Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: 4d5WIBUUeivgM8VihpkRTLOPPx3dT86KMn3VYloxyr4=
Subject key identifier: A6:5B:AB:BE:D9:40:1B:FF:41:B3:A4:21:19:89:A0:FD:D8:5F:D9:B5
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 0196745496E7FE5C71C354BA239A415BF925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 1352
Signing time: Sat 26 Apr 2025 23:00:22 +0000
Manifest this update: Sat 26 Apr 2025 23:00:22 +0000
Manifest next update: Sun 27 Apr 2025 23:00:22 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: Uv0ZFi6xmPH95+nqRUWPhYesT5tjVGiaOGOvjBI3O+w=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:96:e7:fe:5c:71:c3:54:ba:23:9a:41:5b:f9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Apr 26 23:00:22 2025 GMT
Not After : Apr 27 23:00:22 2025 GMT
Subject: CN=a65babbed9401bff41b3a4211989a0fdd85fd9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:77:e0:41:20:8f:31:a4:67:da:4e:8d:89:
3e:82:dc:a9:d7:ec:08:ea:4d:cb:97:44:66:df:f5:
c4:f0:29:5a:f8:6f:e7:4f:36:62:b4:3e:c2:af:b9:
22:52:a9:51:74:97:7b:c0:50:dc:7a:29:af:45:d4:
3c:a0:2f:68:41:ae:8e:b4:ac:00:e9:6e:b3:1b:8d:
ca:ac:a9:6b:d9:bc:bd:e9:79:9c:3d:92:43:e9:17:
f4:08:16:e6:6f:75:4e:8c:8f:c7:bc:aa:64:f2:e3:
8d:68:8f:85:65:e0:2d:f7:f0:07:9b:d3:73:65:15:
3f:4b:59:27:dd:5e:2e:10:0e:d6:7d:27:19:c5:f6:
77:85:54:84:fd:38:4a:3f:b9:cf:93:13:4a:68:70:
9c:22:d0:04:0a:2e:24:66:f1:e4:3a:f0:02:66:5a:
ba:28:95:f4:c0:8a:81:63:2e:ea:67:ae:00:9b:1d:
15:25:22:7d:f3:ef:7b:a9:3d:a7:39:ae:8b:63:a3:
02:d7:c6:8d:2d:66:1d:cf:ba:31:40:0b:4f:ee:4d:
9a:e3:08:8b:04:74:d3:9a:8b:a7:d4:ed:41:0b:39:
91:cb:cf:d2:6b:e6:85:f1:37:0e:65:e8:07:71:93:
52:90:a8:8b:87:9b:4c:e8:28:27:de:c3:94:90:c8:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5B:AB:BE:D9:40:1B:FF:41:B3:A4:21:19:89:A0:FD:D8:5F:D9:B5
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1b:e4:ee:65:71:d8:b5:49:41:60:1f:df:e1:bb:38:ac:7e:
3a:7c:c6:fb:2c:94:08:71:29:c5:8b:67:d4:60:fb:a8:19:31:
0a:bf:25:35:b6:2b:cd:09:10:66:ff:54:b0:9e:bd:97:9a:66:
48:fb:d6:c2:0a:20:0a:0c:11:5f:0c:a4:09:47:d5:6a:62:83:
12:b5:cd:c5:54:6d:8e:3c:11:3c:4c:a6:85:70:16:d3:70:6d:
4d:9a:a5:00:dc:97:2f:aa:09:7e:ce:7b:02:4e:8e:a0:a9:bf:
f4:45:68:92:ba:f8:5c:db:5c:df:38:91:74:d8:10:3b:c2:fe:
7e:96:91:38:be:b4:09:4b:e9:21:34:1e:1e:da:e3:78:f7:ac:
cc:49:ab:96:32:69:ca:94:ce:1b:e3:2a:67:06:7e:de:5f:46:
ec:a9:26:2b:11:c6:63:df:34:ad:d2:fb:d8:68:30:a6:fe:1a:
26:22:37:88:76:76:be:f6:1c:e5:ac:a8:84:cc:92:0b:8d:ec:
c2:66:20:1a:f2:d3:d1:99:92:7c:e3:90:74:13:0e:f2:90:43:
65:65:05:9b:59:b5:e8:af:61:37:c4:5a:df:73:e8:6c:e2:2c:
e2:ed:4f:8f:dd:b5:30:61:3d:0c:b6:7e:41:7b:0a:4f:98:39:
65:7d:11:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:29:30 2025 by rpki-client