Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
File: 6cPULzspIbp0GPOCAy1rNccVm4g.mft (raw, json)
Hash identifier: dNULs7ZBGitvFKwxRcnVfpU7QlcKpzMd52I9NiHXhS4=
Subject key identifier: B5:23:C7:39:F9:19:E4:8B:1F:C2:3A:C6:19:C8:AF:4C:C7:8C:77:09
Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
Certificate issuer: /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Certificate serial: 01968210140BBB8CE0C879429A6CCB30E45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
Manifest number: 0B86
Signing time: Tue 29 Apr 2025 15:00:13 +0000
Manifest this update: Tue 29 Apr 2025 15:00:13 +0000
Manifest next update: Wed 30 Apr 2025 15:00:13 +0000
Files and hashes: 1: 5YovwIx-DfYnXnDFJMr95lV97fM.roa (hash: 0/AccKS7ESwqh7EBZGAQBHJV43ER12Y2X7ow/8sTA3k=)
2: 6cPULzspIbp0GPOCAy1rNccVm4g.crl (hash: nwcJhbS3hKwh3IHDwXSb0uO9JsKS5zmxptx0kJXvu8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:14:0b:bb:8c:e0:c8:79:42:9a:6c:cb:30:e4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88
Validity
Not Before: Apr 29 15:00:13 2025 GMT
Not After : Apr 30 15:00:13 2025 GMT
Subject: CN=b523c739f919e48b1fc23ac619c8af4cc78c7709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:b7:d8:be:c2:c4:f0:45:55:6c:be:51:5a:
19:eb:69:f4:58:cd:7d:ef:2b:73:12:50:8f:d0:6f:
4e:c3:96:27:77:19:72:24:5a:61:85:fa:5c:e2:5e:
22:f7:0d:9f:2d:5a:08:4c:4d:15:46:f4:5d:26:31:
e4:80:e4:96:4e:64:b4:d9:b4:46:c1:0e:b8:3d:70:
6d:ca:d2:ec:89:ea:8e:ff:e0:3b:5e:ec:3f:f3:e6:
e5:74:a0:cc:a0:48:a7:fc:0b:7e:b7:37:69:f0:c8:
35:7b:82:b7:83:4a:50:91:2c:94:8c:78:3a:4f:ef:
53:fd:58:d8:51:58:fc:c8:de:59:21:8a:46:5a:01:
35:51:08:3c:e4:e4:87:7c:2f:23:2d:a7:c0:95:82:
22:84:38:3b:69:b4:62:67:6f:45:66:df:45:6c:ac:
b2:37:67:d3:af:ca:52:94:2e:08:3f:06:5a:8f:9d:
09:5a:ff:71:50:e3:c3:e7:8d:37:c9:29:60:ce:a2:
f3:0d:af:1e:5b:ef:19:b7:77:d8:fc:21:6d:2c:d5:
b4:80:1d:5d:30:64:f9:f4:5d:59:09:61:d8:3f:42:
22:d4:41:7d:1e:75:8c:af:aa:68:04:28:73:c3:f0:
6b:b0:10:e3:91:9e:24:d6:5f:c5:e7:28:d2:00:3c:
f3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:23:C7:39:F9:19:E4:8B:1F:C2:3A:C6:19:C8:AF:4C:C7:8C:77:09
X509v3 Authority Key Identifier:
keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bd:87:d3:e3:a6:c0:d5:43:32:11:05:a4:33:5a:84:1b:f1:
49:1f:84:d4:40:7e:c3:ae:78:8d:69:f6:e0:c7:08:75:23:18:
fe:c4:29:a4:f6:76:b0:6b:38:bf:6e:4b:e1:ac:fa:7d:ba:c9:
7f:ae:69:c1:f0:7d:da:88:44:d9:59:b9:7c:b2:0c:93:20:e6:
15:08:15:3b:d7:d5:f6:74:7f:78:97:4f:a9:4b:89:fa:d5:1a:
0d:95:57:39:8a:d5:d6:54:5d:cf:33:48:e5:48:af:d7:68:76:
46:16:e7:8b:29:6d:55:3c:05:ce:9a:7c:be:15:11:41:28:08:
d9:72:4f:b6:80:53:71:f7:0d:76:9d:ac:74:15:0e:53:4d:f6:
82:79:5d:1c:df:7c:55:1d:6b:5f:d2:d8:f0:fc:65:97:af:c2:
13:49:aa:f3:91:ab:d4:1b:f9:1b:db:35:5c:34:c5:30:e6:74:
9f:aa:ca:01:f2:01:f6:7c:e1:86:99:a7:34:7a:ef:a2:f0:50:
8c:d8:47:52:a6:d6:35:04:5e:0b:b0:b2:75:cb:e3:26:0f:49:
62:2d:65:19:03:0c:0d:7f:2a:e2:c1:f8:c6:9b:88:82:82:69:
cf:fa:83:8f:3d:4d:22:75:3c:33:a6:2f:a8:7b:63:2b:94:df:
38:84:39:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:45:59 2025 by rpki-client