Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
File: 6uDCwN7m-e1l4FHqqQl9As9b9fI.mft (raw, json)
Hash identifier: h0AImXbR/bGeUFsRtuwz1Qwf+n/QX98pHanJLZitqS4=
Subject key identifier: 51:D2:16:5A:94:76:29:51:7A:81:63:A4:AD:DA:7C:EC:60:E5:03:32
Authority key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
Certificate issuer: /CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Certificate serial: 0196775639907D75FE5752BD7D32FD7CDE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
Manifest number: 40
Signing time: Sun 27 Apr 2025 13:01:01 +0000
Manifest this update: Sun 27 Apr 2025 13:01:01 +0000
Manifest next update: Mon 28 Apr 2025 13:01:01 +0000
Files and hashes: 1: 6IiGbtawfoiQxqo4qA78f9bxvRI.roa (hash: DrAR4o5sI8QUSjE7+o4KN2antHg+KFLwwl7uXYw30VE=)
2: 6uDCwN7m-e1l4FHqqQl9As9b9fI.crl (hash: BEBfl7ovvVYAHoZCZHc7KJaO3kzlS+/UDabSxo3bqQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:39:90:7d:75:fe:57:52:bd:7d:32:fd:7c:de:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Validity
Not Before: Apr 27 13:01:01 2025 GMT
Not After : Apr 28 13:01:01 2025 GMT
Subject: CN=51d2165a947629517a8163a4adda7cec60e50332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e1:ff:81:b4:7a:d2:e0:0b:80:22:33:b9:62:
23:68:b8:30:31:5a:2a:b1:19:84:f2:ed:66:39:a2:
47:55:2c:b8:9e:c8:aa:1b:09:0b:d5:7c:45:4f:67:
05:1f:da:8d:5b:a6:e8:5d:fd:89:6d:ed:94:44:34:
33:11:b7:7c:7e:4a:d0:9e:e3:7a:85:56:62:16:dc:
0a:2e:70:16:c0:e5:2f:27:81:8c:44:65:c7:14:99:
7c:74:46:4d:46:fc:e3:9a:de:e8:bc:9a:69:57:9e:
e0:9d:5e:c3:72:87:34:e8:40:fa:c2:cf:c8:90:a2:
b0:23:be:2a:c4:33:45:fb:f6:72:08:0c:a1:5e:2d:
00:0b:7a:6a:98:27:3c:ba:36:6c:4d:10:6f:0e:97:
f0:0d:ac:60:0d:98:b3:87:ad:bb:d2:9e:66:e5:4a:
10:8e:33:80:8c:88:56:54:77:67:f2:79:32:03:06:
7a:d7:ff:1b:f1:35:9b:f2:39:3f:7e:70:75:c3:be:
2a:23:af:43:89:c3:77:78:ed:86:70:45:62:03:1f:
c2:db:3e:71:31:19:ab:95:47:b2:fe:d0:27:0e:7f:
c4:4d:8b:9d:64:2c:94:11:a1:8e:8f:1f:fc:c7:31:
df:15:89:70:43:07:84:43:f1:06:3e:53:6c:5a:16:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D2:16:5A:94:76:29:51:7A:81:63:A4:AD:DA:7C:EC:60:E5:03:32
X509v3 Authority Key Identifier:
keyid:EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ae:48:48:8c:91:8c:81:9c:a7:88:11:a3:91:f3:cb:e7:a2:
a3:11:b8:9e:de:a4:64:00:1f:a0:82:62:ba:55:46:e8:d0:54:
67:f4:b7:8b:65:db:dd:c0:a6:d2:64:bf:d4:32:91:7e:c4:d9:
7f:37:fe:51:c7:db:49:ab:32:b0:cd:71:22:15:72:66:7b:34:
c5:80:a9:7a:44:67:6b:43:fc:af:8d:45:3c:00:c0:3e:05:e7:
4c:85:84:d8:01:82:56:bd:93:96:d4:23:6f:17:7c:35:df:6f:
5e:22:f6:93:be:f6:ba:7f:0b:68:01:6f:d7:53:54:2a:18:7a:
27:cf:23:37:77:d1:f6:87:5a:d3:36:04:07:d8:f4:01:72:ad:
61:a8:30:5e:53:d0:7a:fc:d4:71:d0:5d:8b:ed:c5:32:35:29:
71:fc:95:1c:08:3f:23:d2:ce:04:cb:75:da:1a:a8:03:a2:ff:
6d:bb:5a:52:9d:6d:a1:c6:ff:5e:7b:35:5f:7f:d5:f0:d0:4f:
48:6f:e4:38:b0:b7:88:33:53:ff:bf:a9:7d:59:a5:a7:b2:66:
5e:f2:cb:f2:5a:32:39:62:4b:de:85:1d:62:ac:ef:40:70:33:
b1:18:1e:0d:81:23:4e:63:a7:cc:76:e4:8e:fa:07:03:55:46:
4a:91:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:38:17 2025 by rpki-client