Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
File: 6qwojPd47d1iHjNkW_VdfnqKboA.mft (raw, json)
Hash identifier: 9Tk5a1ZsG8py1hjfJQI0lJmRGuHjJPTd/o8jqeO6cJA=
Subject key identifier: 95:52:24:20:45:EB:CA:FD:CD:F3:1D:C2:45:BF:4A:92:06:BC:03:01
Authority key identifier: EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
Certificate issuer: /CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Certificate serial: 01968022AE65C4DF1121FE7C59CCC077E818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
Manifest number: 27
Signing time: Tue 29 Apr 2025 06:01:18 +0000
Manifest this update: Tue 29 Apr 2025 06:01:18 +0000
Manifest next update: Wed 30 Apr 2025 06:01:18 +0000
Files and hashes: 1: 6qwojPd47d1iHjNkW_VdfnqKboA.crl (hash: rDQHsptboJommO8+c1m1PIaLmtJW7AjHJ49IHzLJtqs=)
2: Z6Ua_m1uC5vkIPTZcIRy60EkawI.roa (hash: MctTd7jsNaKXKyaY6wZK28mWbw3asQJpuRF6a3Ofl8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:ae:65:c4:df:11:21:fe:7c:59:cc:c0:77:e8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaac288cf778eddd621e33645bf55d7e7a8a6e80
Validity
Not Before: Apr 29 06:01:18 2025 GMT
Not After : Apr 30 06:01:18 2025 GMT
Subject: CN=9552242045ebcafdcdf31dc245bf4a9206bc0301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:c2:c4:77:f5:ed:ba:43:81:d5:2f:20:c6:
ee:e8:8a:1d:05:72:9a:c3:d9:e9:2a:a2:0b:e0:18:
0e:54:ed:d7:d6:49:28:0b:5b:a7:e3:ea:82:3d:f0:
d8:d2:40:d1:42:52:75:06:8c:ce:18:9a:ba:54:d0:
67:9e:26:2b:dc:32:05:c1:2f:88:77:dc:36:65:9d:
6e:66:33:f4:be:28:05:9d:aa:77:d6:d6:1f:05:16:
b8:50:ee:2a:a0:61:c9:a8:c5:91:d0:6d:48:5c:07:
ce:d8:f9:05:a8:b8:9b:fe:88:0b:22:77:a8:2e:82:
09:df:ae:af:1f:73:14:ff:9e:71:03:4f:93:1e:cf:
b1:8f:e5:ef:86:40:b1:bd:aa:85:7b:ad:31:5b:7c:
23:9d:40:34:1d:d7:81:88:f2:58:06:4b:6e:43:82:
17:e4:43:ff:83:a6:2c:92:03:0c:b0:59:ce:60:e8:
65:6a:6c:8d:e7:27:cb:0b:b7:01:d8:5c:bf:24:e4:
23:de:51:d4:f5:0d:6e:ef:10:99:09:8a:44:de:9a:
df:4e:d6:6e:fd:84:b3:2d:d8:5a:d0:ad:a2:3d:aa:
60:5a:b5:7f:23:48:3e:ff:ca:26:85:a6:d0:3e:d6:
7d:fb:d4:76:9d:46:ac:24:a2:f3:5e:4e:ba:43:67:
07:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:52:24:20:45:EB:CA:FD:CD:F3:1D:C2:45:BF:4A:92:06:BC:03:01
X509v3 Authority Key Identifier:
keyid:EA:AC:28:8C:F7:78:ED:DD:62:1E:33:64:5B:F5:5D:7E:7A:8A:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qwojPd47d1iHjNkW_VdfnqKboA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/02f85b-c4c5-4dfc-938f-71b938ae4ccd/1/6qwojPd47d1iHjNkW_VdfnqKboA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a9:9c:66:8b:24:4d:c3:b9:a8:da:b5:16:fa:49:ed:1d:15:
8d:cf:18:5f:a1:e6:ab:a9:84:4a:f4:15:56:04:2e:59:c9:05:
51:d3:87:98:fc:58:79:af:42:4d:8c:56:ac:f5:7f:f7:bb:1c:
01:b5:49:30:13:42:04:56:cc:24:0a:51:27:c1:35:f5:f7:07:
9c:e9:88:47:80:f9:59:42:33:09:de:b8:53:2f:3d:b9:0f:60:
a1:db:41:73:ef:35:dc:4b:0d:a4:32:e4:f7:12:cb:10:07:70:
01:31:18:d9:20:e2:9a:6f:b9:45:22:ea:6d:08:10:a4:14:54:
12:f3:e6:11:bd:90:17:f0:ae:fb:05:69:54:ce:40:0f:28:2e:
0c:6f:a6:06:ab:13:3a:25:1a:82:ad:b2:be:f8:0e:a5:00:53:
08:e2:9b:89:04:76:7a:e6:ae:aa:87:b0:fe:b7:6e:dc:84:71:
c0:02:3c:af:0e:84:8d:f7:fb:d7:82:71:82:f9:9e:16:61:f8:
58:df:13:b1:39:5d:1f:53:ad:ef:dc:40:03:4b:56:3e:e4:39:
1e:d3:93:54:63:f3:b3:91:1b:bf:34:2f:62:df:46:cf:72:74:
e8:b8:ac:a8:80:8f:e4:fd:8c:e7:10:14:9d:d1:39:af:9e:07:
87:a3:fb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:42 2025 by rpki-client