Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
File: r6R0pepgHICSke55uuORiWTQhx4.mft (raw, json)
Hash identifier: EbRD3VmdsV2StrRPVWZwD81htdlx7HPBSC346DORXjM=
Subject key identifier: 9B:3F:91:00:65:69:9C:6E:60:27:2E:5C:5B:97:16:7A:53:2B:2C:E9
Authority key identifier: AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
Certificate issuer: /CN=afa474a5ea601c809291ee79bae3918964d0871e
Certificate serial: 019679EA0A69DA15D5B579D13142EC2BC43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
Manifest number: 0BE4
Signing time: Mon 28 Apr 2025 01:01:43 +0000
Manifest this update: Mon 28 Apr 2025 01:01:43 +0000
Manifest next update: Tue 29 Apr 2025 01:01:43 +0000
Files and hashes: 1: CZnT00JxVXA6iAWaLFt9qygzud4.roa (hash: wJhaU7kGG6UC4hZw+OMvKmIWQmn3+xc9WR2/MP/95Vw=)
2: r6R0pepgHICSke55uuORiWTQhx4.crl (hash: alsVQ5t0zOiIhhqXUhwN9aTd5EAwj7rLkylm883thvg=)
3: x6GJc4ojOxgz3esDAZaU67m_2pc.roa (hash: zoKZ4awQgsW57nby6hTMjyGrch8AryfCfI+Yae5icPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:0a:69:da:15:d5:b5:79:d1:31:42:ec:2b:c4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa474a5ea601c809291ee79bae3918964d0871e
Validity
Not Before: Apr 28 01:01:43 2025 GMT
Not After : Apr 29 01:01:43 2025 GMT
Subject: CN=9b3f910065699c6e60272e5c5b97167a532b2ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:eb:52:01:f6:50:f9:a4:34:68:ce:fd:da:
3c:3b:16:0c:83:19:e0:3d:4c:ea:39:22:cc:cc:72:
8c:b5:78:46:fb:63:e3:56:e2:36:f4:cc:43:31:18:
9f:5a:4c:0d:66:d5:03:b2:87:61:37:44:53:e8:10:
83:f5:ab:0e:40:76:77:16:c2:07:a9:3c:86:e3:1d:
61:4d:e6:aa:40:e0:89:b6:6f:a5:9c:af:05:a3:cd:
af:f7:6b:e2:aa:c1:69:9c:69:1c:8d:06:36:cb:97:
e3:ab:07:74:3e:4f:8b:62:01:04:ff:8c:19:dd:87:
e2:f8:e4:3e:d1:50:93:04:98:be:43:58:c3:47:ae:
f0:81:0c:63:b5:b2:9b:35:56:92:75:f1:9f:37:b1:
0b:13:00:b9:e8:a2:c6:9e:6d:b6:c5:c8:0f:06:a9:
9b:36:2f:02:20:3f:2e:67:6b:eb:01:5f:f5:c1:4b:
62:77:50:1a:3b:57:d3:42:11:dd:53:2e:0c:bc:36:
48:c7:e0:07:4e:b2:d9:ca:cf:64:69:42:22:ea:a1:
65:e0:95:72:61:9b:7f:08:39:9a:54:a9:91:17:b5:
3a:74:c3:7a:00:a6:2e:f9:bf:53:06:d8:f6:7a:5e:
d3:8f:2a:6b:cf:e6:89:ee:34:cc:3c:0c:f1:8b:4b:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3F:91:00:65:69:9C:6E:60:27:2E:5C:5B:97:16:7A:53:2B:2C:E9
X509v3 Authority Key Identifier:
keyid:AF:A4:74:A5:EA:60:1C:80:92:91:EE:79:BA:E3:91:89:64:D0:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6R0pepgHICSke55uuORiWTQhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cc4d76-3ae9-491e-9bd2-193cc61bce61/1/r6R0pepgHICSke55uuORiWTQhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:39:51:67:7b:57:ae:4e:a8:70:5b:bc:fc:9f:2d:7d:53:31:
c7:38:d6:9e:a8:ad:4e:f0:60:71:7f:3e:d6:c8:b5:dd:c0:86:
33:72:19:f5:68:47:2e:7b:a7:2b:32:94:d6:28:81:31:4e:e8:
52:66:2d:e6:f5:73:aa:45:a6:b2:43:a5:18:ad:18:1a:e2:da:
55:c3:03:cc:9d:86:f0:7c:59:f4:7d:d0:44:62:40:ff:cc:b5:
32:a5:34:eb:a0:d8:28:a0:4f:00:cb:60:10:18:cb:b0:af:8b:
5b:6f:48:14:f6:41:1e:f8:14:dd:b8:3b:e0:8c:2c:b3:8b:be:
f9:91:6e:ee:47:34:15:20:ba:1d:bd:fa:f7:00:fb:44:13:a2:
37:76:55:25:c8:a6:8c:58:52:1e:75:6c:a9:6b:08:38:50:99:
96:dd:b7:6f:8a:3c:e3:b4:ec:15:7a:78:4a:e1:7c:87:a7:54:
2a:f8:b3:87:b3:4b:45:ed:f5:40:27:76:ad:93:f8:01:29:d6:
64:45:c7:5c:7f:f7:11:7e:f7:dd:6c:37:1b:19:39:55:70:b3:
30:16:e7:93:6e:8b:6a:80:0f:1d:00:dd:96:43:26:45:74:56:
42:f1:bc:81:e2:e6:68:c2:ec:57:37:ac:95:cf:1b:c5:9c:f2:
62:ab:39:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:36:19 2025 by rpki-client