Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
File: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft (raw, json)
Hash identifier: O/MFFGoIHHfHVP8HA5o0D36sT3ddHanowT+0+b56eCs=
Subject key identifier: F2:8C:6E:F2:04:E1:2E:B7:C6:74:90:11:0B:01:4E:35:9B:8B:AE:55
Authority key identifier: EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
Certificate issuer: /CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Certificate serial: 0196790D16FC9DD5F0A7A37EFFAA8B655A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
Manifest number: 0C06
Signing time: Sun 27 Apr 2025 21:00:23 +0000
Manifest this update: Sun 27 Apr 2025 21:00:23 +0000
Manifest next update: Mon 28 Apr 2025 21:00:23 +0000
Files and hashes: 1: 534vF5sjkwJDGuUSMSbyeoXyx-w.roa (hash: yaE3+RBNj5kJXWkdpo0vdtCXgmh99gzWa0o0cozuQ7M=)
2: 6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl (hash: 9yyXDrMdvue7iVhPk8DpzHFdn8eZxtJWdp8xaMnkGVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:16:fc:9d:d5:f0:a7:a3:7e:ff:aa:8b:65:5a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea7503b83fa09a75bcb91075400f8307a667b8ed
Validity
Not Before: Apr 27 21:00:23 2025 GMT
Not After : Apr 28 21:00:23 2025 GMT
Subject: CN=f28c6ef204e12eb7c67490110b014e359b8bae55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:30:44:cb:5d:51:db:5b:78:92:95:1a:df:
d2:1f:68:16:86:0a:33:58:97:74:bf:e2:68:6e:98:
ea:71:2c:09:b7:38:63:49:08:e2:23:b6:95:64:ab:
4a:86:e4:93:ed:73:b5:86:39:41:bb:b7:6d:82:17:
71:23:a3:2b:0c:93:aa:45:fe:38:fa:43:62:a2:15:
19:10:79:18:4e:9d:32:52:5f:de:3f:a8:e5:59:10:
2f:24:5e:39:35:39:56:c5:ee:c5:c4:60:9e:71:bf:
25:d9:57:ea:33:b6:bb:d7:f4:67:27:80:8d:e2:9c:
b9:78:3d:23:c0:0a:72:40:e6:04:ab:87:87:48:1a:
67:12:5d:7a:5f:66:dc:5e:10:12:cb:b6:20:66:8f:
59:75:07:9b:f4:35:64:f0:3f:a5:de:1b:da:f5:06:
4e:13:19:0e:7d:30:9a:4e:d4:ba:4d:a2:06:bd:5a:
3d:5e:2d:f6:6f:1a:eb:14:ac:bc:ea:88:90:d3:0b:
03:60:31:ff:bb:9b:e3:ac:c8:c2:77:4c:72:af:72:
7e:c1:cc:03:d6:ad:4d:fa:98:f7:4e:88:a5:bb:0a:
d7:6b:75:d1:f3:c5:0d:d3:b0:90:67:35:7f:62:04:
d8:6a:06:da:45:f1:4d:dd:93:56:4f:0d:fb:1a:a2:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8C:6E:F2:04:E1:2E:B7:C6:74:90:11:0B:01:4E:35:9B:8B:AE:55
X509v3 Authority Key Identifier:
keyid:EA:75:03:B8:3F:A0:9A:75:BC:B9:10:75:40:0F:83:07:A6:67:B8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c42160-d6f4-482c-bf62-62140b202eb4/1/6nUDuD-gmnW8uRB1QA-DB6ZnuO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:80:10:84:c5:c0:59:76:cb:f3:3f:62:3a:00:ca:9c:7f:f1:
2c:f4:86:06:5e:5e:95:ce:e1:df:60:ba:e6:e6:67:4e:88:c5:
3b:20:34:23:48:0e:0f:9c:02:e3:72:f7:7e:29:e0:f2:28:57:
d4:de:4f:a5:78:91:da:9a:fe:4b:8b:3b:4e:a6:77:3e:af:b6:
68:91:41:bd:85:ed:a0:f4:12:48:eb:44:30:5d:d0:38:0d:9a:
4f:81:8f:c0:9b:c2:92:8d:71:c7:a7:92:7a:97:55:ec:d8:83:
18:77:f5:5f:d7:32:6e:e9:c5:58:8d:cc:e4:d8:12:ca:b6:ba:
26:15:d1:ad:bf:40:0e:4e:30:75:18:c6:a9:4e:6a:d2:d4:a2:
02:c0:4f:20:65:ba:f0:b0:db:8c:df:e4:cf:ad:41:7a:bd:dc:
66:6a:56:6f:51:20:7c:82:bb:c9:29:a6:57:09:d1:ac:93:43:
c3:6d:1f:f6:d2:d8:61:4a:70:04:f7:95:e7:d8:49:59:72:4b:
c5:ed:65:8c:5f:7c:da:38:95:6f:13:ce:33:e9:48:7f:aa:8f:
1a:4b:4a:72:4c:08:ea:81:13:db:36:21:db:bc:0e:d4:d5:67:
e4:25:cb:e1:97:3c:c5:e0:f8:72:7f:1e:6b:d6:a4:f6:aa:67:
80:31:a7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:51:29 2025 by rpki-client