Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier: Av+Rsj5SP2ML/5c9oUUnu/voPbcYROeao/edXPtUeFA=
Subject key identifier: 0A:18:C6:2B:46:2C:29:F3:DB:35:32:85:D9:B2:8B:D4:7E:30:E9:78
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer: /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial: 01969CACDD3C1D765E0DA4A968D382BF2E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number: 0CB9
Signing time: Sun 04 May 2025 19:01:36 +0000
Manifest this update: Sun 04 May 2025 19:01:36 +0000
Manifest next update: Mon 05 May 2025 19:01:36 +0000
Files and hashes: 1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: ZbzXdwJ3Z7pHuBkvgh/8rgUQRQkK+KIjaeu/Oj8H5ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:dd:3c:1d:76:5e:0d:a4:a9:68:d3:82:bf:2e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Validity
Not Before: May 4 19:01:36 2025 GMT
Not After : May 5 19:01:36 2025 GMT
Subject: CN=0a18c62b462c29f3db353285d9b28bd47e30e978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:28:a8:c2:1c:a3:76:7a:89:1f:58:6f:12:d7:
e6:02:27:9e:b1:ab:ad:0c:47:ca:59:f2:b9:c0:40:
30:c2:b6:77:cf:e1:91:e1:be:2c:74:0b:53:b5:cc:
67:05:a3:45:a4:b8:0f:67:18:16:db:d1:c7:4e:a2:
f1:1c:74:d5:6b:98:28:bd:4d:a2:f3:c7:49:06:03:
95:d1:f0:06:9f:c0:4d:4e:d2:ca:c1:c5:52:2c:3e:
a7:40:dd:0c:39:05:d2:81:e9:ee:30:77:0f:cf:10:
42:0c:a1:f6:30:24:f1:07:2b:91:95:71:cb:08:1e:
cb:f2:0f:51:a1:e6:34:c9:a5:67:12:bb:e7:06:a0:
7f:1a:70:54:50:45:ec:4f:45:b7:21:94:15:ed:2a:
6d:01:dc:01:92:84:ee:25:fb:95:33:91:e4:83:4a:
6a:6d:00:12:a6:c3:fc:2e:bd:34:a9:c7:d9:cc:df:
e2:de:ad:c9:91:18:ba:52:2a:d8:25:4b:4a:c1:43:
be:fb:74:b4:6a:a3:b1:cf:f2:52:29:e6:9c:9d:bc:
4e:b6:43:28:fc:80:a3:80:10:89:f2:76:8f:75:8e:
ff:21:76:2a:e3:a5:22:f8:a3:65:65:bc:3f:6f:99:
40:05:59:29:22:d4:5b:5b:4f:95:42:36:0c:9e:9c:
18:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:18:C6:2B:46:2C:29:F3:DB:35:32:85:D9:B2:8B:D4:7E:30:E9:78
X509v3 Authority Key Identifier:
keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:92:08:e4:af:74:e6:c5:b5:81:f9:52:84:db:79:94:03:
55:38:f4:77:20:19:9e:b2:1d:24:5c:ca:30:6c:73:81:3e:ae:
36:0f:55:b5:e1:a5:7b:05:af:ef:89:65:0d:9a:5c:6f:f2:8a:
52:f0:65:e8:5b:f8:8c:3b:a9:82:33:e8:32:ad:7f:67:31:85:
d0:d1:b9:35:97:dd:38:55:c7:a5:e8:59:f9:f7:a2:4e:35:af:
e7:8f:f8:61:60:72:0b:5e:0b:52:a3:44:67:00:bc:8c:90:6e:
df:6b:ea:d2:62:65:34:0d:37:3a:cd:a9:3e:29:80:47:07:9f:
1f:33:e8:b0:f6:71:9f:d6:38:fb:ad:c8:60:d9:97:50:f7:e8:
2b:dd:d3:5f:2b:5b:38:4a:51:50:96:b5:07:82:3c:9a:2c:3b:
61:eb:15:b4:a7:fb:d1:04:1c:d7:4a:c5:3b:fa:c2:e8:d7:0a:
64:a8:49:c5:65:56:85:de:61:dc:a7:62:0e:93:0d:d2:a6:7d:
59:05:ee:c8:bd:96:c9:db:4f:77:e3:7d:04:81:29:9e:99:5d:
b0:11:a2:80:bb:8c:25:d1:50:8e:65:83:56:1f:de:91:29:a1:
15:6e:9a:86:6f:d4:b9:e2:27:1f:35:33:1e:87:af:07:fd:d8:
9f:d2:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:40:35 2025 by rpki-client