Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
File: 6WS8XQrZ6gXijILnaP8U0ddNL-s.mft (raw, json)
Hash identifier: q/7Dwtp/iB7WjTiv1BR3nYCLF52j7ZwIRrUzfIbwrCg=
Subject key identifier: A5:3E:9A:51:EA:15:C0:49:F6:7C:DB:EC:DF:A3:30:B0:80:65:FC:2C
Authority key identifier: E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
Certificate issuer: /CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Certificate serial: 019688494920DB2D9A50E0B2F9840C3D4089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
Manifest number: 0692
Signing time: Wed 30 Apr 2025 20:00:26 +0000
Manifest this update: Wed 30 Apr 2025 20:00:26 +0000
Manifest next update: Thu 01 May 2025 20:00:26 +0000
Files and hashes: 1: 6WS8XQrZ6gXijILnaP8U0ddNL-s.crl (hash: yqbqbK0M8XwlTyjQo53FOIt9Du16S/px0ozSfwMBPyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:49:20:db:2d:9a:50:e0:b2:f9:84:0c:3d:40:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964bc5d0ad9ea05e28c82e768ff14d1d74d2feb
Validity
Not Before: Apr 30 20:00:26 2025 GMT
Not After : May 1 20:00:26 2025 GMT
Subject: CN=a53e9a51ea15c049f67cdbecdfa330b08065fc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:97:d1:f5:19:42:5c:ef:a0:22:06:2f:8f:
04:ea:06:14:ef:99:c4:31:d9:6c:96:69:2b:a0:58:
98:0a:bc:2e:96:e4:d3:90:3e:4e:ba:86:c4:62:43:
8e:e3:fe:57:5b:1e:2f:44:7d:03:0a:54:23:00:0b:
a6:76:cd:32:9a:f4:4d:65:9c:9d:20:fc:f6:45:8e:
74:b8:db:67:2e:1f:bb:89:44:9a:49:cc:e8:2e:47:
ad:c3:57:39:28:21:b1:20:b4:1d:b3:a7:c3:c1:a0:
02:af:f1:4e:8b:7f:e6:96:69:b7:ce:b3:1e:d7:91:
fc:a3:48:09:7f:c0:81:a2:ce:45:8d:3b:3c:cb:f3:
04:fa:30:f1:5a:bf:9e:52:a3:7c:ad:d7:83:a0:41:
a9:bc:81:86:da:5b:55:f8:1f:34:d7:e9:c8:9e:6f:
9e:b1:40:8c:92:ff:1f:e4:ba:4f:8e:89:30:c5:63:
dc:72:d5:e6:0b:2e:31:d3:a6:8b:7a:76:4b:88:f6:
00:1e:41:88:cb:73:4f:27:f5:82:77:42:5c:bb:60:
f5:1c:7a:13:cf:24:74:94:14:9a:8d:a1:c9:d7:29:
6c:22:e2:0c:24:b2:8b:f8:ad:b4:21:85:ce:5f:fb:
72:19:8a:53:e2:cb:9b:c2:09:11:3f:39:f4:7c:63:
06:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3E:9A:51:EA:15:C0:49:F6:7C:DB:EC:DF:A3:30:B0:80:65:FC:2C
X509v3 Authority Key Identifier:
keyid:E9:64:BC:5D:0A:D9:EA:05:E2:8C:82:E7:68:FF:14:D1:D7:4D:2F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WS8XQrZ6gXijILnaP8U0ddNL-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c8cba-7491-4546-9953-5899a74be2ae/1/6WS8XQrZ6gXijILnaP8U0ddNL-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:97:48:5a:f9:c4:11:24:0e:ca:18:6e:f8:8b:de:1e:ea:36:
6f:2f:29:95:e1:0d:3c:54:7b:16:7a:e2:8e:34:d1:2d:68:4e:
d2:5a:b9:b9:55:51:be:ea:81:9d:6b:9b:56:c6:1c:71:fb:21:
a7:0b:af:52:be:4c:96:2c:40:63:6b:b0:0f:97:42:84:e0:47:
7b:99:0d:06:26:e9:be:1b:ac:3b:92:33:ab:9a:f2:8b:5b:54:
67:8b:d9:2b:9b:d8:a7:3c:43:6e:b8:39:fc:27:93:e5:bf:9a:
bb:aa:64:40:a6:bb:c7:e4:9a:4d:0a:36:c1:d2:e1:a8:85:a1:
e9:c9:06:13:ed:65:e3:81:9b:b6:6f:29:48:de:a8:70:a9:df:
2c:ab:c7:e9:a5:e0:a2:b0:d3:ca:d8:83:b1:b1:d6:cb:5d:4f:
6e:d9:2c:83:a9:af:8a:f4:17:dd:ce:ce:7d:88:9d:6b:5f:18:
5f:42:67:de:b6:59:4c:70:9f:8f:12:57:ef:09:a9:79:95:19:
bb:3f:2c:b9:a8:b6:e5:4a:b9:46:f2:2c:35:92:58:e8:27:54:
50:5e:65:61:6c:ed:bb:24:65:e0:2d:0c:2b:d7:e8:39:84:d2:
50:a4:41:f8:ed:4b:04:4c:e0:66:cf:9a:e1:f7:23:a1:e4:f8:
58:3c:4b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:34:11 2025 by rpki-client