Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a6ccf6-2eaf-40ab-82d8-649d21416ba7/1/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.mft
File: 6QYi0fJ5V53qZ1dBXMIs2bpyrL4.mft (raw, json)
Hash identifier: VmkNYub6sYSh/2DWgfn6SizcHh3xCtTutQKT9D8+HFk=
Subject key identifier: D0:AB:11:91:B3:1C:E7:4B:54:4A:B9:74:56:D3:A8:39:7C:DE:0A:D6
Authority key identifier: E9:06:22:D1:F2:79:57:9D:EA:67:57:41:5C:C2:2C:D9:BA:72:AC:BE
Certificate issuer: /CN=e90622d1f279579dea6757415cc22cd9ba72acbe
Certificate serial: 0196C15D6F412BCFED4C0B09577A8BC5FF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a6ccf6-2eaf-40ab-82d8-649d21416ba7/1/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.mft
Manifest number: 0602
Signing time: Sun 11 May 2025 22:00:47 +0000
Manifest this update: Sun 11 May 2025 22:00:47 +0000
Manifest next update: Mon 12 May 2025 22:00:47 +0000
Files and hashes: 1: 6QYi0fJ5V53qZ1dBXMIs2bpyrL4.crl (hash: khZZtB4dE2SPKEIhfYOl5vdWpTdhoihMjSHDjJ6jcBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a6ccf6-2eaf-40ab-82d8-649d21416ba7/1/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a6ccf6-2eaf-40ab-82d8-649d21416ba7/1/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:6f:41:2b:cf:ed:4c:0b:09:57:7a:8b:c5:ff:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90622d1f279579dea6757415cc22cd9ba72acbe
Validity
Not Before: May 11 22:00:47 2025 GMT
Not After : May 12 22:00:47 2025 GMT
Subject: CN=d0ab1191b31ce74b544ab97456d3a8397cde0ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:bc:31:57:5d:8b:4b:54:a7:a8:7e:0d:b4:
a4:6a:ac:3b:c9:ed:40:b7:3c:c8:fe:14:93:05:e0:
29:40:ce:0c:a2:9a:f8:3d:e3:cb:5a:37:e3:e3:93:
94:6b:9f:78:74:27:9b:7f:6d:94:a8:58:13:63:65:
ed:f7:3a:eb:91:29:6f:c4:ae:f2:ae:f6:ca:17:34:
cc:31:06:67:88:fb:6b:db:d0:26:17:21:4e:60:f2:
80:7a:27:ee:21:74:44:b8:52:a0:a7:9f:51:29:d7:
dd:41:bf:05:b7:8f:4a:19:41:84:36:4a:10:e3:20:
6c:1f:7c:91:f8:66:17:76:b8:7b:a6:ad:62:32:58:
9d:e8:a0:c5:67:d9:de:c0:38:e5:c9:db:18:a0:02:
c7:47:04:bc:49:99:ed:d5:6a:1f:66:d4:28:a9:f7:
da:78:13:6a:c1:7d:cf:b9:be:db:5b:d4:84:3b:79:
10:19:b6:75:1c:b8:ff:7f:86:09:a7:64:7f:04:63:
79:cf:b3:1a:2a:ac:1c:69:88:1c:ce:76:5b:e0:1a:
4d:48:7a:26:09:b7:9a:4d:ac:1a:82:7d:31:3a:b7:
a7:a0:96:06:98:a2:0e:d8:af:89:cc:2d:bc:14:24:
63:d8:6b:70:ea:3a:27:0d:b8:59:f4:0e:05:f2:2b:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AB:11:91:B3:1C:E7:4B:54:4A:B9:74:56:D3:A8:39:7C:DE:0A:D6
X509v3 Authority Key Identifier:
keyid:E9:06:22:D1:F2:79:57:9D:EA:67:57:41:5C:C2:2C:D9:BA:72:AC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a6ccf6-2eaf-40ab-82d8-649d21416ba7/1/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a6ccf6-2eaf-40ab-82d8-649d21416ba7/1/6QYi0fJ5V53qZ1dBXMIs2bpyrL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:62:23:59:f4:51:84:13:54:1d:2d:f1:a6:f7:01:bd:85:d1:
b7:7a:77:c9:a3:df:f2:cd:12:ad:c2:67:ea:3c:bc:04:17:0a:
e5:ac:5e:f1:40:2b:91:6a:88:cf:df:ed:58:cf:cb:b9:41:ae:
6a:dd:67:dd:31:0c:28:94:2f:8d:74:9b:eb:6b:93:32:3d:26:
5b:78:48:9f:8e:2c:fc:02:08:6a:26:2b:7d:e9:38:c4:64:01:
d5:ab:93:c5:00:d9:3a:5c:0a:de:2b:17:b8:b8:12:1e:85:3d:
3e:9d:47:0d:e9:10:4b:5a:26:b6:3f:f8:93:64:34:5a:b8:a3:
65:51:5f:bb:dc:ba:54:53:59:04:fd:0a:b0:62:dc:68:f6:b8:
ba:70:75:e1:50:4b:29:76:03:59:d5:20:22:30:7c:ac:37:6f:
b2:08:5a:c0:6f:77:31:ec:49:40:81:05:46:b8:9a:e0:fd:c0:
32:7d:a1:99:1f:72:20:79:a0:b6:c3:09:d3:2a:b5:23:cb:26:
a3:ad:cb:bc:4f:40:22:1f:14:02:ed:ad:8a:71:26:84:1b:ad:
79:2e:2d:3f:e5:72:15:be:97:f2:7b:22:7e:30:bb:cc:08:e4:
1f:11:72:23:92:92:44:ed:9b:a4:ca:ae:22:e7:7d:38:f0:ca:
6b:a8:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:28:24 2025 by rpki-client