Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: FuPofmHR2jDPJiBO/FbBv4z73vhjcVvalJzBnI9+KtM=
Subject key identifier: AA:98:4C:46:63:17:D6:E4:1A:D2:0B:A0:DE:22:65:1F:2F:31:18:BC
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 0196760C48BA3A9CE5678F256855C2D0FAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 060C
Signing time: Sun 27 Apr 2025 07:00:38 +0000
Manifest this update: Sun 27 Apr 2025 07:00:38 +0000
Manifest next update: Mon 28 Apr 2025 07:00:38 +0000
Files and hashes: 1: casId6bSRHTNn5PL96DuG2TJvlE.roa (hash: L+JMLEBjCTLo3pT1VkKD/pB+PbvKkE5XXjy3KroLN1g=)
2: kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa (hash: 1P+cwreujhRRyFPgrb8zcY4I1d2u+NU9now7YdN+EEs=)
3: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: b6l/fVm5ir9hso24e48yYt8cAta61fl8p6wlRP8LO5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:48:ba:3a:9c:e5:67:8f:25:68:55:c2:d0:fa:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Apr 27 07:00:38 2025 GMT
Not After : Apr 28 07:00:38 2025 GMT
Subject: CN=aa984c466317d6e41ad20ba0de22651f2f3118bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:82:77:d6:60:fc:c0:12:87:3d:7a:11:8b:
88:b7:ef:0a:09:2c:82:71:a8:f4:ca:12:c1:39:bc:
8b:35:17:cd:f5:f4:02:d9:6b:1e:0e:42:d7:14:8a:
e5:65:da:a0:6f:38:20:a4:8b:b3:c5:1e:5c:c6:50:
82:44:a6:95:ea:a2:a9:81:e1:a2:ea:3e:5c:02:67:
df:60:a7:81:81:1d:97:1f:dc:c7:94:bb:32:2a:b4:
09:dd:4e:86:9b:31:a4:20:67:ab:ae:b5:e6:27:74:
24:24:97:a6:bf:b7:4a:ae:02:f1:b7:92:1b:38:d1:
b4:14:64:35:c3:4d:b8:af:6b:53:f6:47:0e:b7:aa:
9b:31:57:f7:7c:f0:47:a1:f1:24:c7:f1:5a:26:49:
8b:33:0b:17:33:27:ee:f3:74:ac:20:14:49:2a:60:
a0:a1:a2:a9:e7:a3:7a:d1:5a:95:a9:6a:79:9d:a2:
44:4f:9f:88:03:10:95:c4:55:2d:4d:a9:3c:86:0c:
ee:59:82:3b:74:fa:be:03:ed:7d:f6:37:c8:2b:af:
83:2c:eb:c5:fe:38:b2:63:4f:7c:07:9b:0a:5d:02:
a5:2d:1e:8f:60:ff:40:c4:76:f8:4e:bd:d4:d0:8f:
98:59:a5:eb:87:a7:29:28:51:10:76:c3:18:b8:73:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:98:4C:46:63:17:D6:E4:1A:D2:0B:A0:DE:22:65:1F:2F:31:18:BC
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:50:26:f4:98:d6:15:90:d7:ba:64:29:a7:4d:c6:56:4d:e8:
41:8a:cb:a3:1d:85:da:64:1b:6b:ee:2b:70:0a:3e:6b:15:f2:
ea:31:75:ec:f6:d8:e7:65:e7:03:1d:04:0a:7e:1d:60:b4:9f:
4b:92:03:1d:a0:94:b2:0e:d1:05:4b:04:d2:c5:d1:74:93:a3:
14:ea:c6:89:3f:53:d4:f5:26:55:c2:e7:11:33:f1:ef:0d:52:
54:28:a1:85:fa:3c:da:31:e2:99:23:36:be:98:a4:67:57:25:
5c:27:9a:ed:45:79:38:bd:24:32:a9:4a:da:da:66:7e:2b:e3:
9d:d6:06:19:1d:c3:74:33:2c:aa:c7:a8:fa:aa:a4:a9:9f:80:
71:9d:12:e7:fb:fe:5f:b0:20:41:83:fd:37:60:c2:c3:76:58:
72:74:7b:2a:96:48:38:6b:5b:46:de:90:e0:59:11:31:da:0a:
c8:62:ac:66:fa:78:ac:01:80:cf:eb:1b:74:ca:41:53:76:3c:
e6:86:33:dc:d2:69:7d:57:46:c1:62:e2:d5:69:ce:8a:cf:b5:
fc:04:5a:c8:03:c5:e4:18:a3:29:fe:39:cc:98:d2:f7:8c:dd:
6a:3b:ff:dc:92:30:38:15:c8:fe:9c:8c:2e:f5:8e:3f:1e:69:
e0:48:57:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:37:12 2025 by rpki-client