Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
File: l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft (raw, json)
Hash identifier: csEsfxp4gDKfpO/yzQrP7Oz7i9IXi5bIYVkljLo5QSM=
Subject key identifier: 6A:8A:CB:C7:B2:9D:03:5D:96:FF:26:D1:52:39:8E:C6:36:21:F3:98
Authority key identifier: 97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
Certificate issuer: /CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Certificate serial: 01969F760164A18F068CE93378F60874A6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
Manifest number: 0C06
Signing time: Mon 05 May 2025 08:00:33 +0000
Manifest this update: Mon 05 May 2025 08:00:33 +0000
Manifest next update: Tue 06 May 2025 08:00:33 +0000
Files and hashes: 1: l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl (hash: QaWOUcyyG1Gdrcn8c4uciOXUgX6zP2VAfuNPLFu7f90=)
2: rAptMRvSUdwv73c1hrV9bfbr3Yk.roa (hash: M82hA2K7N0hc5dPJhXNevznbaSP5bAh4nu7+zgBVgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:01:64:a1:8f:06:8c:e9:33:78:f6:08:74:a6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9760fd5864826805cf3655eeeb2fb898f36d9821
Validity
Not Before: May 5 08:00:33 2025 GMT
Not After : May 6 08:00:33 2025 GMT
Subject: CN=6a8acbc7b29d035d96ff26d152398ec63621f398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:0a:89:09:69:55:be:0c:d6:95:8a:97:9c:
bc:a6:4f:f2:c9:f7:1a:66:e9:fd:86:da:cf:b6:81:
0a:5b:ec:5d:7f:be:f3:5a:e3:2b:ef:ae:ec:51:7e:
b9:67:18:ed:cc:e1:94:b5:f8:2b:be:ce:0d:50:b7:
ff:c8:ce:22:d8:c6:b1:38:83:94:2f:ff:53:99:1e:
f2:68:d8:09:75:bb:c7:a1:5d:d0:8d:ae:52:7f:b3:
03:bb:65:84:b6:8e:05:c1:69:d3:74:74:73:fc:1e:
4b:3d:35:24:47:7a:f3:42:1e:42:5e:94:a7:97:fa:
6d:a7:8d:e4:6f:55:07:24:2a:c6:47:53:01:38:0e:
0f:ed:37:a4:e9:4f:01:7e:79:b9:5d:17:a1:98:76:
6d:b8:fe:37:17:1e:96:7d:b4:19:30:f8:2c:9d:66:
6f:3e:c8:3a:0a:c0:c6:14:3c:f2:ee:72:e7:8e:3d:
50:f2:a7:2f:1b:ee:56:36:69:1f:4c:e0:2d:68:ca:
22:1e:4c:7b:49:f3:72:9a:13:d2:82:18:fc:a9:07:
d2:98:20:1d:34:9b:83:f9:9c:74:5a:f3:81:61:19:
91:62:fb:84:14:fa:90:e7:a1:2b:3c:d9:0c:55:ec:
fb:c8:b6:d0:38:c4:b6:1c:5d:86:69:4d:c0:7d:ac:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8A:CB:C7:B2:9D:03:5D:96:FF:26:D1:52:39:8E:C6:36:21:F3:98
X509v3 Authority Key Identifier:
keyid:97:60:FD:58:64:82:68:05:CF:36:55:EE:EB:2F:B8:98:F3:6D:98:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l2D9WGSCaAXPNlXu6y-4mPNtmCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a29c9a-ca4d-4000-8ff3-d9a104404aaf/1/l2D9WGSCaAXPNlXu6y-4mPNtmCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:00:70:c6:0f:f1:0a:65:6a:ce:d6:23:2d:e4:eb:e7:30:f3:
9b:59:68:56:5f:e2:e7:b9:7d:d6:8b:71:b0:40:b1:c1:7c:c3:
d3:8f:51:60:15:7e:28:b6:4b:5d:2a:03:02:c7:9f:88:e9:8b:
02:5e:f5:93:4d:4d:20:5f:f2:73:b7:f3:b4:52:7c:ca:84:7d:
41:86:56:a6:7b:d6:7b:a4:50:06:f9:b1:19:f9:0d:8c:54:60:
a9:89:9d:aa:91:1a:e6:c0:9f:c1:ab:e9:82:29:f2:32:25:6f:
3e:8d:1c:f0:de:a3:9d:27:c7:0e:0a:8c:64:f9:be:50:a8:e3:
f9:9b:b3:0f:21:1e:27:ff:0c:9a:5c:75:b0:93:82:fa:60:17:
66:0b:e2:27:2a:12:63:10:8a:0f:75:c4:d8:a7:f3:3f:39:e1:
01:44:a7:33:79:1b:91:a1:2f:cf:80:e4:ec:32:0e:9c:f7:d9:
6d:55:bb:8e:e2:40:43:52:61:46:aa:06:07:b4:f4:f2:7d:c7:
e1:d2:d7:af:2b:6e:22:c3:9c:5f:e3:98:4c:92:16:10:b1:c5:
a3:f1:3b:ee:48:23:de:42:07:c4:f1:24:fe:15:38:3e:1a:4a:
40:45:e8:91:54:58:c5:c1:2f:97:22:b2:5f:5a:49:54:4c:98:
4c:dc:bb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:37:30 2025 by rpki-client