Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
File: 6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json)
Hash identifier: L6XTMoiT8Scx2aXmnMotRV/+K6hEewDMDMV3nEfPhfc=
Subject key identifier: 37:05:EE:C9:BA:7B:1A:22:15:42:47:A0:0E:C2:DE:29:60:46:F1:AC
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial: 0196835A32FCB86F9B06A585F18A0F479955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 21:00:48 +0000
Manifest this update: Tue 29 Apr 2025 21:00:48 +0000
Manifest next update: Wed 30 Apr 2025 21:00:48 +0000
Files and hashes: 1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: RBTs8p0CKFlhmMwBT4ip6mHRghOApwwJLM6obe92xUQ=)
2: xNXvRwm0cFi8tLLdb2nvNopZe5s.roa (hash: Ek+ehf6lVos9XeTSOdvg4+GzfPP9fwac2An5Jv96Lm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:32:fc:b8:6f:9b:06:a5:85:f1:8a:0f:47:99:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Validity
Not Before: Apr 29 21:00:48 2025 GMT
Not After : Apr 30 21:00:48 2025 GMT
Subject: CN=3705eec9ba7b1a22154247a00ec2de296046f1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:15:58:76:3c:bb:29:56:03:80:43:9c:6a:
92:f0:5e:5a:45:d5:61:44:fe:3e:bc:1a:be:c5:db:
d8:ad:5a:cc:0d:e3:28:a2:ce:30:63:5b:a7:0f:14:
48:74:ed:60:d8:ff:16:44:b8:bb:95:e2:e7:b8:36:
96:f5:5a:bd:55:cb:86:83:27:d6:05:9a:c2:77:ce:
e2:d1:8e:f1:f0:83:01:4c:9a:d3:c0:a6:a4:fc:f2:
47:2a:5b:3c:46:d0:fa:bd:46:31:6b:fb:dc:f7:9f:
3b:f1:72:e5:e1:6f:53:f6:0c:66:f9:14:3b:66:82:
02:d2:3d:c5:2a:a5:9a:58:d8:33:80:4c:b6:a5:b9:
c7:9d:f0:fd:1e:67:f6:53:69:54:f7:e0:7c:fb:1a:
85:e8:07:64:c9:ba:6d:6c:0f:7f:6d:41:75:35:d6:
b7:44:d2:79:8e:1e:53:e5:c3:8d:06:10:e3:03:2e:
e8:bf:b8:be:1d:09:81:7c:1a:d2:bf:63:ae:38:7d:
e2:bb:68:3b:12:fe:e7:c5:b9:f1:99:bb:73:67:a8:
b8:da:43:33:31:6a:4d:38:72:11:c1:78:51:bd:79:
51:4f:08:bb:ba:d8:31:9c:78:9e:df:69:a2:a6:5b:
c0:fc:c2:5a:21:f5:83:7e:1b:a6:45:f2:6d:90:48:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:05:EE:C9:BA:7B:1A:22:15:42:47:A0:0E:C2:DE:29:60:46:F1:AC
X509v3 Authority Key Identifier:
keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c6:7f:a6:67:12:5f:c5:40:bf:0d:9d:45:fa:7b:ca:bc:6d:
bb:87:8f:cf:0d:46:35:a1:b3:e3:4c:80:71:a0:1c:35:3a:72:
07:aa:41:11:b7:f1:72:bf:73:f7:31:1c:6c:ab:b4:bb:c0:18:
e2:75:0f:09:7a:96:b6:0d:2f:12:ab:c0:0b:28:09:88:7c:cd:
d1:9e:e1:ed:91:8c:43:dd:fc:76:bf:62:73:e8:0d:ed:d2:5f:
c5:5e:81:66:8d:c5:d6:6f:83:98:d3:1b:d2:68:96:7e:87:c7:
be:e1:b8:dc:2b:a2:13:10:0f:24:e5:d5:3c:35:4f:b7:ed:db:
ad:aa:99:fe:ea:16:42:32:57:77:a5:b3:46:63:7c:2f:0b:cb:
fc:41:d5:25:1f:42:52:5c:8f:33:81:d1:e2:43:2b:bd:83:fd:
cc:6a:59:07:37:7c:24:b8:4d:70:a8:9a:c0:53:af:05:89:06:
26:a4:21:42:9a:9f:4e:0a:76:06:62:44:22:ee:10:bd:1b:ea:
5f:6b:6b:44:1f:68:0d:69:27:95:98:ab:09:ad:af:ca:52:05:
9a:fd:75:3c:2c:44:1a:90:bf:8f:1c:cd:e5:3d:81:0f:25:5e:
2b:67:6f:66:9d:9f:a7:41:d6:82:35:af:5e:7a:b4:c5:de:0e:
a1:98:36:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:43:17 2025 by rpki-client