Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json)
Hash identifier: MKZL6EMHEstmfdOkUTubNZQUpS8+KkTaA1Moc8EonVA=
Subject key identifier: DC:63:4C:C2:77:66:05:86:0F:49:24:AA:46:4E:C5:26:CB:E1:7F:B7
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 0196816B7C1B60ACF0C319D554467DEFED6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
Manifest number: 1521
Signing time: Tue 29 Apr 2025 12:00:27 +0000
Manifest this update: Tue 29 Apr 2025 12:00:27 +0000
Manifest next update: Wed 30 Apr 2025 12:00:27 +0000
Files and hashes: 1: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: uFjZXebflsirp2eYdmy8a7afV2rb1kvO/WSGx8aEEQk=)
2: F_Vpqfvbjxx20g95CeLrBsXvf_k.roa (hash: qNGonkdXf+gHEPyA9PESPfgKfYoSpxpEByMqfe+I7MQ=)
3: GhnDGEgDOhOuu2Bz2p8x9xfrIEk.roa (hash: duB9Io5OhbZEdzVZTqJI4mOgNl+GvHnaKazpl3IdsjA=)
4: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=)
5: UVXDcefxnIrIyZ-DcfiZ2xkmVp4.roa (hash: HdXYNvSxAlKxxU8cwWq8MmlbJcS+0QbVfw07NS0ZrbY=)
6: b9wkPnLySz-ATLfF0ql-d4ycVn8.roa (hash: 9oUyMaJaRwmTAQVIcoe9p1Xl0C9S5KqKUeBPGeCZniU=)
7: dfoDkPClPolEQln8Wap-qSZl3mA.roa (hash: sAshvvzOYs0TqTXwL2VbwMq6B9+1UxkfXzngIBUZVgs=)
8: vNNjSoCVrZSrdxYzePjoq6gxkng.roa (hash: tERdg9hn/xkrqVt1JcH/usznbLFRttftraLG/JPUhH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:7c:1b:60:ac:f0:c3:19:d5:54:46:7d:ef:ed:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Apr 29 12:00:27 2025 GMT
Not After : Apr 30 12:00:27 2025 GMT
Subject: CN=dc634cc2776605860f4924aa464ec526cbe17fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:85:48:7e:46:98:a3:8e:61:4c:6c:74:df:
7d:d8:66:3d:1f:8f:2e:50:f7:b9:fe:f6:2c:9e:a7:
0c:ae:67:6e:56:4e:86:63:db:f4:80:97:74:bb:88:
c6:e7:37:b7:df:57:26:da:74:7a:76:12:cd:0b:28:
6c:dd:bf:00:67:94:0f:e7:5d:4d:d5:9a:28:7b:78:
6d:ff:be:69:95:7a:7f:ca:82:7b:39:2d:c6:b4:34:
c3:a9:1a:42:12:50:be:3c:4e:61:c4:c5:a2:f5:1a:
b9:ea:82:0e:12:ae:52:e7:00:40:e2:de:ca:d2:34:
49:3f:93:22:c9:9c:1e:c9:93:fa:10:26:fc:cb:ee:
9e:21:d0:ff:d1:1e:43:86:bc:54:42:25:ed:90:64:
86:51:60:0b:47:a6:e3:27:0d:a7:45:08:ae:d8:ae:
2a:53:53:1f:9b:8e:c8:4e:56:d2:a4:04:72:95:ac:
f2:80:1c:5e:a8:28:94:0c:23:dd:74:e8:fe:08:11:
f4:0f:a5:52:4d:ea:8f:12:d6:ff:cd:20:c3:e6:ee:
48:39:02:26:f3:ab:54:a3:92:f4:df:0f:a1:91:d9:
62:b3:50:a5:05:28:4a:3e:b2:c7:74:da:41:45:75:
fe:06:4a:07:a6:10:58:09:10:34:5a:cc:b6:75:8d:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:63:4C:C2:77:66:05:86:0F:49:24:AA:46:4E:C5:26:CB:E1:7F:B7
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:f1:10:ed:d2:db:f5:15:75:25:3d:09:a7:d8:71:7d:a0:
bb:91:70:43:0e:d6:4a:90:ca:60:68:58:6a:0e:8c:15:fa:59:
00:e7:d9:0a:bc:1a:6d:d6:81:57:7c:25:36:e2:d5:e2:c2:5e:
1e:e8:a4:b7:4a:c2:72:2f:16:9e:1a:b0:a0:2e:c7:27:e9:80:
5d:d1:42:88:e6:88:be:b6:91:3d:50:7d:81:68:b5:63:e3:2f:
93:27:6d:18:6a:b5:9c:a9:dc:c2:2d:45:48:28:18:19:24:2c:
3d:5c:80:49:a7:50:45:40:4f:60:e7:12:80:79:46:a0:d2:62:
35:35:3c:d6:60:0c:bd:9a:55:00:bf:75:33:b8:51:6e:5a:9e:
b5:6b:f9:c9:58:d1:98:37:70:8a:57:6c:22:6d:59:54:41:10:
0c:ed:a0:44:60:3c:c3:66:28:3a:13:06:18:7d:6e:bc:7b:d0:
a4:cf:5c:79:4a:7f:88:8e:48:8d:37:83:57:0d:dd:ba:e7:bc:
da:fd:48:2c:4b:88:4d:c8:9d:77:95:71:31:0e:29:eb:43:b8:
0c:7e:41:96:34:0a:c7:ee:bb:70:be:e5:56:f2:98:47:e2:b9:
5c:9c:99:b6:6e:fb:48:6c:fc:d2:ca:cb:04:3a:a3:9b:91:e8:
f9:ec:03:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:20:51 2025 by rpki-client