Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: Y3HXjcft4xZMxr9T47qYNNKqNI7s8HL690zoecyaevY=
Subject key identifier: CE:6B:F7:A8:C1:1D:E7:32:B2:3F:D2:FD:81:66:69:7D:58:16:85:E3
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 01968058F40D28F1851B6AB45D3DCA0B5EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 07:00:35 +0000
Manifest this update: Tue 29 Apr 2025 07:00:35 +0000
Manifest next update: Wed 30 Apr 2025 07:00:35 +0000
Files and hashes: 1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: us1aomWxmSk5m60sbCd7Hc6QTcySGBCafmFLMMz1KKk=)
3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:58:f4:0d:28:f1:85:1b:6a:b4:5d:3d:ca:0b:5e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Apr 29 07:00:35 2025 GMT
Not After : Apr 30 07:00:35 2025 GMT
Subject: CN=ce6bf7a8c11de732b23fd2fd8166697d581685e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:db:cb:91:ce:2e:71:25:02:84:5b:8c:cd:
b4:6a:8c:5b:eb:e4:54:9a:1d:1c:b0:a7:15:79:b5:
53:80:21:5b:13:b6:36:50:08:dd:df:16:df:ec:15:
24:37:69:38:ff:b7:1a:0c:97:58:87:fd:b0:bb:b8:
c6:e3:d1:e9:b0:6b:43:86:2f:59:5a:46:84:f0:b0:
70:25:71:b7:d6:4e:86:95:8a:0d:f2:69:a0:61:f9:
b3:c9:ab:57:b6:84:f8:44:60:32:ba:3c:6e:0e:22:
79:af:63:fe:83:60:20:47:d0:af:ce:fb:a4:e4:cd:
e2:c5:f3:33:a7:c3:66:b8:5a:41:df:09:85:db:f3:
46:33:5b:af:90:ba:ac:2c:1b:cc:40:4d:28:b5:fa:
13:d7:33:69:3f:9b:02:1f:f4:e3:f7:ba:16:43:e6:
72:0c:04:fe:84:30:73:fb:fc:be:30:9a:37:46:4e:
97:5a:b2:c6:c2:fc:1a:8e:c8:1a:ab:ce:4f:d5:3e:
79:b1:97:dc:ef:91:1c:c2:ba:60:d4:b4:d0:60:0f:
c3:4d:66:03:bb:7e:f0:92:50:a2:7b:d2:bb:d3:3b:
59:4c:3b:a6:fa:eb:7b:e1:6f:30:48:0d:9c:06:06:
7c:8d:86:ee:80:00:78:78:2c:d7:c1:53:ee:5e:62:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6B:F7:A8:C1:1D:E7:32:B2:3F:D2:FD:81:66:69:7D:58:16:85:E3
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:61:01:10:d6:57:25:04:a1:44:79:02:f8:f6:45:2f:29:7b:
1c:aa:ad:3a:dd:45:66:df:86:04:f2:8b:02:c7:8a:f3:0d:2c:
d7:b9:3b:db:43:f3:3f:21:02:93:c7:b3:9d:ca:62:9e:ad:e6:
4d:a4:b0:f4:ef:ba:a0:7f:27:35:b7:df:b8:d7:21:0b:32:3a:
87:99:2c:91:3a:99:cb:a0:72:03:a4:2f:f0:d2:43:27:0f:19:
19:ff:1e:e6:dd:6a:65:8c:e3:fa:8a:52:e6:0b:e8:3f:8a:f8:
16:d7:54:e1:e1:c0:2e:8d:a9:b4:d6:7e:16:ea:85:b8:6d:a1:
53:d9:d4:d8:21:7e:e1:9d:95:df:fd:b3:f6:7f:9d:14:61:bc:
60:3c:d1:df:ec:79:93:27:65:00:25:b6:9e:3c:ab:03:fe:39:
d3:80:25:f8:e6:f6:78:b5:88:9f:77:a8:88:42:e2:81:35:88:
4a:d1:fa:eb:d9:13:1d:c0:56:60:ee:79:10:ed:dd:ed:e1:6a:
f2:3f:d6:98:41:9a:97:4a:b4:45:a7:ee:fa:55:0d:38:da:ca:
fe:f3:45:59:37:05:af:72:52:97:cb:c0:5f:3f:f0:38:ae:a2:
8d:7a:2a:ab:83:4c:65:c7:85:7b:20:a1:6a:6b:b4:98:05:c5:
ee:8c:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:54:24 2025 by rpki-client