
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft
File: 6_WDiMYxyXfqUfyttQzSCnSS9ec.mft (raw, json)
Hash identifier: 0YSkv4gIHe9c2c6Lw9JNmklI5oULipp9Y7eJASqNOko=
Subject key identifier: C6:18:C7:53:22:B8:26:1D:2E:56:69:3E:53:C1:FF:BC:BE:91:A3:32
Authority key identifier: EB:F5:83:88:C6:31:C9:77:EA:51:FC:AD:B5:0C:D2:0A:74:92:F5:E7
Certificate issuer: /CN=ebf58388c631c977ea51fcadb50cd20a7492f5e7
Certificate serial: 019679B1D6A535EB69DBEEC793C3A54D1188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft
Manifest number: 1390
Signing time: Mon 28 Apr 2025 00:00:19 +0000
Manifest this update: Mon 28 Apr 2025 00:00:19 +0000
Manifest next update: Tue 29 Apr 2025 00:00:19 +0000
Files and hashes: 1: 6_WDiMYxyXfqUfyttQzSCnSS9ec.crl (hash: L2joNOotV53cODp8HA0h1K+JtkpGmRcuGJTZz9bZQU4=)
2: KKfXHhC8ynjRtI36KFPIqF0xAvY.roa (hash: ezgy1Jn7srd8Of8dUU4rL8GndM8gLc3B5ZacAY1O9xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:d6:a5:35:eb:69:db:ee:c7:93:c3:a5:4d:11:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf58388c631c977ea51fcadb50cd20a7492f5e7
Validity
Not Before: Apr 28 00:00:19 2025 GMT
Not After : Apr 29 00:00:19 2025 GMT
Subject: CN=c618c75322b8261d2e56693e53c1ffbcbe91a332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:67:48:1b:a8:78:39:a0:04:e2:db:d1:8e:
ef:ba:7d:d0:57:cf:22:5a:58:9e:76:2d:c7:ef:2c:
b3:37:12:9e:39:16:79:42:e8:31:dc:66:86:65:11:
9d:99:60:74:ad:53:e0:2a:e3:66:07:58:c2:b9:fb:
1e:6e:93:7e:7e:d7:f8:ba:4c:cc:e6:ca:00:20:25:
8e:7c:d7:f6:04:73:29:0d:76:69:8f:bb:fe:aa:8c:
30:82:93:b0:59:f5:46:cc:c2:4f:ba:f0:48:b2:cf:
b1:3f:a5:33:be:aa:75:00:d9:70:9f:a0:fa:e8:d5:
97:3f:8b:fb:5a:35:8c:c8:b2:86:7d:57:27:b9:64:
99:fc:21:28:c0:25:12:d6:bf:04:b6:a5:dc:b9:2c:
18:80:e4:01:df:de:bf:f6:f3:a6:4f:cf:e4:b0:a9:
65:74:07:63:24:4f:e3:fa:17:77:39:d5:03:0f:52:
b0:6b:87:ab:f1:61:3a:0c:78:de:22:42:9a:6e:ce:
e6:59:63:2d:e4:a6:da:67:40:0b:45:a6:8e:c8:f2:
70:68:b2:a1:9a:1c:95:7b:d8:78:92:c6:00:02:39:
35:d2:4c:24:be:c2:a3:5c:61:51:10:76:4a:c0:ab:
a5:0b:7c:99:4e:54:4d:49:95:63:ea:5b:08:30:35:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:C7:53:22:B8:26:1D:2E:56:69:3E:53:C1:FF:BC:BE:91:A3:32
X509v3 Authority Key Identifier:
keyid:EB:F5:83:88:C6:31:C9:77:EA:51:FC:AD:B5:0C:D2:0A:74:92:F5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_WDiMYxyXfqUfyttQzSCnSS9ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/1c8bee-8df8-4102-a4ec-4f1ade1da20d/1/6_WDiMYxyXfqUfyttQzSCnSS9ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8d:51:0f:74:98:6c:88:46:9a:95:26:07:f5:f3:a4:98:69:
27:b9:2f:de:91:87:41:b7:95:ea:3e:a8:8a:4b:13:f4:be:ec:
1f:69:dd:2a:b8:e2:ff:b2:96:b4:86:25:e0:32:bd:14:1e:67:
98:c0:11:c9:2f:a6:6e:ff:e3:bd:38:a3:7a:8f:da:b8:b7:77:
ed:07:72:da:56:eb:30:76:c7:e8:db:58:05:23:eb:4c:af:a5:
37:a3:3e:79:45:3b:03:44:75:4a:9e:bf:4e:be:97:9e:9b:3c:
a5:6d:3a:e4:eb:5f:c5:ed:14:5c:6f:29:88:4b:29:51:9c:df:
bd:de:fa:8b:3e:85:90:b9:e9:64:8a:c5:79:90:bb:b1:76:03:
8d:34:2a:89:61:a7:79:2b:21:67:20:66:f2:9f:8e:df:83:f0:
de:8d:5b:ee:d5:24:91:76:fa:18:85:8c:b2:51:5e:f9:94:f2:
b9:64:86:fa:61:5f:4b:36:70:63:fa:4e:c3:12:f3:f2:f9:01:
3c:ce:ec:0c:a2:85:99:7a:00:f9:4a:6b:3f:57:33:97:4d:2d:
cf:e9:ad:b5:ac:5a:c0:2b:50:63:a9:e9:44:27:6b:31:33:0f:
2e:f0:3d:ba:fe:aa:e5:ea:01:cf:d5:76:e7:79:d1:68:fc:9a:
c1:8c:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:35:58 2025 by rpki-client