Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File: 6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier: hTYuacX6y2QFOTTs+he60kGMC1LDfOehHUZiHoj4wXw=
Subject key identifier: A8:52:8C:1B:CB:35:06:2E:B2:D4:26:84:84:0B:4E:8C:E3:20:76:6D
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: 019680C6D6D859E0256D8C37A914159A4FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number: 0E6B
Signing time: Tue 29 Apr 2025 09:00:36 +0000
Manifest this update: Tue 29 Apr 2025 09:00:36 +0000
Manifest next update: Wed 30 Apr 2025 09:00:36 +0000
Files and hashes: 1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: zhPU0MgNNtd4ZiNQwclR0BoduWojiiDIoMixK5t+UFg=)
2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:d6:d8:59:e0:25:6d:8c:37:a9:14:15:9a:4f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Apr 29 09:00:36 2025 GMT
Not After : Apr 30 09:00:36 2025 GMT
Subject: CN=a8528c1bcb35062eb2d42684840b4e8ce320766d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:79:e1:a7:a4:89:27:1f:94:1c:4a:67:4a:
81:6b:ef:96:7f:37:4d:30:52:09:07:4b:d0:04:64:
99:2a:a5:09:f8:aa:19:05:c0:f4:06:79:96:d1:0a:
59:11:c1:8b:27:ed:ac:29:85:9f:da:81:9e:7b:b0:
96:63:73:f2:2c:61:31:a3:4b:57:65:ff:07:f8:e7:
f2:8d:9b:4d:08:03:82:1c:f7:eb:7d:79:b2:70:42:
42:de:6a:1f:56:32:a7:d8:b3:c9:9f:79:b1:65:14:
66:5d:87:1d:07:5e:0c:94:18:90:db:15:d5:4c:6b:
82:88:1e:8c:67:d6:cc:28:e1:8e:ab:58:37:bb:a5:
c1:8e:eb:cb:58:30:ce:54:19:7a:fd:1e:19:b8:e0:
c3:d8:df:b9:64:d1:72:26:c9:88:59:3c:9f:86:53:
7b:cf:2d:f4:df:19:f5:4f:c7:d3:0b:ce:92:16:15:
fd:4c:c6:ad:ff:55:c7:7e:7a:5d:75:7d:cc:b4:55:
a1:89:5c:f9:d2:0d:36:de:6d:05:ce:36:be:e2:41:
70:a1:1c:8f:53:27:dc:ed:30:7d:4d:ad:6d:8f:c1:
b1:43:66:8d:0d:ed:bf:eb:c5:bb:57:ef:61:25:92:
46:cf:d6:51:db:a4:8c:3e:84:1d:19:7e:43:98:99:
45:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:52:8C:1B:CB:35:06:2E:B2:D4:26:84:84:0B:4E:8C:E3:20:76:6D
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:37:c8:e3:ba:51:07:42:aa:3d:6d:e0:97:7a:9c:f6:c7:08:
73:e5:5b:a0:a7:db:fb:be:f7:63:2c:96:ee:27:39:0a:36:f1:
6d:d0:f0:8a:19:5c:fa:40:0f:a4:bd:57:81:1e:cb:2a:6a:d7:
f0:e4:c2:46:c0:50:9e:f2:56:a9:f1:53:b2:17:5e:5b:77:e1:
11:53:00:47:ba:4e:e9:7c:be:59:c8:17:88:fe:53:9c:ff:14:
16:73:53:19:3e:1b:0e:43:c7:07:53:2f:5d:f5:2f:75:87:c3:
c8:83:36:26:15:32:18:64:9c:60:bf:3b:d7:c8:b2:08:5b:25:
36:a5:a3:09:b0:49:33:02:52:36:d1:68:ca:33:5f:c3:af:4d:
32:32:c9:39:bf:02:e1:34:03:62:87:1a:13:84:0e:49:b1:99:
85:20:ce:4e:57:ec:84:f1:35:3c:ff:89:d6:48:83:64:10:42:
25:f6:92:e7:bc:c7:14:a3:27:f0:cc:50:05:a6:f9:2b:c6:46:
3d:79:19:f1:31:56:50:cb:15:a4:1b:1d:49:c2:c5:44:22:44:
46:8c:bd:1b:38:90:e3:2d:8f:b7:be:7f:4b:84:1b:a9:b0:d6:
97:8d:a4:0c:2d:d2:2b:8f:d4:12:db:bb:9b:fe:f6:c1:ff:83:
e2:92:d4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:19:48 2025 by rpki-client