Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
File: 6Fgzjepq5N27JIUKBwf0OqF5TD8.mft (raw, json)
Hash identifier: iqyRwsOBahHjrKU1j6Hf699tj64jKINR/OlZj4PhKKk=
Subject key identifier: 4F:46:C0:72:1E:40:F6:7B:B5:07:31:33:58:24:54:9C:E3:1F:D9:90
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Certificate issuer: /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial: 0196BF6F45C8865AAB2D76D76289B1D213C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
Manifest number: 1502
Signing time: Sun 11 May 2025 13:01:02 +0000
Manifest this update: Sun 11 May 2025 13:01:02 +0000
Manifest next update: Mon 12 May 2025 13:01:02 +0000
Files and hashes: 1: 6Fgzjepq5N27JIUKBwf0OqF5TD8.crl (hash: L2P09On/iA/hi7HDtsPAcfMHc53BK7GCcWlT1qdMOsE=)
2: KqaueV9hoJCow2ggLZVEN6Aq14w.roa (hash: m49ywOVO+P5/nCXp3LP+DFkgcnb10IgZ5YOzfhx6zR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:45:c8:86:5a:ab:2d:76:d7:62:89:b1:d2:13:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Validity
Not Before: May 11 13:01:02 2025 GMT
Not After : May 12 13:01:02 2025 GMT
Subject: CN=4f46c0721e40f67bb50731335824549ce31fd990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:c1:ca:d3:39:98:c6:c3:15:d6:0c:80:83:
46:ba:3e:4c:d6:f0:fb:49:fc:d2:17:ae:3b:e2:a0:
d1:65:24:a8:64:71:a0:62:4e:23:b5:8e:4f:91:c6:
d9:59:43:a3:4a:f3:c2:5e:17:c2:e9:9d:65:99:71:
f7:ca:1f:a8:02:b3:f1:79:4c:04:69:86:e4:ca:88:
2f:fd:2f:dd:40:38:2b:12:91:ad:78:68:7e:d2:ec:
59:13:b6:92:90:9f:ca:a0:ac:2b:01:9d:1d:b3:3e:
23:84:2e:37:ce:21:56:47:f0:80:71:32:17:dd:6c:
12:6e:e6:fd:23:4a:52:f1:a5:41:7a:14:bb:9c:43:
1a:6e:fd:29:af:a6:1c:4c:08:98:16:bb:8a:c6:3e:
e9:0d:1d:f4:62:17:3c:11:38:29:d5:3f:f6:05:a0:
91:4d:0b:23:3b:7c:3a:d5:48:73:95:ee:e6:98:11:
d3:3f:fb:aa:fa:62:f7:b0:b5:77:68:f0:3e:81:6e:
a5:c8:c4:f3:1c:76:44:2b:44:91:c7:03:31:e1:a9:
52:73:77:8c:83:72:d3:4c:20:1f:a8:46:b8:c1:dc:
ec:d9:6c:13:ac:99:b6:64:60:69:fb:64:e3:be:83:
b7:23:2c:22:79:93:e3:07:78:a1:e2:d7:57:9a:7b:
85:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:46:C0:72:1E:40:F6:7B:B5:07:31:33:58:24:54:9C:E3:1F:D9:90
X509v3 Authority Key Identifier:
keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d8:d5:1a:17:53:7a:7c:68:c8:9b:5f:5d:70:71:2f:d6:7f:
2a:53:4d:bb:df:61:a8:78:0b:7d:80:92:29:c4:f9:af:75:9e:
66:9b:0a:68:49:f9:a9:c6:b6:98:43:ea:d6:e2:21:ea:80:a2:
fe:91:fa:8a:f8:1b:db:ff:ba:53:1d:ba:01:11:27:58:36:2f:
18:7e:eb:ed:46:54:c3:1f:6f:46:e7:7e:ef:4c:2c:a7:70:c8:
14:0e:7a:b5:c0:45:cb:8c:5e:22:ba:0b:8d:c8:e3:69:b9:a0:
93:37:b2:d7:4e:58:b3:c4:c5:24:d4:b3:0c:c4:27:de:f1:db:
09:be:57:6f:81:9f:71:e9:fa:c9:0b:fc:01:70:cb:3c:ac:bf:
be:0c:05:c8:6f:8c:e8:54:20:4a:08:2b:4a:77:d8:4f:c6:b6:
8b:17:d5:0a:f3:ab:3f:f2:5b:69:0d:43:a9:a4:09:1e:e4:b2:
6a:64:29:8f:fc:57:70:0f:ec:e2:35:33:77:c6:66:42:08:56:
7b:5a:37:c9:3a:6c:b8:51:db:af:9e:e0:1f:90:f7:12:2e:d8:
3c:4f:10:b4:93:f2:95:2c:1a:fa:49:e8:31:86:11:25:3a:3e:
3c:aa:a9:e1:5c:52:74:14:59:51:0c:46:df:16:0d:a1:55:48:
e0:e8:f0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:34:27 2025 by rpki-client