Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
File: 2O6yCogM20lOnmLUOy7yjJDLnu8.mft (raw, json)
Hash identifier: VtpKgKa41kMEBmfaV8l4o0mmjRPBuKQc/25ESlLeyg8=
Subject key identifier: 86:6B:03:B3:7F:68:D1:DA:6C:59:49:E5:A1:2D:54:AA:99:7D:9B:46
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 019673796950335B005B484DAC7CA82ED6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
Manifest number: 040B
Signing time: Sat 26 Apr 2025 19:00:58 +0000
Manifest this update: Sat 26 Apr 2025 19:00:58 +0000
Manifest next update: Sun 27 Apr 2025 19:00:58 +0000
Files and hashes: 1: 2O6yCogM20lOnmLUOy7yjJDLnu8.crl (hash: 56RIzVZjBGS4yyqnPSZOY4+88AVIGkdpgQv+o/XtWYM=)
2: vCMAQMWIPZtWaDRHudCKdYaPL5w.roa (hash: K6MAg/QPc/fQfWH2rJi0K6eyKZU04FRZSEew4e4aMTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:69:50:33:5b:00:5b:48:4d:ac:7c:a8:2e:d6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Apr 26 19:00:58 2025 GMT
Not After : Apr 27 19:00:58 2025 GMT
Subject: CN=866b03b37f68d1da6c5949e5a12d54aa997d9b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:f1:e4:32:15:b8:71:92:6a:7c:df:8b:44:
65:b9:59:1e:f5:13:34:a3:60:df:ad:4b:67:71:42:
25:3f:12:2b:e3:af:69:a8:02:62:f1:0b:0f:1f:99:
f7:ba:fb:48:81:16:ad:49:e8:c5:10:9e:bb:4f:94:
3c:55:40:5c:23:08:d6:24:d4:b6:c4:d7:76:0b:4c:
a6:e0:f7:21:9c:4c:a6:02:5e:cc:91:f7:c3:8d:e1:
27:d8:87:4e:3d:d5:e0:b4:59:b0:bc:7f:86:f5:ff:
8d:18:c1:3a:8c:d2:89:a1:89:28:40:e9:ca:af:8c:
5c:2e:6c:fe:22:af:0b:47:8f:e1:e6:bf:df:75:8b:
50:8f:0c:66:fd:23:b6:08:1e:d4:99:5f:7e:37:62:
78:7c:7a:05:a4:86:36:3f:89:9c:c0:9c:8d:18:0c:
d9:28:01:a7:d2:c8:7d:f5:54:8c:5b:58:e3:7b:af:
f7:23:51:8f:7c:80:a9:1e:3e:4a:20:ec:76:6f:96:
ba:8f:a1:0d:82:fb:a2:51:99:1d:e8:d4:04:8b:48:
e8:d2:72:5f:b4:3a:a1:5c:02:37:15:84:ff:b6:68:
ea:59:39:fb:06:b3:e0:f8:d2:36:49:8f:86:39:a4:
9b:26:11:76:f5:c5:ce:26:0c:a6:73:a2:d2:68:33:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:03:B3:7F:68:D1:DA:6C:59:49:E5:A1:2D:54:AA:99:7D:9B:46
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a7:c5:5d:33:38:62:48:10:cd:a1:a7:0e:8f:71:3c:db:f0:
ee:dd:69:41:8d:b6:37:71:0e:a9:68:79:e0:6d:ca:a4:6e:20:
62:19:bc:22:d8:27:1b:09:c7:49:ae:bc:0c:12:a5:c4:bc:66:
ee:68:cf:65:3b:4a:1e:fa:9b:08:d2:13:97:ae:93:0c:bf:11:
bc:31:04:ee:92:24:20:8b:00:d9:fa:c9:60:02:db:f7:1e:3b:
69:cb:70:ab:a7:e2:65:6e:71:59:d0:9c:13:ce:ae:7f:1d:41:
cb:2d:1d:5d:42:0c:f1:d3:5f:b8:ab:8b:f2:fd:01:fb:76:41:
f6:6c:01:f9:1c:78:72:26:4c:1c:b2:1e:e3:69:6a:60:de:1a:
95:d7:f0:c0:a8:b1:b1:7e:27:cd:0b:ff:03:ec:cf:92:8b:73:
dd:d7:27:f2:21:57:2f:07:24:b9:da:3f:97:03:7c:08:0c:80:
4d:0e:fd:02:ff:c1:12:50:b5:90:b1:c6:8e:e6:f8:2d:dc:8e:
4e:bc:68:2e:5b:97:bc:71:51:b2:9d:2e:1f:05:0f:85:e7:fc:
e5:33:b7:c1:7e:d2:47:07:01:af:c9:3d:3c:14:f9:89:3b:8b:
36:0c:70:5b:d0:65:36:22:d8:4f:e4:31:9f:e2:b6:64:57:1d:
31:2a:ca:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:07 2025 by rpki-client