Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
File: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft (raw, json)
Hash identifier: 4FXu+oC5IzvXMEYq9rw9kXEo17yKofNX7lwMnpMVm6M=
Subject key identifier: 21:BD:4F:65:C4:69:04:E4:D6:39:13:01:01:EF:89:B7:F2:83:EF:90
Authority key identifier: FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
Certificate issuer: /CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Certificate serial: 0196748BAE1BE1EA5AA71BA436664ECD094E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
Manifest number: 0BF3
Signing time: Sun 27 Apr 2025 00:00:33 +0000
Manifest this update: Sun 27 Apr 2025 00:00:33 +0000
Manifest next update: Mon 28 Apr 2025 00:00:33 +0000
Files and hashes: 1: 8eIa-4UA2fnyQQyLs8y9bQIaWAM.roa (hash: SYGKUkvXI/obgdGVYKiFu2OylosInlCBmN7hXgRUyO8=)
2: _6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl (hash: GnthBd3BwffImI9wd7Ou/+HnCpxA3L+ccvizAMIUrDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:ae:1b:e1:ea:5a:a7:1b:a4:36:66:4e:cd:09:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa41d3413ddacc91fe0f4426a828681cf30e0fc
Validity
Not Before: Apr 27 00:00:33 2025 GMT
Not After : Apr 28 00:00:33 2025 GMT
Subject: CN=21bd4f65c46904e4d639130101ef89b7f283ef90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:3e:2f:17:23:1f:90:ca:f9:15:c5:d2:50:
6f:d1:e6:a7:bc:35:f9:d8:6b:62:65:31:ce:b0:c7:
5c:7c:37:75:cc:91:ec:00:33:1c:42:3c:58:a8:00:
0b:c1:07:41:82:30:35:7e:dc:46:a3:6c:fa:0b:53:
b1:2a:09:40:f0:a5:49:8e:9d:99:47:6f:3d:0a:4a:
89:34:3f:4b:25:71:7e:47:68:c7:ea:66:69:72:35:
86:46:b7:ec:84:44:e0:1f:8f:0d:0c:1c:56:59:96:
bf:33:01:b8:8a:e4:ce:31:c0:c2:34:61:8a:00:f6:
ca:d0:c4:c5:84:e5:49:92:19:b4:65:79:ac:08:13:
50:14:c5:7a:16:3d:5e:d1:d7:4b:ce:2c:11:a8:ae:
70:03:53:41:86:1e:af:12:fb:c5:1c:e4:de:01:0f:
c6:7b:fc:25:6b:fa:ea:9c:c1:af:81:93:9e:61:a7:
5f:25:8d:f6:6e:4a:d1:3f:32:a6:23:d1:97:cb:71:
4b:99:bc:63:41:7c:e9:a4:ce:dd:0f:2a:5e:12:f7:
d1:01:0e:05:d8:82:8b:ee:cc:cd:2b:8d:a3:46:d5:
8c:56:2b:6b:63:61:b8:96:63:0a:93:53:a7:f1:d4:
99:7f:e5:4e:3f:70:42:0b:31:42:65:0f:8f:00:95:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BD:4F:65:C4:69:04:E4:D6:39:13:01:01:EF:89:B7:F2:83:EF:90
X509v3 Authority Key Identifier:
keyid:FF:A4:1D:34:13:DD:AC:C9:1F:E0:F4:42:6A:82:86:81:CF:30:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/82d824-4e02-46d4-854a-bd0512ce4905/1/_6QdNBPdrMkf4PRCaoKGgc8w4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d5:a6:87:49:79:3d:65:a3:e7:ca:07:ed:82:6d:fd:e5:b7:
4a:70:b9:2f:b4:21:94:3f:ca:56:c9:7d:76:ad:ea:44:07:3a:
40:25:a6:a0:8d:ed:b9:2e:60:ea:20:85:6f:fd:5e:74:67:61:
44:44:65:e5:76:5d:4a:7d:dc:3f:05:8e:86:58:4e:09:a0:3b:
cf:32:2d:37:77:99:f5:16:62:d8:be:c2:18:8a:55:6b:2f:70:
0b:cf:81:7c:3c:a7:07:b9:28:fc:80:fe:e1:04:78:fa:89:0e:
63:97:e3:de:96:ba:ae:6a:da:bd:6d:2a:15:4d:f8:93:87:66:
71:9e:c1:e4:2f:07:d8:ac:44:65:f1:08:1b:74:a5:2c:ff:e5:
64:52:b2:7e:73:6f:be:e6:8f:84:a7:bf:94:24:4e:5f:22:2f:
7f:2a:de:0b:b1:a2:4f:8a:c5:cc:8b:bc:6b:29:bf:de:39:22:
2e:c1:e5:23:3b:d2:ab:63:29:df:6f:9c:e3:22:33:cf:05:78:
c8:c7:b2:28:c5:89:9b:e3:d7:10:6d:af:e0:3a:10:cb:00:be:
e3:19:c8:ab:9a:09:21:8f:f7:e0:d4:bb:54:0a:ac:8d:38:6f:
bb:3b:45:5e:85:a9:09:c4:b6:15:37:cf:b4:1a:e8:56:df:5b:
16:97:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:42:28 2025 by rpki-client