Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File: 6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier: wGlkMCmPDmQuPk9pp0s8PZwDpht/n8bluVqwJi2o0ew=
Subject key identifier: 73:CE:E7:29:FA:E5:89:6D:79:41:8C:0B:A9:78:45:1B:7F:01:2D:C4
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer: /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial: 0196D02BBBC31AEB4EC69380F215DDC69FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number: 0415
Signing time: Wed 14 May 2025 19:00:49 +0000
Manifest this update: Wed 14 May 2025 19:00:49 +0000
Manifest next update: Thu 15 May 2025 19:00:49 +0000
Files and hashes: 1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: Yu8iZjEpcHpbeQSHKnSc88TWx1xrSROwogjCRYL2V/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:2b:bb:c3:1a:eb:4e:c6:93:80:f2:15:dd:c6:9f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Validity
Not Before: May 14 19:00:49 2025 GMT
Not After : May 15 19:00:49 2025 GMT
Subject: CN=73cee729fae5896d79418c0ba978451b7f012dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:86:ed:33:a9:dd:f7:21:1b:0a:28:7e:1a:
06:af:c4:d7:fa:7b:20:e4:f4:af:35:aa:2a:82:53:
2c:e6:a7:ac:19:09:61:09:e2:2e:a4:70:cf:e7:99:
41:fc:7c:18:45:20:52:82:16:3f:49:63:57:c7:c0:
9c:e5:b2:f5:30:95:9d:1d:30:86:17:ae:88:7c:ba:
80:5b:c3:4b:e1:95:17:34:03:9b:6f:3d:b0:49:50:
34:91:d1:19:e2:b6:28:44:d3:16:41:e1:14:f7:aa:
d5:60:24:ef:67:b9:95:c8:8c:55:1f:04:b9:82:97:
96:01:13:26:6a:67:83:f8:93:41:64:61:3a:a8:78:
e3:85:8f:7c:1f:34:fa:75:a4:82:eb:cf:26:df:f9:
ca:04:cc:57:6c:ca:99:db:44:94:4d:1e:91:16:75:
54:3f:a2:73:13:6b:99:99:dd:19:69:e3:33:5e:a2:
c8:b4:b4:93:dd:44:0f:ec:e8:0f:f2:ad:8d:b2:ff:
0a:fb:9a:24:1f:fd:70:2a:d9:56:30:83:f5:8d:f5:
31:80:f0:e9:d3:e0:3b:e4:72:64:22:ac:00:2c:7f:
20:d5:1e:61:5d:39:f5:cb:7a:78:6a:7c:55:ee:53:
49:3e:a5:0b:2b:fc:0e:e9:aa:d6:2e:de:98:83:52:
4f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CE:E7:29:FA:E5:89:6D:79:41:8C:0B:A9:78:45:1B:7F:01:2D:C4
X509v3 Authority Key Identifier:
keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:96:e1:13:03:14:c1:d8:4f:a3:da:ed:98:ba:89:58:9c:c9:
e8:34:42:9e:6c:9e:ab:24:61:cc:73:d7:43:51:6e:a3:52:10:
da:ac:5f:73:3d:32:e8:94:df:6e:e4:81:04:93:8b:70:1b:c0:
1d:a0:b2:0a:8a:be:0f:37:c5:f3:06:ef:d2:ec:81:d5:e7:23:
6c:b4:55:e3:d3:c2:b8:03:cf:cf:80:ff:7e:e1:3c:26:8e:c1:
05:d1:81:97:4a:19:8e:6c:c4:5d:da:d0:66:77:a0:e9:30:64:
21:62:59:df:61:01:50:51:9b:b2:7d:4d:bf:29:24:92:0b:1a:
6d:d0:97:02:c2:d7:76:b7:49:65:4e:2d:f6:f6:17:90:be:d2:
05:5e:d6:c9:3b:2d:40:21:da:64:97:b4:e2:20:79:dd:64:3e:
66:e5:93:88:06:f7:8c:68:77:84:0e:ea:da:2e:c4:d0:42:b7:
0f:6c:06:22:f2:72:d2:6e:d9:5d:95:53:e0:64:2f:94:97:a3:
b7:14:77:77:1c:80:ff:c1:66:33:a0:16:dc:f8:d2:1c:45:e0:
48:27:fd:16:35:e5:fd:cc:3d:85:32:dd:a6:9a:03:c7:c3:77:
89:58:a7:56:f4:01:4d:b3:ef:8d:ee:17:9d:d9:ee:4b:dd:de:
1a:3b:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:05:25 2025 by rpki-client