Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: dEbnS1Fx27qXoXaow3jA0uIt6jMfr/urpDD1vwJFO8U=
Subject key identifier: 85:E8:04:BD:D6:35:8D:63:E1:2C:73:34:F4:96:3B:51:BD:33:9A:3B
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 01967FEAE24798794ADD6622028C2B4BA977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 05:00:21 +0000
Manifest this update: Tue 29 Apr 2025 05:00:21 +0000
Manifest next update: Wed 30 Apr 2025 05:00:21 +0000
Files and hashes: 1: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: tXWn6yytQy58RbF4hXfV0Nx2hDM+RlXZenyQPKaKxBM=)
2: EqkXgOY99e-iUkXVNdA5xYmgxlo.roa (hash: veZu9uXJXJvhWX4xtP47S8hZ9s5IMdM1R7TmdJX9vpU=)
3: wrDqtsAOuC7Agc1zIPRkhKVhP8U.roa (hash: kfogXl8tGYAhJxfycDCrALmBGs+Zy+SyeMiS4IsU5B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:e2:47:98:79:4a:dd:66:22:02:8c:2b:4b:a9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Apr 29 05:00:21 2025 GMT
Not After : Apr 30 05:00:21 2025 GMT
Subject: CN=85e804bdd6358d63e12c7334f4963b51bd339a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:01:09:ea:9f:f4:5b:8f:da:3d:1a:d5:c0:
75:1a:95:9c:e3:f4:43:26:db:b9:c6:27:33:4f:0b:
01:91:5a:2e:79:a6:da:82:07:e5:d6:68:8e:a5:35:
4b:bc:08:8b:e3:8b:4e:37:85:1e:de:c1:1a:fc:09:
e4:ae:37:88:0d:1e:8a:72:f9:5e:32:c2:ee:8e:77:
f5:c5:64:49:89:a2:d6:82:52:8e:5c:7d:44:81:72:
f5:62:0e:e1:5e:ff:a2:cb:6d:95:0f:c7:be:5f:48:
d4:fb:87:db:b2:b3:43:a0:cc:84:bd:f8:a7:ae:37:
14:fb:7a:3f:55:86:54:37:e0:cd:f6:95:02:1b:4c:
69:53:95:04:07:c2:24:ac:e1:93:34:28:26:56:ea:
b0:22:fe:f7:c8:0a:16:23:db:62:e1:e6:f1:ad:37:
b9:01:39:12:97:e2:b1:79:4b:c1:8c:f2:aa:a3:60:
5a:7c:02:2c:96:25:d3:3c:af:0a:27:df:51:07:a1:
1a:67:a4:26:21:8b:ea:0a:67:d3:58:f8:a5:63:6a:
12:84:d7:9d:79:65:1e:b2:6e:0a:1d:18:0a:ff:c3:
9c:f6:77:d6:de:62:2d:6f:ae:e0:56:be:3f:97:9c:
0b:c9:bc:4a:96:47:70:1e:bc:06:1e:e7:46:e0:f0:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:04:BD:D6:35:8D:63:E1:2C:73:34:F4:96:3B:51:BD:33:9A:3B
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f3:e1:e9:99:2d:5f:18:33:f9:d6:2b:91:98:50:90:44:e9:
e5:8f:ce:ec:0d:0c:53:29:31:1f:58:61:8e:39:61:3e:b3:89:
25:9b:3a:28:14:0c:3a:d7:28:32:07:e7:ab:bb:d1:d7:f5:64:
8a:4f:f7:0e:2f:21:83:64:0b:8d:f7:fc:1f:c4:45:64:f6:db:
13:4f:86:58:37:66:a7:3f:2a:05:81:4c:08:52:53:05:78:5f:
c4:c3:41:a3:40:58:9d:7c:39:01:8e:cd:d8:26:bb:40:20:58:
60:b8:2d:c7:9f:79:3c:25:b4:c8:ea:e6:71:73:0e:35:ff:3d:
bc:65:b3:ae:08:74:1f:8d:16:f1:be:8e:81:6a:9d:03:31:93:
6e:f2:e4:dd:48:50:44:ed:44:22:f3:af:e7:06:41:08:fe:fe:
1d:22:75:a4:26:cf:28:ac:74:79:ae:fa:91:ee:55:d1:57:17:
fb:7d:19:e5:1f:19:dd:32:4b:8a:39:71:b9:e5:dd:2b:e0:09:
3a:a3:3c:03:be:92:5b:2f:60:5d:66:c4:4f:ad:49:ca:24:b6:
96:27:53:f3:c7:b0:a6:78:cc:5a:c2:c8:1d:e1:26:58:53:eb:
f8:01:d7:44:0f:d9:9f:54:eb:68:d8:96:6c:b8:b9:41:5f:1f:
35:e8:0f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:31:44 2025 by rpki-client