Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: 8HDQ755JItApwZ/5CC5wmWyVgJ/IbRoWI1kULbur6bc=
Subject key identifier: 23:DE:6D:47:93:6D:D1:42:A9:2A:B3:70:78:EF:E4:6A:BD:B3:DC:38
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 01967DFCD95AFC7D11465B67F6C841E99162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 0D10
Signing time: Mon 28 Apr 2025 20:00:44 +0000
Manifest this update: Mon 28 Apr 2025 20:00:44 +0000
Manifest next update: Tue 29 Apr 2025 20:00:44 +0000
Files and hashes: 1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: pttmqXCAQ2NO9wlA5oGvwvXQmAl1H15ZAztDcKfEZhM=)
2: ProilHJF12XNjqluZhoel5qmzGE.roa (hash: vqODFTpOMw/oRhmj5asnKLbaDrVfLd9DrvwDm7QE1Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:d9:5a:fc:7d:11:46:5b:67:f6:c8:41:e9:91:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: Apr 28 20:00:44 2025 GMT
Not After : Apr 29 20:00:44 2025 GMT
Subject: CN=23de6d47936dd142a92ab37078efe46abdb3dc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:79:cc:95:40:05:88:fe:da:42:9f:a5:a1:
7e:a4:03:7c:1d:c3:85:e3:e9:00:80:80:36:1a:5c:
73:e9:c3:45:72:8f:3b:20:90:5e:a0:e0:81:68:39:
9c:92:24:56:24:ac:b8:bf:91:de:4c:03:1b:0c:e2:
64:ab:b5:1d:2b:d4:78:c3:03:08:b2:80:f0:3b:6b:
c6:54:6b:da:d9:a8:9f:88:0f:87:2a:da:98:11:23:
b4:aa:cd:01:12:e5:80:d3:d2:23:96:5a:48:17:90:
5a:f3:f1:a3:65:af:7b:8e:ef:80:5d:2e:be:3b:fc:
0f:58:00:42:05:79:03:81:4b:33:16:8f:42:e2:c7:
c3:21:90:4e:9c:c3:97:5f:cb:71:5f:e4:61:ae:40:
43:50:00:83:49:5a:a7:26:ea:34:ec:e6:f4:d4:84:
35:b6:24:ee:c8:44:cf:94:89:ea:39:24:ef:7f:60:
9e:bb:6e:e3:6f:ab:8a:be:52:89:2b:a0:ac:40:5a:
07:9c:c9:93:c5:f9:6c:f1:09:ff:d3:e5:1a:f5:63:
c9:fc:82:7d:4e:b5:05:c7:6e:84:6d:2c:8a:c9:e6:
2a:c8:aa:f7:c5:9b:0f:2a:ab:ed:5d:6a:db:ef:3f:
13:e4:6b:c3:d4:89:0f:68:a5:2e:9c:15:8c:ed:21:
eb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DE:6D:47:93:6D:D1:42:A9:2A:B3:70:78:EF:E4:6A:BD:B3:DC:38
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:23:91:1d:79:95:8a:29:2d:d7:a1:b0:4f:db:22:8c:d3:d5:
31:c3:eb:e1:8f:74:f6:e9:17:9f:89:87:85:70:e2:be:c8:07:
93:a5:b5:a7:e6:df:cc:67:6b:34:03:34:9f:e4:06:48:23:42:
80:0e:82:76:1b:00:06:22:ab:f2:dd:e0:79:58:d8:e1:94:85:
8d:80:f7:f8:46:d1:9c:c6:4c:ac:32:05:d5:6f:9a:9a:0a:a2:
2d:d7:9b:57:5f:b7:b3:84:33:1a:b9:c2:9e:17:b4:14:2d:5c:
30:78:34:28:30:46:ab:c4:cd:1d:a5:26:44:29:f1:ab:68:4c:
9e:c8:e5:ed:70:52:6f:d5:d6:74:8b:b6:55:00:4a:95:69:ee:
46:f7:a2:60:22:2b:8b:fe:ab:31:e2:47:a6:d1:da:9d:f3:3d:
7b:d8:b3:f1:c6:c0:0d:6f:d9:77:8f:76:04:db:6d:3d:02:6c:
cd:ad:28:04:1a:c0:e3:83:bc:0e:33:1b:65:0d:5f:20:43:2d:
4e:f1:48:cb:d1:ac:32:c1:20:58:13:ab:68:11:26:9c:d2:85:
0e:1c:89:b4:1c:09:5c:2d:c3:a7:98:b0:36:3d:9c:3c:08:a3:
23:e1:30:3d:31:81:45:f4:ab:40:e4:40:05:19:44:c0:86:16:
f0:46:92:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:47:38 2025 by rpki-client