Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
File: b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft (raw, json)
Hash identifier: +JmVqM66Usx8pZyW6tSgPswkirWjWngO3MBZEw1m8FE=
Subject key identifier: A7:7A:22:62:38:AA:13:51:1D:65:DD:16:88:EA:CF:4C:6B:25:24:B8
Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
Certificate issuer: /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Certificate serial: 0196CCF350B69D267CB29CC06CE2DC063F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
Manifest number: 147E
Signing time: Wed 14 May 2025 04:00:20 +0000
Manifest this update: Wed 14 May 2025 04:00:20 +0000
Manifest next update: Thu 15 May 2025 04:00:20 +0000
Files and hashes: 1: SAc4N5mOYskXXQItNaC6-fHezN4.roa (hash: 3vn4QWZ4UzqrNwc2gut08M7Edo0Fd06IMg0+84eAYXA=)
2: XVZjts2IAQT3D-3i0mJSagboiZ4.roa (hash: P8G3dqnA4ISbflUuxnqvGaJIWR204WqE02ZEJaENHX0=)
3: b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl (hash: jaZqJvlt1kqRuakrEwIiiltK7H0sBQCEcqdKB+nu6d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:50:b6:9d:26:7c:b2:9c:c0:6c:e2:dc:06:3f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Validity
Not Before: May 14 04:00:20 2025 GMT
Not After : May 15 04:00:20 2025 GMT
Subject: CN=a77a226238aa13511d65dd1688eacf4c6b2524b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:ce:41:6f:39:3a:13:dc:ea:36:21:5f:32:
27:dc:5f:44:8f:0a:a4:a3:20:38:53:ff:c5:86:82:
dc:b1:ad:9f:c4:a0:29:19:6a:b4:c7:c0:6a:51:90:
43:2f:cd:c1:d2:f0:11:7f:44:17:d9:6d:77:0f:7a:
02:13:95:96:8d:65:d1:e8:bf:fd:7f:94:64:69:3b:
e9:a6:73:61:7d:1c:1f:a4:76:6c:4b:c3:a7:f5:8f:
d2:05:d5:ef:0f:7e:fb:fa:1d:6b:c3:5a:21:42:59:
97:6f:dd:b1:31:f4:2f:27:24:84:00:65:11:74:db:
01:22:92:ab:bf:bf:72:ff:7b:c9:50:bc:4f:b0:f3:
80:a2:6e:c3:7f:58:15:6a:75:b1:21:a6:ba:49:8c:
1b:a4:d2:68:68:25:9a:e8:c5:32:1e:b0:d1:ce:d9:
83:b2:f0:34:13:b1:df:56:03:e0:8f:a3:b0:73:62:
82:a8:46:ca:40:a1:35:c9:81:94:03:9a:10:6a:1e:
9b:85:95:c5:ca:13:ba:9c:c0:a9:44:5e:ac:d6:11:
62:fd:d7:1f:34:e3:5c:6d:ca:22:63:28:5c:21:95:
af:6d:9f:31:57:62:17:b5:b5:ce:09:9a:7c:fe:6d:
7f:97:cd:8e:7b:bb:52:0e:df:f8:8b:96:35:1b:69:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7A:22:62:38:AA:13:51:1D:65:DD:16:88:EA:CF:4C:6B:25:24:B8
X509v3 Authority Key Identifier:
keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f1:8f:8e:08:24:8f:60:bb:2f:69:e1:49:1e:38:2d:11:f1:
a3:10:a6:d6:34:f6:5a:1c:0b:dc:95:ba:e0:58:f6:e3:96:60:
24:b6:de:e3:d9:59:dd:e1:82:65:03:6a:88:0b:99:c0:f2:27:
9f:26:d8:52:36:00:07:d1:89:8d:5f:fb:3a:21:4e:1a:53:b4:
03:8e:b5:89:b1:62:f8:68:9b:30:03:aa:c4:e8:27:dc:f2:2b:
11:0b:4f:f2:67:b8:ef:46:80:f0:f2:78:13:4f:6c:3e:94:a3:
ba:fb:ca:b2:8c:e2:cb:f2:01:29:59:09:a7:fa:db:69:3b:4d:
61:50:b9:55:1a:4f:53:e6:b4:db:a3:dd:48:50:fa:2d:46:2e:
ab:76:c2:2a:1c:f6:ba:00:f6:e6:b3:63:ee:ab:4e:81:f1:8f:
e7:cd:f7:4e:bf:df:a6:49:26:31:f1:8f:3a:3f:56:f1:e9:e3:
c9:e1:f8:4b:87:84:9b:7c:c6:a6:95:28:3b:7f:ab:b9:b1:60:
23:07:f1:ff:db:f3:67:ed:f3:8f:c5:98:94:a5:38:04:17:f2:
0f:55:db:34:a2:fc:2a:78:5e:84:3b:6a:8e:82:6d:6d:d7:d4:
94:62:c9:2d:ed:6e:a0:4e:83:b4:a8:c8:70:38:c5:01:e5:9f:
f9:f5:3a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:26:58 2025 by rpki-client