Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft
File: 6--V-MTFVIJt6POK1rup-3SAKCQ.mft (raw, json)
Hash identifier: deMNqEqfZH1NABKDuNgYpUlpn7jlGIdQmlnIHXm5rRw=
Subject key identifier: D4:3E:CF:90:00:A3:68:27:2D:40:06:56:CC:78:CE:AE:58:AA:B2:91
Authority key identifier: EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
Certificate issuer: /CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Certificate serial: 0196778CB78F7D4F942B047B0BC9A287A0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft
Manifest number: 1517
Signing time: Sun 27 Apr 2025 14:00:32 +0000
Manifest this update: Sun 27 Apr 2025 14:00:32 +0000
Manifest next update: Mon 28 Apr 2025 14:00:32 +0000
Files and hashes: 1: 6--V-MTFVIJt6POK1rup-3SAKCQ.crl (hash: tlK7zczwzdwHrPJsB/a1WJy4BZfr8pkG+x2Y0XtLB64=)
2: Avozmlpq2NAlApXiF9Tau5EKTUQ.roa (hash: vr0jQPA+h9rNejJwiSpp4zT7cG9QduoDB1p9Q5O3h6w=)
3: D5cQDodAYDqiYgIud8LhyCaXvBY.roa (hash: Q507I+wQ8iwnh9vsSJyWeLo1OyDGz9OLIQtJagTcmIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:b7:8f:7d:4f:94:2b:04:7b:0b:c9:a2:87:a0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Validity
Not Before: Apr 27 14:00:32 2025 GMT
Not After : Apr 28 14:00:32 2025 GMT
Subject: CN=d43ecf9000a368272d400656cc78ceae58aab291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:97:93:67:16:fc:6e:32:60:35:67:6f:6b:11:
0f:e9:c4:d8:98:e2:ca:94:d6:7c:55:75:3e:dd:dc:
03:bc:57:ae:4a:53:a7:74:b4:9c:a2:95:5e:ea:06:
91:4d:7a:6e:0a:97:0c:4e:60:8c:fc:cd:f0:54:11:
fd:71:90:6c:08:8f:a9:27:69:80:ac:c6:0e:16:fc:
28:ec:89:ac:33:16:ba:75:57:46:73:c9:94:9d:21:
69:1b:cc:1e:68:ab:29:88:55:09:b4:79:bf:73:61:
e0:a1:57:81:b8:21:ca:8a:af:78:56:6e:2c:e7:af:
d3:25:02:92:df:82:a6:71:2f:58:e5:1a:68:08:33:
63:e9:b9:3a:3a:19:23:50:1a:ef:fe:3e:6b:48:28:
37:20:95:f4:b7:6c:91:49:53:93:cd:6e:fc:7c:2b:
6b:cd:44:9a:75:8d:e9:cf:5d:9b:8c:fc:a7:1f:0b:
5b:6b:39:bd:6b:f3:10:6f:cc:e5:9b:f7:81:4b:6e:
78:8a:21:12:2d:af:d3:ed:d0:f2:13:91:6d:b0:77:
b0:fe:b2:8f:d3:4c:89:0c:eb:f1:12:7f:dc:94:98:
1a:a4:6e:d3:21:b3:8c:ac:65:d5:80:6b:aa:5a:3d:
9b:b2:56:ce:96:48:c8:75:3a:61:64:ce:2d:65:29:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3E:CF:90:00:A3:68:27:2D:40:06:56:CC:78:CE:AE:58:AA:B2:91
X509v3 Authority Key Identifier:
keyid:EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6d:b9:b4:a7:63:7c:9c:42:e6:b1:5b:f0:d4:8a:cf:5d:e0:
4f:94:04:8d:d0:d9:83:07:e3:75:ab:ce:04:5f:4a:43:f2:f5:
cd:37:ea:79:61:07:4b:16:9a:df:40:07:4c:4b:01:a5:0e:d4:
07:03:13:a4:bd:53:40:22:18:bf:10:28:b3:49:cb:24:18:2c:
6c:c8:d7:58:d9:78:72:67:cc:50:ff:22:a7:70:ca:2e:ad:02:
e1:54:6c:69:2e:bd:11:40:ac:64:a9:65:32:2d:b5:92:87:84:
b1:47:30:25:82:61:f3:2c:02:94:5a:4a:83:66:ed:80:ab:ff:
6a:2d:1c:d0:22:10:cc:13:03:6d:80:88:13:a1:90:58:df:dc:
f9:c7:1f:42:cb:55:c7:8e:a9:26:45:28:0c:08:02:ad:9c:9b:
9b:ec:eb:1d:47:95:6a:00:7b:b3:d5:a3:03:a5:4c:e9:fd:6c:
fb:4b:86:74:e8:11:4b:ba:91:41:82:ee:32:19:31:ad:ec:5b:
ff:e1:72:f4:67:84:38:ba:37:d4:e7:f8:94:b4:96:13:29:75:
53:b6:09:88:09:ff:f6:98:db:30:95:d4:75:cd:16:fe:c7:ab:
1f:bf:96:01:3d:6f:ac:c5:ab:56:54:3a:66:d2:0b:53:90:76:
a7:0b:65:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:52:42 2025 by rpki-client