Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
File: 6FZKS1_vRERHffDaWxmSTVLRAJQ.mft (raw, json)
Hash identifier: CbcQtqmTQ/BqycmGPSR88exb4SYxPg7ZZmKgIrnBfiY=
Subject key identifier: 34:1B:21:3A:FE:D5:68:FA:A6:7F:47:3A:95:68:D6:17:6D:32:CC:F0
Authority key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
Certificate issuer: /CN=e8564a4b5fef4444477df0da5b19924d52d10094
Certificate serial: 0196789F4F6630256C20D14C0D92FC080C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 19:00:28 +0000
Manifest this update: Sun 27 Apr 2025 19:00:28 +0000
Manifest next update: Mon 28 Apr 2025 19:00:28 +0000
Files and hashes: 1: 6FZKS1_vRERHffDaWxmSTVLRAJQ.crl (hash: i/+RnXTpmwSgWWVgdg2tbwnxHNR60hmvmsgcx/Y02W8=)
2: 9SVfluOBZwBfs-bjwE_rTE8NN74.roa (hash: vH7rlpjAcAk1sy3DNBgkpNoFX/t68ex1sv/VxyfNsUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:4f:66:30:25:6c:20:d1:4c:0d:92:fc:08:0c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8564a4b5fef4444477df0da5b19924d52d10094
Validity
Not Before: Apr 27 19:00:28 2025 GMT
Not After : Apr 28 19:00:28 2025 GMT
Subject: CN=341b213afed568faa67f473a9568d6176d32ccf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:f1:25:26:0a:06:71:a0:6e:ec:c4:b0:5b:
fa:da:d7:d3:a8:51:ae:ab:7d:f8:05:02:c0:94:72:
d2:2a:fc:77:2a:75:8d:f5:b3:e6:bb:8d:bc:de:38:
c1:6a:53:38:e6:55:a1:db:97:3c:58:e9:48:3a:77:
84:2b:42:ff:10:9c:9b:8b:cc:c8:95:10:d9:9d:8c:
7e:d8:6b:7b:34:ee:15:d2:e7:d1:2d:11:13:ee:81:
7c:b5:37:77:80:37:9f:6e:5f:97:78:73:de:d7:a2:
07:08:d0:a8:d4:8f:9a:56:63:9a:8f:23:7e:10:03:
42:b3:56:7b:8f:0c:0d:c5:6d:71:33:7b:32:73:28:
a0:21:9a:a1:f9:73:d4:78:45:e2:de:ce:10:aa:6b:
9c:cd:a2:94:8a:0b:62:0e:cf:44:88:0a:e7:b4:3c:
58:bc:46:1c:a4:6d:95:27:41:a1:46:35:63:81:7c:
8d:0a:a4:7c:c2:21:ff:3f:81:70:44:f6:0a:fa:70:
3f:df:5c:f9:db:1b:f2:73:a0:4c:66:bc:61:44:50:
06:4e:12:3a:cb:1e:1e:25:4c:52:31:2d:b9:c0:0e:
29:f1:5b:f4:b3:ec:ca:b6:e6:fd:b8:7a:4c:b2:fd:
74:72:80:c2:74:8e:06:b5:99:ca:91:a7:34:d6:a6:
8c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1B:21:3A:FE:D5:68:FA:A6:7F:47:3A:95:68:D6:17:6D:32:CC:F0
X509v3 Authority Key Identifier:
keyid:E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c2:31:70:f4:f1:0e:83:0f:09:7b:58:ff:33:4a:18:44:41:
13:a9:89:4d:23:58:60:03:58:65:a1:c4:56:6c:04:3d:bf:5c:
f1:8d:55:53:5c:47:70:33:c9:4a:f1:bb:a4:76:2d:14:f3:e8:
5a:61:bc:98:1a:79:4c:ca:9b:dc:4b:ac:dc:91:dc:21:b7:f5:
73:06:08:61:c2:d6:c7:24:b6:0f:d5:bf:9d:d6:e9:2d:05:1c:
a5:1d:8e:b3:f7:6c:8e:d1:7f:dc:ce:b7:10:70:d6:15:45:2c:
e3:ca:70:87:ef:13:25:7a:bb:ea:be:0e:87:af:c8:ac:02:26:
8f:4f:ed:e8:49:33:a4:40:7e:c5:df:5d:e7:e8:69:57:af:be:
0c:1f:5d:d7:78:5c:a3:f4:c3:1e:19:5f:9e:d0:48:b9:dd:76:
ac:ca:7e:32:14:24:3f:5d:5b:c7:a6:0f:8a:03:63:49:22:5d:
bf:05:d8:31:0d:e7:43:27:d5:79:af:1a:ed:13:82:71:68:c1:
bb:5c:67:33:69:eb:73:56:2b:4f:65:9d:59:a3:31:a1:11:80:
0e:3a:74:a3:d4:b4:b3:b3:24:24:ed:16:98:6b:83:65:d3:fa:
8a:4f:e3:a0:b4:2c:e6:cc:21:de:7e:07:31:fb:67:8d:00:1e:
1a:91:f1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:18:13 2025 by rpki-client