Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
File: a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft (raw, json)
Hash identifier: VF2Lv+ETzoaZ5a9yZ2aIJNS30II7JIJr+CAj3rGuZOc=
Subject key identifier: 3A:2E:F7:01:2F:9D:12:2B:01:B2:1D:37:77:42:71:B2:1B:FA:7F:40
Authority key identifier: 6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
Certificate issuer: /CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Certificate serial: 0196B9A481C2AD538F9A9A65556B17C3DBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 10:01:28 +0000
Manifest this update: Sat 10 May 2025 10:01:28 +0000
Manifest next update: Sun 11 May 2025 10:01:28 +0000
Files and hashes: 1: a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl (hash: BTQMKLBJVWIx85uxlgVN2GcuVHyJjTTvQEYa2Hklf18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:81:c2:ad:53:8f:9a:9a:65:55:6b:17:c3:db:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb0cb2ae46d2382581fe8b747e331b46824f41e
Validity
Not Before: May 10 10:01:28 2025 GMT
Not After : May 11 10:01:28 2025 GMT
Subject: CN=3a2ef7012f9d122b01b21d37774271b21bfa7f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:0d:fd:20:74:d8:49:de:28:6c:0c:91:87:
99:92:04:55:6c:8c:24:86:61:04:ee:bb:ec:44:28:
5f:a2:01:4f:9d:dd:9d:84:f8:41:8e:b2:97:08:f8:
a1:33:15:e7:fd:29:a3:b8:7f:73:ae:dd:d0:d0:18:
67:62:ba:d2:ef:b7:cf:51:33:37:0d:ff:72:fc:b9:
69:0d:3a:2b:35:65:00:3e:d5:c3:b0:a7:02:7c:c8:
1d:bf:51:22:0c:6b:31:ce:c5:22:5b:01:8a:5f:02:
55:80:49:ec:1b:12:bd:f4:3f:d0:80:6d:68:f8:e3:
5c:6e:a3:16:3b:d9:eb:02:9e:a8:6b:ff:03:c8:f0:
4d:d4:e5:db:c1:7f:85:87:2d:65:b2:22:0c:66:01:
c0:aa:4a:fd:75:9d:5a:23:20:c5:e5:ce:d7:86:02:
bc:cd:12:00:f4:c7:b9:61:b8:1d:8f:4a:19:e5:bc:
ad:66:b1:37:06:f3:eb:0e:b4:88:33:cf:cf:fe:c4:
03:56:31:43:96:ba:0b:93:49:57:e7:d5:24:20:40:
56:d9:85:73:6e:4d:ae:d1:41:74:d4:dc:d0:28:5d:
96:8b:cd:f7:88:56:07:5d:6f:7a:e7:50:ad:4d:66:
cf:b1:ed:28:42:58:85:e3:1a:33:54:d2:2a:36:f8:
1b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2E:F7:01:2F:9D:12:2B:01:B2:1D:37:77:42:71:B2:1B:FA:7F:40
X509v3 Authority Key Identifier:
keyid:6B:B0:CB:2A:E4:6D:23:82:58:1F:E8:B7:47:E3:31:B4:68:24:F4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7DLKuRtI4JYH-i3R-MxtGgk9B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0f6c5f-eaf9-46ce-9e16-f290c563ff50/1/a7DLKuRtI4JYH-i3R-MxtGgk9B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9a:ba:83:bc:09:f4:69:83:72:48:26:47:4f:37:42:b2:cf:
99:c7:e2:bd:e4:c0:40:44:61:cc:a0:79:c7:78:a9:74:74:dd:
ee:50:c3:7b:c9:b7:1a:09:cf:62:b4:6e:df:b7:82:e9:f2:1f:
69:82:e8:3d:9a:d0:fa:1b:ba:cf:da:d0:df:30:f6:a0:41:16:
09:59:fe:62:22:4a:e1:e4:01:0a:c5:58:8c:dd:0f:23:9c:bc:
77:d6:8d:a2:13:8b:aa:b1:6b:ce:dd:94:f1:73:d3:f6:ec:e9:
65:5f:bc:b7:f5:06:86:8b:1b:22:1a:5e:4c:65:89:7c:dc:1e:
35:8a:25:00:01:a5:b2:2c:58:dd:ca:d1:ca:b2:4a:8f:9a:6d:
0f:d0:a0:4f:61:7d:d1:90:92:87:fe:c0:1e:97:03:84:9a:e0:
14:d0:4c:2d:a7:3c:41:2b:f0:11:14:88:44:36:7c:68:6e:e4:
62:c6:27:a6:c4:94:63:10:31:50:87:e8:79:64:6b:c3:70:4c:
b9:6b:ca:c1:4b:f0:6a:89:e1:3c:29:3c:a9:87:a2:cb:1e:ff:
6c:ed:54:b3:cc:39:59:97:bc:0c:62:5e:37:2c:04:43:74:99:
a7:e8:98:50:b0:f7:f6:81:7a:1f:d4:94:14:e5:55:da:e8:61:
35:b8:bd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:30:33 2025 by rpki-client