Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
File: 6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json)
Hash identifier: zP1AF8IcFmDQ1K+IWTx0ODi4Pku1MA4CZZebg6VXOn8=
Subject key identifier: 29:B8:C1:E2:BE:D5:11:DC:BA:1E:92:27:91:D4:0B:CA:B2:04:B4:41
Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
Certificate issuer: /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Certificate serial: 019682B54687E3E11CCB69E2C2F14C241DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
Manifest number: 0396
Signing time: Tue 29 Apr 2025 18:00:40 +0000
Manifest this update: Tue 29 Apr 2025 18:00:40 +0000
Manifest next update: Wed 30 Apr 2025 18:00:40 +0000
Files and hashes: 1: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: +MjSGDGcjKMPug35AfBLYtWCgy6hvNVVnco0UPJr3VU=)
2: zLqJ2jk1gnb1U6_xEyeO1kXar2w.roa (hash: f9xXsOCbyfrGDmPeAHiz1i2Ip8aFRkb7BmV8Krt70eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:46:87:e3:e1:1c:cb:69:e2:c2:f1:4c:24:1d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Validity
Not Before: Apr 29 18:00:40 2025 GMT
Not After : Apr 30 18:00:40 2025 GMT
Subject: CN=29b8c1e2bed511dcba1e922791d40bcab204b441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:a3:dd:69:13:db:a1:3b:56:d8:a8:0a:6d:
a1:48:72:af:57:0e:69:4f:fd:d0:95:9c:a3:3e:32:
02:ea:a8:45:43:cf:ce:8d:95:c1:4e:25:e4:14:74:
97:8d:f4:82:6a:4b:7b:3b:91:36:18:2e:3f:17:2b:
ec:99:6c:9f:44:4b:c1:cf:1e:dd:f3:4f:cb:c4:a4:
a6:c4:e8:7b:00:c9:34:08:fc:1c:a6:11:6c:41:93:
ab:72:1c:49:9e:f8:80:d1:cb:5c:c3:ee:c6:54:01:
78:1e:1d:56:f5:72:43:0b:fb:38:ca:02:ac:96:69:
7a:7e:e5:7b:98:e9:4a:6f:48:b3:43:16:1c:d2:e6:
0f:48:b1:91:db:20:95:b5:b9:d5:4c:32:b7:51:52:
79:d1:82:ad:75:b9:5a:27:e0:eb:74:16:2f:2c:77:
aa:fd:9a:15:b4:f3:bf:e2:34:d6:2c:f1:56:a6:d5:
5a:02:52:af:3c:31:ac:98:d9:b8:fc:2d:4d:6f:ae:
8a:ba:fa:9e:0f:28:66:03:b6:df:ca:da:e5:ca:1d:
4a:ea:7d:97:75:8a:06:fe:62:d6:f9:35:02:73:52:
23:e9:63:d7:8c:ae:84:66:0e:69:20:c4:ff:51:e3:
e3:c1:ed:08:c8:ae:ac:9e:b5:c5:19:8b:11:8c:5c:
59:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:C1:E2:BE:D5:11:DC:BA:1E:92:27:91:D4:0B:CA:B2:04:B4:41
X509v3 Authority Key Identifier:
keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e9:c2:73:df:a8:4c:32:20:8a:d5:22:36:63:73:dd:3b:dd:
2e:1d:26:d3:56:29:aa:94:38:f4:6e:3a:20:53:c5:c1:25:07:
68:48:7d:a5:2f:65:40:31:6f:4f:be:37:f3:b2:34:6c:e2:bc:
15:0e:4e:82:71:ab:b9:47:df:d2:13:27:5e:9a:3b:a5:55:b3:
28:f8:ab:80:d6:9f:ba:61:70:de:cd:12:a0:13:19:5d:31:01:
e4:b3:0f:32:69:7d:82:63:e1:0d:8b:69:83:12:ba:bd:19:71:
c1:f6:21:12:18:b1:fa:cd:22:d0:00:31:58:c4:ac:86:b4:81:
78:4f:29:a0:ab:b5:c7:eb:5d:87:30:c0:05:3c:74:24:79:9c:
ca:fd:83:7d:8e:89:a4:7e:72:9a:1b:65:18:ab:ed:b5:97:21:
ae:f4:4b:06:a4:86:a5:14:39:55:08:e5:db:4d:bd:07:0b:75:
ce:6c:ab:fb:ae:02:d7:b4:5d:08:41:07:37:fe:38:a6:ce:36:
14:82:fd:ff:66:d5:48:df:7f:a8:eb:03:74:8d:f5:7f:d2:80:
bb:66:69:4b:11:4e:76:68:3a:6c:d4:3c:f6:20:80:dc:52:a7:
13:61:2c:20:26:e9:1b:a1:47:a3:ec:13:39:d0:3d:68:87:54:
d1:a9:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:05:39 2025 by rpki-client