Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier: LsTog95YmfBox84cfzgQN85ieazVdus0xCroQIDJz3U=
Subject key identifier: 84:D6:86:3E:07:30:55:0E:34:2C:00:84:96:F8:F5:B5:20:F2:F9:AF
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 019673791A0D5931FB5429D0EF4DB2DC717F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number: 0A5B
Signing time: Sat 26 Apr 2025 19:00:38 +0000
Manifest this update: Sat 26 Apr 2025 19:00:38 +0000
Manifest next update: Sun 27 Apr 2025 19:00:38 +0000
Files and hashes: 1: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (hash: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=)
2: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: k7UcHVj22wrTD45T6T4sOrR/dJcJgCitSLFEO/+r0bc=)
3: Jkdiv5bBO_BKcgc0OerouNuGE1k.roa (hash: VbBTlFGzjAjrvA9wRAtB5k6JdTD926ZHlAXAShcRc2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:1a:0d:59:31:fb:54:29:d0:ef:4d:b2:dc:71:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Apr 26 19:00:38 2025 GMT
Not After : Apr 27 19:00:38 2025 GMT
Subject: CN=84d6863e0730550e342c008496f8f5b520f2f9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:ae:95:7a:32:9b:64:8a:63:4c:f3:dd:b0:
27:33:4f:f7:73:0b:ad:32:37:0d:e3:d5:e2:0b:ec:
c5:af:76:9f:63:e5:11:dc:37:db:d1:e4:6d:03:b9:
02:cf:93:9a:8a:52:31:8d:55:4c:30:c4:e6:03:9f:
75:ef:bb:7c:7d:87:63:bf:e9:4a:3b:d1:27:b5:57:
76:7f:d0:4e:9b:d4:61:bc:0c:5f:66:9e:ab:45:22:
be:b3:e5:46:dc:d2:89:d5:80:75:86:3a:51:c3:1a:
47:14:39:13:f5:be:bc:c5:64:08:7c:80:02:90:bf:
01:88:da:4f:39:f0:0d:a5:8f:16:00:c6:83:1a:cf:
70:5c:55:32:59:f9:67:f4:03:0b:45:18:41:d8:a6:
b0:c8:ba:70:5e:31:82:89:db:d0:ff:9e:79:23:3b:
5b:19:c9:79:2e:23:56:7f:75:07:8e:ef:04:3a:aa:
e2:5f:ee:47:db:3d:55:3b:8f:eb:ff:eb:d6:f2:9d:
f4:00:2d:d9:d6:1e:82:ec:89:b2:1c:03:ad:11:42:
49:02:a7:e4:da:aa:af:67:b0:2c:95:1a:ec:dd:ef:
9c:43:01:ed:36:8b:ff:fa:3c:32:67:5b:25:bf:18:
d7:68:e5:d2:d0:6f:f6:6c:85:51:94:7d:d7:f1:7f:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D6:86:3E:07:30:55:0E:34:2C:00:84:96:F8:F5:B5:20:F2:F9:AF
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cd:6d:28:f7:bd:92:95:ed:43:a1:ea:a9:e7:43:8b:5c:7d:
0f:eb:e5:fd:e1:5c:02:27:81:37:fa:8e:08:42:a6:cb:8e:d0:
f3:db:15:f1:f0:77:f8:2d:37:a0:00:60:56:9f:ba:b3:92:f4:
82:f7:0d:f1:0b:89:98:84:49:37:3a:bd:47:a9:7f:18:ae:b9:
da:76:b4:83:c6:0e:32:01:d3:e3:e5:5a:1e:63:98:0c:92:e5:
96:91:21:2b:aa:bc:d9:b6:29:9b:c0:b7:6d:d4:0a:74:81:64:
e9:9d:0d:00:c5:07:49:b8:99:4b:c3:7b:74:7d:71:88:36:1f:
97:39:4e:fa:0f:80:67:20:89:a1:cb:de:dc:86:4c:dd:f9:eb:
ef:ed:1a:3b:30:4d:88:c4:85:e2:49:bb:02:63:7f:3c:e7:fe:
0e:34:6b:65:cf:27:3d:89:a4:5f:25:a3:c6:32:8d:d2:5f:72:
1b:32:7a:ee:b8:c1:a7:36:9c:e1:6c:94:21:d1:b2:db:30:7c:
93:35:8b:ad:26:2f:dd:a2:7d:c7:4a:98:54:91:1d:a1:ff:36:
e5:e9:2d:f6:18:e9:09:da:81:93:bb:c2:ec:0b:88:88:ab:04:
18:18:c6:23:71:16:23:9a:aa:34:87:0a:31:2c:8b:7f:b5:8c:
c0:5c:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:02:18 2025 by rpki-client