Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: 4s/5krELKBA2cdKCsHrfnzKcNv+9YiXXqWQInP7wp74=
Subject key identifier: 4C:EF:CD:3D:28:15:6E:12:6E:E8:8B:B9:BE:E3:98:03:4F:38:6A:0D
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 01968A6EB82F5C070B5FB4C0267E40A9C39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 1521
Signing time: Thu 01 May 2025 06:00:33 +0000
Manifest this update: Thu 01 May 2025 06:00:33 +0000
Manifest next update: Fri 02 May 2025 06:00:33 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: w5DHNB5083KT/68q6tx789LQ5nCPXDeXSd6qgX/S3ss=)
2: 9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa (hash: 5pOnqwDunio8ibNAPUzfXIZHCC6lmUXt91wi8md1CvM=)
3: gU67SonlohhDi8lWe_MYl6yJJsI.roa (hash: FLpgUzbj974ZgJCetR7gymMI2OHT8rOTBcexSYhxtZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:6e:b8:2f:5c:07:0b:5f:b4:c0:26:7e:40:a9:c3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: May 1 06:00:33 2025 GMT
Not After : May 2 06:00:33 2025 GMT
Subject: CN=4cefcd3d28156e126ee88bb9bee398034f386a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:ac:2f:47:f0:00:96:a5:2e:ef:0e:64:45:
a8:78:8d:78:14:4a:04:79:4c:41:b8:fd:3a:49:e2:
ed:86:20:05:0a:97:7c:27:07:d4:be:d6:30:d5:f5:
a9:ad:5e:80:9a:a9:98:65:ee:46:3a:0d:54:0b:77:
ce:b9:96:48:dc:64:2e:36:1a:70:bd:db:74:5e:0a:
d6:d1:7e:99:4e:62:12:ea:7a:da:93:2f:f0:22:b5:
68:6e:93:a8:0f:58:5d:68:12:b9:44:b8:d0:34:df:
b4:84:3f:9a:9c:31:b1:8c:d8:5a:ba:db:42:46:d5:
fc:a5:44:d3:46:e6:0b:6c:b5:3f:a1:49:69:90:4f:
13:ed:3b:5b:be:b1:c4:6f:cd:77:51:43:db:7b:4a:
14:43:3d:01:ad:ef:8e:da:15:ab:ed:72:cd:3d:b3:
d1:e3:67:c4:7d:9d:0d:61:62:ef:44:c6:29:45:a1:
ec:b7:24:91:77:c4:15:75:83:96:90:dc:3d:7a:72:
29:4f:24:6d:22:29:e4:61:75:c3:e2:4c:66:fa:d8:
eb:df:e6:71:3c:4e:5b:5c:ea:62:5a:28:22:18:0c:
55:b1:b6:cb:be:01:cd:35:e7:6a:f0:29:f4:32:ee:
d5:0b:85:c1:d2:3e:79:f9:80:b0:f5:23:7c:be:f6:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EF:CD:3D:28:15:6E:12:6E:E8:8B:B9:BE:E3:98:03:4F:38:6A:0D
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:69:90:8e:60:8f:09:45:eb:dd:9c:f2:70:f1:40:fe:8e:78:
bd:8f:64:d2:14:c4:21:54:12:9b:87:d6:e9:3b:ff:be:60:91:
f2:70:11:28:25:f6:e7:b2:f1:ff:4b:ef:b5:39:b9:1c:4d:c5:
7b:86:76:03:08:7b:a3:cf:c4:fa:e2:4f:fc:e0:50:2a:f1:5b:
38:2a:5a:20:1f:a1:93:a4:96:7c:35:03:ab:98:7c:bf:ef:47:
52:21:74:8f:5f:36:8d:c1:5d:c9:7c:f0:5f:45:04:aa:69:79:
06:92:82:de:8e:22:1b:bf:ae:89:f2:89:2f:bc:3e:b2:2f:8c:
9d:a2:a3:d4:66:c6:7a:21:d4:4f:b5:cf:5f:bf:ee:0a:45:5b:
4d:ed:78:ca:f7:51:bb:5c:78:98:63:18:40:90:9d:05:95:d7:
e3:e3:35:39:9c:32:49:5d:dd:7e:b5:f5:b4:59:be:31:bb:2b:
e3:a1:4e:07:fc:f1:c3:c0:1d:13:fa:33:2b:84:9e:99:d3:2e:
88:41:62:eb:88:4e:e8:b0:52:37:92:69:bb:12:21:9d:d6:62:
2d:e5:30:08:dd:d3:a6:7e:66:54:ce:1b:82:e9:60:e5:3e:63:
e5:b6:98:21:e8:77:a1:a4:98:1a:31:f6:53:9c:17:45:80:85:
21:8e:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:26:59 2025 by rpki-client