Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
File: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft (raw, json)
Hash identifier: E9kmhbSEmNOjBJVSDeCOZZpKfjBeiaa+bxaZs+TUtkg=
Subject key identifier: 8B:33:30:58:06:27:76:FC:96:D4:15:FD:54:14:B5:A3:90:DC:78:41
Authority key identifier: E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
Certificate issuer: /CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Certificate serial: 01967D2135FA37BA6228658A2CFC765AF5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
Manifest number: 149A
Signing time: Mon 28 Apr 2025 16:00:50 +0000
Manifest this update: Mon 28 Apr 2025 16:00:50 +0000
Manifest next update: Tue 29 Apr 2025 16:00:50 +0000
Files and hashes: 1: 6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl (hash: lkYJx4RhuzLkhDwT3T6VdlswctrfZG5pwSu2I2/cP2E=)
2: rvzjyC9muvr4migx_xtUIzZ2FRM.roa (hash: 2jsltHZ+YtkUSfR/OVprtu2235QmWCtb64qQWKzazWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:35:fa:37:ba:62:28:65:8a:2c:fc:76:5a:f5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ed602fd0d46d38cde1e732c652ea9958e97691
Validity
Not Before: Apr 28 16:00:50 2025 GMT
Not After : Apr 29 16:00:50 2025 GMT
Subject: CN=8b333058062776fc96d415fd5414b5a390dc7841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:dc:d3:8e:19:ba:e0:29:fd:cd:99:76:0b:
89:38:64:c6:21:68:63:91:32:69:c3:1a:a2:c4:de:
e7:60:d3:00:c4:0a:13:c5:bc:62:dc:09:ca:b3:a5:
fb:25:83:24:8b:62:09:bb:fd:b3:60:81:14:02:6d:
48:77:52:f4:5e:3d:e3:22:65:91:c5:ce:71:6d:6d:
4e:17:50:b6:47:49:4a:f4:9f:40:1d:28:fe:a0:82:
84:fc:e6:c9:97:f7:30:08:d4:ff:6e:18:58:44:23:
60:e6:84:9f:95:c4:dc:90:69:5f:f7:0d:bb:82:59:
a8:98:8b:3b:5e:b1:d7:ad:db:a2:b3:15:48:e1:c7:
b7:24:f8:fd:40:3c:53:68:cf:59:df:fd:71:d6:86:
ea:d0:30:b2:a5:16:8e:34:8d:bc:56:07:a6:78:e7:
90:75:35:3a:73:72:84:32:5e:56:af:06:89:f9:1d:
4d:6b:93:5e:19:5b:7b:a9:1f:88:86:fb:6a:19:71:
80:c1:50:78:03:c9:9b:be:75:55:aa:5a:b7:7d:b9:
a3:c7:f9:1a:05:a7:95:e3:73:23:9c:4b:16:c7:f8:
fe:f7:e0:87:99:99:2d:71:34:46:71:c0:31:db:5d:
4f:bc:7f:92:59:2d:53:ef:6a:b1:f6:f5:4a:24:3c:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:33:30:58:06:27:76:FC:96:D4:15:FD:54:14:B5:A3:90:DC:78:41
X509v3 Authority Key Identifier:
keyid:E8:ED:60:2F:D0:D4:6D:38:CD:E1:E7:32:C6:52:EA:99:58:E9:76:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6O1gL9DUbTjN4ecyxlLqmVjpdpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b6409b-1638-4c7a-81f2-94f8fb3009f2/1/6O1gL9DUbTjN4ecyxlLqmVjpdpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5e:ee:7c:c5:c5:7c:32:6c:33:26:20:ad:4e:1c:42:de:b2:
2d:b3:f0:72:62:9a:f1:35:14:1b:14:e9:7f:2c:d5:70:ba:16:
34:b3:73:5e:ac:d6:a6:a9:00:cc:d9:f5:93:2a:8b:b3:ae:ef:
18:17:96:4b:e0:02:3f:85:22:44:05:8c:c1:a3:c6:f2:7b:31:
14:f8:38:10:60:ad:7c:fc:69:85:8c:22:02:e3:ad:14:2b:b1:
50:8e:15:94:3c:ce:f0:70:71:9a:73:fb:3f:13:fa:4f:6f:8e:
c1:e8:1a:20:2a:ed:a8:a8:b7:c5:ae:24:8a:23:6e:78:54:0f:
6e:f5:f1:99:24:00:48:8e:1c:3e:9a:55:7c:24:3f:bd:41:8b:
2b:d7:87:4a:f6:9b:c3:70:da:c7:10:fb:de:bd:73:51:d8:02:
d6:c6:4e:4c:1f:f2:bf:eb:e6:60:3e:c5:7b:9f:df:a8:b1:06:
5d:c1:5b:e9:0f:26:72:74:7b:d3:3b:3e:17:79:5a:bc:b2:32:
c6:ee:08:1c:7a:28:49:b3:6f:2a:fe:82:01:70:8e:12:36:eb:
3a:bc:da:c6:0d:cc:73:b9:0a:4f:cd:06:8d:5b:2c:24:07:81:
e7:07:91:7e:4b:f8:0b:d7:54:80:1b:fd:0b:d8:5c:d9:a8:e8:
1d:0c:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:59:41 2025 by rpki-client