Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
File: a6Cslx0HtTjEP7yK2weeVNMxDg0.mft (raw, json)
Hash identifier: PQehHmVqZ9EN87gSnlRZ4cNmg11zcuUP7gq31N5wCVQ=
Subject key identifier: EA:03:6F:1C:BD:BD:98:01:B5:6E:07:6E:77:97:99:46:C0:EB:01:87
Authority key identifier: 6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D
Certificate issuer: /CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d
Certificate serial: 0196BFDCF4C5B015C4240168ED602AA188F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
Manifest number: 21
Signing time: Sun 11 May 2025 15:00:50 +0000
Manifest this update: Sun 11 May 2025 15:00:50 +0000
Manifest next update: Mon 12 May 2025 15:00:50 +0000
Files and hashes: 1: a6Cslx0HtTjEP7yK2weeVNMxDg0.crl (hash: AgFHBXqaqssJnk7tpoYAaGqOzpb4/hx2kAcs9Tqi+yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:f4:c5:b0:15:c4:24:01:68:ed:60:2a:a1:88:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba0ac971d07b538c43fbc8adb079e54d3310e0d
Validity
Not Before: May 11 15:00:50 2025 GMT
Not After : May 12 15:00:50 2025 GMT
Subject: CN=ea036f1cbdbd9801b56e076e77979946c0eb0187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:31:31:24:a5:3b:4d:7f:ba:ce:2b:79:bb:ce:
c3:3d:3f:2f:3a:5a:99:cb:fc:b4:c7:5e:75:31:27:
72:bc:11:f1:65:e0:38:8e:5e:53:25:84:27:56:67:
27:fa:11:fc:15:8c:0f:0d:a5:7f:49:d5:b2:9f:ca:
40:e4:5c:cf:95:9b:6c:c0:5b:c2:09:38:e4:d8:82:
75:80:a1:2a:48:59:c4:2d:3e:b7:a6:a9:88:0e:7e:
49:76:be:fb:30:6b:f7:4c:24:ac:10:0a:32:b6:fd:
7d:8a:0c:96:c0:54:c0:24:e7:eb:0e:50:03:47:f1:
39:56:a7:32:9e:fc:ba:ac:0b:16:a4:ab:9d:dd:f9:
60:8e:ed:cd:aa:7c:08:59:42:5d:e3:38:d5:31:c0:
cb:ef:69:6f:a2:7a:1b:88:61:58:ec:42:a8:29:8e:
c4:b8:c0:67:c0:d0:32:0f:ab:cd:e7:bb:cc:69:6e:
f8:c9:28:60:84:0a:fe:d2:60:d1:a4:4a:81:72:c7:
91:73:05:ce:5a:16:11:5e:ed:61:0a:ad:2b:c2:c6:
2c:94:b0:fd:f8:0b:d9:07:4a:c9:61:2b:13:c7:c8:
87:3a:91:55:4a:39:a9:29:72:72:18:1d:83:53:48:
2e:6b:60:e1:10:a8:e7:52:8c:7f:e5:7f:f3:f2:43:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:03:6F:1C:BD:BD:98:01:B5:6E:07:6E:77:97:99:46:C0:EB:01:87
X509v3 Authority Key Identifier:
keyid:6B:A0:AC:97:1D:07:B5:38:C4:3F:BC:8A:DB:07:9E:54:D3:31:0E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6Cslx0HtTjEP7yK2weeVNMxDg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4d3540-b790-464f-87e2-18d1e910b925/1/a6Cslx0HtTjEP7yK2weeVNMxDg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:29:71:fc:74:ca:31:01:98:49:78:67:a5:d2:f7:e6:64:07:
fa:a3:fb:c1:41:e3:e7:ff:11:a5:61:cb:b5:c0:7f:31:64:56:
4f:6c:ab:df:d6:04:c1:ce:61:6e:74:25:86:75:b4:90:04:e3:
47:10:d1:d1:10:eb:22:91:d7:b6:a3:21:3a:ca:77:be:ae:f4:
e2:7b:d7:f9:9c:69:28:a3:0e:e8:46:0c:c9:1e:42:81:57:8a:
c1:81:1f:1c:a6:dd:be:97:65:0e:1c:44:5b:68:7c:a9:2d:5d:
7a:0b:d4:ed:d1:d1:71:4a:b2:b9:a5:21:e4:5b:81:c9:06:27:
77:3e:ff:f5:26:a2:4e:92:8e:2c:c7:09:df:35:c5:d2:00:1b:
4b:ac:e2:5a:1b:38:dd:57:4f:4d:2c:25:b0:a4:66:b4:25:e0:
ea:dc:ca:56:70:03:71:f5:6b:ed:dc:c9:89:55:4c:90:1b:9a:
db:cc:ec:98:d3:fe:0b:45:d4:96:ee:a9:63:c3:41:3d:12:25:
ad:6d:e3:6a:82:57:cf:6e:d7:ca:f0:ea:78:08:48:5c:28:7a:
52:fe:e1:fa:5b:63:f4:26:f6:4f:90:5b:46:bd:35:77:da:22:
c0:88:45:d8:3e:da:ca:c0:76:71:f9:82:03:7e:5f:de:ba:9b:
8c:62:ed:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:12:26 2025 by rpki-client