4a:14:63:f2:
60:5c:36:63:91:18:bb:07:52:8c:14:1f:37:e8:71:
59:d3:a7:12:78:bb:39:80:12:a8:f6:85:c7:b9:d2:
f6:1a:28:39:4f:8c:51:9b:c1:b5:8b:56:48:25:97:
f5:26:f9:ba:e0:52:8b:d2:5b:db:d0:a2:3a:7a:cb:
a1:22:6e:f4:6e:e5:91:e3:6e:c9:ce:d5:ff:76:52:
9b:9f:f2:6c:4d:b5:57:5a:72:c6:d1:3d:13:9d:42:
a8:27:1a:fd:2b:26:fc:40:aa:00:ce:dd:de:a3:e8:
13:d0:06:72:73:31:2f:68:d0:5b:44:f5:c9:ac:e3:
6f:a0:7f:06:e7:b0:af:04:1d:ee:f6:9a:1b:c4:c1:
63:cf:bb:e2:1a:e0:af:fd:9a:1a:7c:38:ce:28:a1:
1a:10:c5:f5:1c:be:20:b6:e4:0c:bd:ac:2e:15:30:
f3:b8:78:af:92:ca:78:0c:1e:da:f2:9a:42:2a:b6:
d7:90:d2:09:1a:8e:76:a3:c9:c5:a0:5f:c2:c0:53:
8e:6f:b3:21:39:4d:20:78:1a:aa:9b:8b:f4:1b:d6:
28:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:45:58:81:67:7F:F5:A3:63:FE:AD:DC:C1:01:E0:83:DF:35:80:3F
X509v3 Authority Key Identifier:
keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4d:95:a6:26:24:e6:85:3a:48:9a:a0:8c:98:82:d2:e0:84:
69:0a:00:7a:d6:13:7d:ab:4e:cf:37:a3:55:4d:7a:95:11:2f:
53:34:24:75:21:fc:5d:db:6d:87:5e:14:93:89:58:2c:ad:be:
8f:a9:fb:fd:1d:b8:56:7b:8c:09:e5:c4:6c:7f:e5:86:7c:75:
44:31:c6:bf:a7:f0:53:e6:2f:21:41:41:55:ff:c9:49:64:69:
82:c6:a8:07:bb:fa:b7:7a:57:0e:6e:99:42:4c:9f:c5:0b:fb:
83:5b:ac:08:37:8e:46:5e:64:5d:1a:ed:19:8e:9b:bb:d7:4b:
de:c6:a1:04:c6:a5:85:d5:1f:d3:a0:9b:ce:59:70:0d:bc:17:
11:6a:ed:a2:06:d0:af:f8:22:4f:a6:3d:cb:45:c9:f3:21:a6:
71:c3:01:a8:a0:67:fc:78:3f:90:f7:c0:24:9d:b0:1c:f1:9b:
ee:b0:d3:40:71:e5:a4:aa:17:1c:a1:49:40:7d:8c:14:b0:1c:
ee:a2:9e:ab:c9:24:7d:0f:e9:31:e0:7e:60:c0:ca:b7:c6:26:
91:bd:01:2d:ec:c2:bb:07:e6:64:b4:32:32:1d:cf:bb:04:28:
9d:bb:2c:ef:e4:5c:62:57:64:1c:04:84:29:17:41:02:43:a1:
3c:06:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:19:11 2025 by rpki-client