Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File: 6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier: JhJH80S3gjDsHwAr1qxTLmRSDxyi3y8jfrROFlUgG7g=
Subject key identifier: 7B:37:68:F2:32:16:13:38:43:80:64:DC:1F:E6:F9:71:31:64:26:FB
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer: /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial: 0197711A90309429864A9939F0DFAA9D9F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number: 0CE0
Signing time: Sun 15 Jun 2025 01:00:55 +0000
Manifest this update: Sun 15 Jun 2025 01:00:55 +0000
Manifest next update: Mon 16 Jun 2025 01:00:55 +0000
Files and hashes: 1: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: AC7SsKG01/YeOUW4K9AN8tRJ6uEFmmg+ScsZAsAN9U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:90:30:94:29:86:4a:99:39:f0:df:aa:9d:9f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Validity
Not Before: Jun 15 01:00:55 2025 GMT
Not After : Jun 16 01:00:55 2025 GMT
Subject: CN=7b3768f232161338438064dc1fe6f971316426fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:09:3f:2a:e2:4f:c4:89:dc:61:39:52:ae:
c0:9a:d2:20:03:6e:db:c3:39:72:f6:2a:8b:9c:6a:
a5:da:55:36:0f:90:c4:d4:5b:bb:0c:cf:ee:9b:cb:
f8:ca:c2:22:98:04:09:d5:0e:56:27:2b:06:e6:d8:
42:9a:47:a5:86:70:06:c6:2b:cc:d5:14:0f:5c:b9:
10:dd:5a:e5:86:d4:ae:e6:ae:01:e7:79:77:15:50:
c0:73:12:ec:8e:ed:d2:af:80:c6:cc:95:35:74:fe:
ef:82:a4:b8:20:a0:41:81:f2:1a:da:82:54:4d:6f:
be:54:a7:c6:15:09:e0:cb:df:bb:eb:b6:e6:04:b1:
26:21:c9:a0:c6:48:ec:05:dc:f9:ab:83:7c:0c:3e:
63:1c:63:9d:b7:8b:10:d8:5a:44:d1:a8:a3:f6:52:
79:da:ff:d3:e6:23:b3:a9:fa:1b:6a:c3:74:74:12:
2a:bc:e9:4a:58:96:6f:f6:e3:2d:45:1a:dc:f7:fd:
27:f9:d9:82:4c:70:aa:dd:c7:6a:8f:65:44:61:69:
0c:69:42:c1:56:28:77:1e:47:cd:96:9c:9d:bd:db:
78:c6:29:56:fe:0d:d8:78:cc:49:3e:df:fb:3e:33:
be:ca:1d:fb:4a:00:76:5e:10:22:bd:ac:98:d5:57:
75:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:37:68:F2:32:16:13:38:43:80:64:DC:1F:E6:F9:71:31:64:26:FB
X509v3 Authority Key Identifier:
keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:54:51:8f:e3:cd:06:de:30:43:68:b3:8e:9f:dc:74:c7:59:
44:33:c8:08:8f:52:80:ac:33:a6:43:1e:30:44:c9:76:63:e8:
ec:77:30:c2:27:ba:93:af:72:23:4e:e1:ed:17:4e:0d:f0:3d:
fa:ac:c2:2d:d3:fa:66:22:09:3c:4e:4f:17:84:5b:33:9d:40:
76:c1:7d:d4:7e:59:63:90:d0:58:75:7a:f1:8f:d4:0d:30:cb:
03:21:0d:51:4b:e1:05:9e:01:f9:03:16:e6:fd:b9:25:cb:63:
ee:6c:cb:72:f3:6b:39:66:e6:25:73:da:6d:82:7a:5e:10:28:
33:ee:a9:06:6e:d4:23:d2:f9:33:20:53:8a:bf:1d:bc:5f:a2:
11:62:bc:2b:f2:24:bf:13:d0:d2:06:c9:55:46:46:c7:88:c1:
6b:32:24:06:f5:f5:19:0b:90:1d:63:af:54:e7:4b:2d:07:2d:
e8:02:18:c1:a3:e3:da:17:d8:10:a4:0e:6f:ce:c0:48:08:17:
73:50:a5:1e:83:21:65:92:29:64:b9:46:33:c8:ee:d8:90:1f:
f9:5a:8f:43:dc:77:64:5c:f6:08:45:22:7d:4a:5e:37:8f:09:
1a:db:5b:98:48:fa:d7:40:39:8a:06:4b:32:01:8e:f3:38:f9:
e5:da:fc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:00:14 2025 by rpki-client