Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File: h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier: 8MxbdA0q6ZajDDtmyIL05OBUyzPz+sIL9cF9FX6sD+k=
Subject key identifier: 6C:E6:62:84:EE:1F:0A:61:CF:93:3C:0A:8A:42:85:D9:48:4A:4A:0D
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial: 0196827DF535555E844DB2AFCC0DB68ED940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number: 0C8C
Signing time: Tue 29 Apr 2025 17:00:14 +0000
Manifest this update: Tue 29 Apr 2025 17:00:14 +0000
Manifest next update: Wed 30 Apr 2025 17:00:14 +0000
Files and hashes: 1: RHGOdSgcoaK-6eU2dKjKlpRjaMo.roa (hash: NRVJAc4Gjyt0Wmb+WBhbiFKpJbnBkqjBbBZ7MMuCSS0=)
2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: AYpq5xRxKbfM81RbvZ6ttklouIT0z6RL3QqHhJ4gVlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7d:f5:35:55:5e:84:4d:b2:af:cc:0d:b6:8e:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Validity
Not Before: Apr 29 17:00:14 2025 GMT
Not After : Apr 30 17:00:14 2025 GMT
Subject: CN=6ce66284ee1f0a61cf933c0a8a4285d9484a4a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:23:43:a3:f0:54:c1:87:39:ac:e2:52:c2:
90:71:83:85:3d:ad:63:35:cb:2a:30:7c:07:34:5f:
ad:ce:37:76:11:f4:c4:99:9f:63:d4:1b:68:d8:6d:
5e:ef:da:65:30:d5:17:8a:04:7e:10:df:85:15:22:
11:3d:8a:3b:4f:e3:0b:76:4e:ad:1f:66:27:7d:07:
8c:62:a3:e0:4f:01:e8:6a:fa:79:33:36:4f:9a:33:
8a:56:02:fb:e7:09:9d:f2:e8:22:e3:a5:d8:99:d9:
33:ce:54:f8:3a:c7:d2:4c:de:00:cd:71:af:81:f8:
a8:9e:1b:8b:5b:6e:22:85:7c:b4:77:81:8e:30:0e:
ed:01:14:88:82:28:60:00:c7:22:9c:47:4f:28:64:
48:ec:ef:77:a0:2f:85:0e:f6:a3:f7:eb:55:70:69:
69:d4:d0:07:68:a7:72:39:c7:b5:bd:ed:cf:25:d6:
02:d9:54:07:1f:7c:80:10:6a:66:9a:dc:ce:e9:6c:
d3:48:88:55:71:cf:16:ee:9f:b7:55:a9:1d:9b:46:
ae:9e:b6:66:e0:4e:74:44:a7:fb:4b:56:2f:b6:d4:
59:38:9a:77:95:10:2c:a4:68:2a:54:58:9b:83:df:
f9:4e:f7:93:76:33:d1:89:06:f7:60:fb:62:ae:4b:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E6:62:84:EE:1F:0A:61:CF:93:3C:0A:8A:42:85:D9:48:4A:4A:0D
X509v3 Authority Key Identifier:
keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9b:5b:63:a8:50:06:90:97:67:8b:7d:87:35:f9:cb:3a:ef:
e3:62:cd:da:ac:52:59:76:bd:27:72:26:63:f1:2a:f3:30:61:
8b:fd:bd:5e:22:5f:10:ea:b6:2c:ff:be:6b:dd:b0:0c:02:38:
3e:4e:cb:75:a8:89:7d:15:b1:b8:9c:0e:f7:b1:d4:5e:32:34:
c3:99:56:08:fc:4d:4c:9e:2a:6a:1d:bd:3a:f9:5f:2b:c5:52:
f0:75:26:8f:01:a6:1f:6d:53:2f:1f:6a:2a:62:f5:e9:ba:49:
4b:d4:35:f8:ab:71:35:3d:2b:36:ed:d4:8b:f2:e6:fd:be:a2:
ef:31:49:c1:45:5c:ed:48:7c:ba:77:e7:7e:4f:4d:c1:fc:9a:
57:03:75:db:e5:5a:6d:68:78:e0:15:24:f8:d3:fb:1d:25:f0:
e2:fe:68:1e:cd:30:6c:21:d8:79:19:c3:3e:91:b3:0a:a8:56:
a8:ac:b3:9f:b7:01:9f:93:3a:de:37:da:69:e1:3c:f5:19:c5:
01:37:a5:60:64:1d:26:36:aa:42:12:95:de:4c:a6:16:ce:db:
ba:22:7d:3f:31:f7:f0:ec:6b:ca:c4:32:3a:41:ba:96:4d:37:
f0:59:dd:35:30:15:fc:01:af:20:05:01:7f:c7:aa:bd:c4:55:
79:f7:c8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:38:52 2025 by rpki-client