Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json)
Hash identifier: 6Q1EJ0ZI4270kx4mFq8edpspyBBEWAn86r47iVdGWyg=
Subject key identifier: 74:0E:A3:25:E8:A5:ED:C7:2A:7B:7C:F6:62:08:94:51:63:DE:F4:7A
Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Certificate serial: 0196CA6047CDD982155696B47AE352BA1931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
Manifest number: 0197
Signing time: Tue 13 May 2025 16:00:29 +0000
Manifest this update: Tue 13 May 2025 16:00:29 +0000
Manifest next update: Wed 14 May 2025 16:00:29 +0000
Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: wwwnJZvC/LW6KLklQtMx3tEgjnfSulyaosgillO3zUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:47:cd:d9:82:15:56:96:b4:7a:e3:52:ba:19:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Validity
Not Before: May 13 16:00:29 2025 GMT
Not After : May 14 16:00:29 2025 GMT
Subject: CN=740ea325e8a5edc72a7b7cf66208945163def47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:65:96:62:04:b9:43:45:3e:0d:ac:97:03:
7e:b5:fb:4a:49:72:1f:f0:7b:b6:d6:dc:57:be:2f:
21:d3:2b:8f:c9:02:95:62:64:a0:7d:3a:09:f7:d6:
6d:54:7c:06:bb:9e:9c:1e:1e:dd:ca:17:e5:aa:48:
21:8e:22:4d:8e:c9:73:50:f7:33:31:5b:9c:d7:e6:
c5:1a:d6:e0:94:ec:87:54:ec:55:0d:da:8a:be:be:
4b:9e:c9:66:44:3d:a2:76:0d:aa:39:c5:32:43:b6:
00:e8:f6:d3:ee:ff:97:3e:d8:26:01:94:1f:4a:67:
d6:93:d9:dd:25:18:65:5b:e1:22:95:53:fb:90:6d:
09:5c:dd:bd:19:85:a8:60:05:51:10:95:97:86:4d:
20:e3:d8:27:a0:83:4b:3a:3d:2e:ca:e3:5a:74:fa:
a0:3f:5b:a7:b2:05:5a:e6:54:de:9d:9d:ef:a5:b7:
5f:e4:41:2a:c7:4f:e4:f8:ef:0d:96:85:0b:29:65:
94:4e:20:51:92:c4:c7:36:84:2a:d7:78:bf:25:b4:
14:87:5d:8b:cd:57:7d:18:0b:50:57:72:c7:4f:6a:
ae:23:07:cf:d2:c1:3f:a1:94:64:43:d0:aa:bc:3d:
c6:79:38:de:af:f9:3e:6f:7b:e1:e8:a5:9c:2c:27:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0E:A3:25:E8:A5:ED:C7:2A:7B:7C:F6:62:08:94:51:63:DE:F4:7A
X509v3 Authority Key Identifier:
keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b2:70:79:ef:e8:8c:4b:31:11:1f:a0:05:cc:d9:be:c7:fb:
14:0c:2f:fe:db:41:19:06:f9:86:ee:ee:3c:dd:db:21:d1:f1:
8d:ef:a4:f3:07:be:ba:d2:c4:e3:fa:72:ab:94:7a:84:ad:b7:
97:2b:99:f0:17:11:4a:10:f1:e7:4b:91:98:56:88:52:31:4d:
e8:c3:3d:f1:ef:27:ab:4a:21:b2:12:08:6a:44:38:95:be:0f:
58:b5:e2:a0:7a:08:c2:f7:f4:9f:2c:95:d1:40:59:71:d4:b2:
10:69:5d:f0:6e:d7:e0:bb:75:62:64:08:54:75:f8:8d:2a:ab:
22:85:49:2a:82:88:20:66:90:08:bd:31:80:0a:df:46:81:6c:
6c:ae:d6:fe:a2:0b:69:b9:0d:5c:c1:dd:f5:89:6e:9e:c6:9f:
b1:db:a1:b0:62:a7:aa:19:bb:5f:6f:99:45:6b:7d:5d:7a:0b:
3d:d3:10:d5:3d:cf:88:5a:af:20:07:da:84:ee:06:a7:6f:6e:
88:34:54:e0:8d:f1:60:29:c5:85:ea:46:21:48:91:ae:f2:65:
18:58:1b:02:b6:f4:53:c0:b0:df:1c:b0:7c:fe:39:d4:b4:16:
a1:9e:3b:00:ed:60:66:c7:e3:0f:5d:b4:88:eb:ac:be:20:95:
4f:91:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:48:24 2025 by rpki-client