Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
File: 6ch0aZeAldiv9jJygEuy810UkQM.mft (raw, json)
Hash identifier: oXbUEBSGZEkC40ZaKG/xXurCMEd91QcaQcWIVFEi7cM=
Subject key identifier: D0:E2:9F:96:DE:6D:5E:BA:6B:52:80:C0:99:01:6D:70:29:78:14:6A
Authority key identifier: E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
Certificate issuer: /CN=e9c87469978095d8aff63272804bb2f35d149103
Certificate serial: 019683C7FBC5A7ED9B52A0216759D51B285B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
Manifest number: 0851
Signing time: Tue 29 Apr 2025 23:00:43 +0000
Manifest this update: Tue 29 Apr 2025 23:00:43 +0000
Manifest next update: Wed 30 Apr 2025 23:00:43 +0000
Files and hashes: 1: 6ch0aZeAldiv9jJygEuy810UkQM.crl (hash: DO02y8pUEpYpnPW9AsJwiOEbkQRdB7cjSbAZcClW9kk=)
2: zUJ5qWVbr4pmer3m739HNMffZjg.roa (hash: NJqHyM9HbL1+6lpUhrutNRFZX2Z30cCNuSy/2q+fWs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:fb:c5:a7:ed:9b:52:a0:21:67:59:d5:1b:28:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c87469978095d8aff63272804bb2f35d149103
Validity
Not Before: Apr 29 23:00:43 2025 GMT
Not After : Apr 30 23:00:43 2025 GMT
Subject: CN=d0e29f96de6d5eba6b5280c099016d702978146a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c3:be:bf:03:ef:22:c7:07:4b:0d:46:c6:a4:
d7:d6:2b:5a:cc:67:a9:d7:3c:44:05:4e:1a:3d:fa:
82:56:ef:1e:f4:d0:5e:ac:f8:d0:9f:d6:4b:6a:35:
99:7b:6d:fb:53:c8:a3:83:ff:fc:80:aa:af:23:6e:
ef:25:f6:6d:2d:bb:61:3f:10:75:51:1c:61:5c:69:
69:e9:30:5e:2d:f9:09:68:b1:b7:fa:67:88:d2:40:
87:74:62:b3:23:5b:64:1d:5b:4b:be:44:24:fc:74:
c8:0e:55:7f:e0:06:73:5a:b7:2d:4b:5d:84:39:59:
f8:c0:00:d6:74:e0:62:f2:e0:f5:ab:9b:dd:aa:a5:
5a:d1:a0:e1:f2:5e:e8:29:5c:10:1f:b0:f0:da:a1:
e7:88:e4:59:8a:e3:54:85:1b:97:81:3d:07:49:57:
b4:7c:ec:25:cc:7d:be:83:21:54:5e:79:c4:b0:64:
99:e8:9c:aa:b0:c8:ee:69:47:52:28:1f:e2:8b:da:
1a:cc:c4:2e:b3:3e:bb:c3:24:06:0d:60:6b:44:87:
a8:43:53:86:a3:a7:19:21:fa:46:f0:6f:53:b6:2f:
6e:1c:3f:7b:d7:69:6c:96:fa:27:23:a1:31:8f:69:
66:93:27:e7:93:9f:ab:c9:e1:49:0f:50:4f:b5:99:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E2:9F:96:DE:6D:5E:BA:6B:52:80:C0:99:01:6D:70:29:78:14:6A
X509v3 Authority Key Identifier:
keyid:E9:C8:74:69:97:80:95:D8:AF:F6:32:72:80:4B:B2:F3:5D:14:91:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ch0aZeAldiv9jJygEuy810UkQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9ad9dc-b84c-4a59-bb1c-0cc3b4caf683/1/6ch0aZeAldiv9jJygEuy810UkQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:49:ff:85:98:5b:75:ef:c7:9d:b0:b5:4f:7d:51:5e:d9:66:
2d:62:51:7a:20:56:d8:57:82:67:08:13:46:bc:15:08:4f:d6:
af:02:1b:fb:87:76:73:0a:7b:32:c6:6c:18:97:a5:d3:ee:49:
ac:40:ec:41:b3:01:8a:00:b1:8c:eb:98:4e:28:2f:3d:aa:ff:
9f:76:28:2f:4d:5b:72:ea:bb:05:c3:74:1b:9e:51:3b:b7:4d:
84:b1:1a:fb:bc:53:69:03:42:50:91:58:31:2b:e2:f5:5e:c0:
ea:2f:9c:54:32:b0:1b:f2:95:4e:ba:f5:e0:a8:82:98:60:8d:
1a:41:61:c2:0f:2d:62:f3:16:4e:3f:37:46:22:26:c4:48:13:
c1:61:b3:07:22:ba:5a:47:66:5a:09:0d:2c:da:ac:41:ca:33:
bb:40:9f:36:0f:72:35:2c:95:0a:bf:3e:d0:f0:0a:bc:13:d0:
b7:81:fc:27:2b:5b:a9:9f:74:cf:3c:16:2c:22:e6:63:ef:aa:
a4:0a:4e:4c:e4:53:4f:37:e0:1a:6e:6d:0d:52:03:6d:7a:a3:
64:2c:44:6f:d8:b7:a1:7a:34:9f:9f:04:e4:b4:cc:98:f3:f5:
05:39:3c:87:e8:f2:87:3b:e8:0b:11:04:54:79:b6:19:c2:92:
92:4b:77:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:25:54 2025 by rpki-client