Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: DRlCIcvoH3ksD7r0vq9z6zbAsucxiYJFvxYJ5wUD1qo=
Subject key identifier: 50:FD:A9:C0:A6:D3:16:47:59:54:88:F1:FE:8A:F8:6F:57:A2:0C:81
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 019679E9FF714648417815360307BC3EF726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 081A
Signing time: Mon 28 Apr 2025 01:01:40 +0000
Manifest this update: Mon 28 Apr 2025 01:01:40 +0000
Manifest next update: Tue 29 Apr 2025 01:01:40 +0000
Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: alrHFxnigAn4OMiv7wfxOo2aiG9QcwnI2iLIDQtPlF0=)
2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:ff:71:46:48:41:78:15:36:03:07:bc:3e:f7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Apr 28 01:01:40 2025 GMT
Not After : Apr 29 01:01:40 2025 GMT
Subject: CN=50fda9c0a6d31647595488f1fe8af86f57a20c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:3e:0d:ef:0d:49:5e:9d:f8:e9:e8:f2:4e:
2a:7e:f8:e0:89:87:95:45:6c:9f:68:2a:87:b7:02:
d6:8e:fe:9c:15:87:4d:53:ca:bd:c0:99:81:1a:cb:
a5:8b:c3:d7:27:2a:90:0e:3d:06:d8:8f:7f:22:7b:
32:a8:50:db:bc:51:d3:ae:50:f9:ef:36:db:a5:a5:
95:2e:57:38:b1:d8:c1:36:92:61:8a:69:d2:53:d9:
19:88:7c:04:b2:0c:37:5c:d6:6d:9b:6b:d5:33:57:
6f:cc:e9:46:ca:38:69:be:ef:30:62:71:0b:2c:93:
fa:07:ea:41:c5:87:7f:07:d1:02:8c:83:ce:17:cf:
b3:da:f7:c3:04:d0:67:25:67:bf:15:2c:e9:1f:2d:
f5:79:e6:e0:38:57:0a:30:39:f7:62:0a:17:ce:2b:
b5:f3:a7:09:0a:d8:8e:bd:57:72:35:eb:b5:44:b6:
97:79:1d:8e:b1:5b:f9:aa:bc:76:b3:56:53:ae:c5:
04:97:83:b8:78:b2:9b:2a:30:4a:ba:4a:7b:c5:a4:
22:32:41:88:4c:6e:1a:a6:38:f2:6c:ae:07:a2:f2:
5b:6e:8e:25:60:ce:1c:f4:90:e6:94:2c:49:c7:88:
66:3b:07:30:6d:5c:04:fb:7b:3a:e5:47:d0:44:c9:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FD:A9:C0:A6:D3:16:47:59:54:88:F1:FE:8A:F8:6F:57:A2:0C:81
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:34:48:87:e7:8d:8d:09:02:40:9e:90:b3:fc:5a:bb:eb:6a:
9f:e6:7b:61:fa:7b:90:62:70:08:60:c9:04:2c:40:5d:ec:fe:
ce:a9:6d:69:37:05:5c:91:75:ee:14:10:3b:ef:ae:43:96:5d:
65:a4:30:7c:2d:cd:73:81:cd:f1:9c:97:b6:bc:95:e1:0a:35:
bd:cf:e2:7d:19:94:33:d1:79:0f:9e:fa:a0:23:71:9c:4c:eb:
84:cc:85:6d:32:28:5d:2d:13:6b:46:ed:cf:60:86:c7:65:86:
90:9e:db:fe:cf:12:68:11:90:e6:6e:73:c4:49:5f:46:4b:0a:
a8:3d:37:39:e4:cd:d0:71:b1:a0:85:8e:17:9b:e4:19:8e:1c:
6f:78:86:0c:70:53:6a:ae:5f:19:fe:d9:f4:07:c4:99:8f:67:
df:f2:83:44:f6:03:ef:b5:ab:9f:c5:88:c9:ad:f0:cd:4a:db:
70:f2:68:17:97:01:d9:24:02:67:03:cc:3c:f0:33:df:c5:2b:
7c:be:a8:51:c7:dc:22:f1:23:53:11:d2:aa:47:cd:c3:83:36:
fe:66:6c:b3:94:c7:f9:4d:77:64:17:4b:51:8c:44:53:19:bb:
82:94:4c:c9:49:8d:70:35:85:41:99:98:75:41:56:4f:0c:95:
08:4b:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:24:23 2025 by rpki-client