Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
File: 6T86Qea-UkEVxsK1WLwoAEOgIk4.mft (raw, json)
Hash identifier: osPtQ3zZ9a61eWoO3poxYDjcgxS7VxvUND0y8uosQ2o=
Subject key identifier: 61:58:BA:FB:CC:43:B5:5C:BF:ED:4C:1E:5A:9D:6D:C6:09:FA:3A:2F
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Certificate issuer: /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial: 01967CB2EFA74DA7E353A6C93B1A071FC679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 14:00:23 +0000
Manifest this update: Mon 28 Apr 2025 14:00:23 +0000
Manifest next update: Tue 29 Apr 2025 14:00:23 +0000
Files and hashes: 1: 2NXfzQOX2yzR_1PZmnB4_Blj3Qs.roa (hash: Ak/GG6l8wter3UNq3QplQdRhCDB/vDLztI0yd4qCSKk=)
2: 53KqbajJkABxQADjbHVlPygTcKc.roa (hash: kwajHsXo697+03N+LHzWo8d+aEKRsJl5vDuyUDMyntE=)
3: 5UkoSBgwT2Qf3aFassiPq3Vf9Jg.roa (hash: t3qUJPhi+Poc2aWmH2JZX3lQ8LuDxwy2KrfiHtXlPiA=)
4: 6T86Qea-UkEVxsK1WLwoAEOgIk4.crl (hash: mDt0xh4zPNO8OxRXnNzN1daQiy5tWej5dxVLJjL7yq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b2:ef:a7:4d:a7:e3:53:a6:c9:3b:1a:07:1f:c6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Validity
Not Before: Apr 28 14:00:23 2025 GMT
Not After : Apr 29 14:00:23 2025 GMT
Subject: CN=6158bafbcc43b55cbfed4c1e5a9d6dc609fa3a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:25:e9:99:9a:19:23:17:7f:2e:12:8d:02:
f4:7f:07:5a:47:3a:69:50:0b:2e:06:6b:3b:30:b7:
dc:74:4a:c8:c6:e2:c4:23:95:e8:32:40:ca:d2:46:
f5:1d:d8:4d:f5:de:f3:e2:97:f9:11:30:bf:bc:93:
74:1f:23:b9:86:81:31:5a:24:e1:fc:ee:94:4b:8b:
9e:07:48:78:b0:21:a5:dc:56:25:22:0d:1f:43:8f:
46:46:cd:1a:98:c6:c8:fe:91:ff:7f:f7:95:52:0c:
1b:df:23:5c:ce:bf:f5:33:97:51:43:83:51:3a:cf:
e6:a2:3e:9e:c0:40:b0:3d:03:09:c5:21:5d:d9:9c:
20:c9:11:83:ba:e2:b8:75:e8:22:97:7e:58:9d:47:
d2:db:bf:6f:d6:b5:85:59:12:be:da:f3:58:da:58:
de:b6:6e:e5:95:45:68:97:35:a3:56:fd:16:09:22:
1c:c5:d0:f7:a0:52:43:0b:50:be:a1:71:0c:f1:f2:
7d:7e:f3:ae:29:40:96:ac:d4:2e:9e:35:61:5d:75:
2d:b2:98:4a:0d:29:45:63:4f:d7:21:cc:09:6d:b3:
19:23:ae:a6:45:b1:5b:70:64:11:b0:c2:d3:e4:af:
ef:26:74:a1:09:c9:40:14:e2:d2:e3:99:77:6e:a0:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:58:BA:FB:CC:43:B5:5C:BF:ED:4C:1E:5A:9D:6D:C6:09:FA:3A:2F
X509v3 Authority Key Identifier:
keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f2:99:5b:22:eb:d9:8b:75:71:bd:fd:1f:91:1c:15:a7:f3:
0e:c2:52:d5:29:3c:82:d1:82:dc:d8:b6:a3:2b:2f:98:82:28:
0f:f3:de:a9:6a:d9:4e:56:73:9e:e5:1a:71:5f:d1:49:3b:a0:
f4:2f:8c:70:25:ea:78:80:88:a6:c8:13:5f:a7:9d:17:96:b2:
35:3b:d9:eb:1e:c3:1d:72:03:8b:f5:56:aa:03:da:7c:bf:ae:
92:f4:43:af:8e:0c:b8:f9:a8:d8:f3:0a:07:29:85:53:33:b3:
4f:6f:eb:5b:39:40:2e:9d:69:61:ce:ee:82:a8:46:a0:b6:8e:
29:6f:22:9d:b9:24:be:5e:3d:ef:37:67:c3:a6:29:55:a1:a1:
30:60:a9:96:96:6e:cc:af:30:5e:4f:46:34:04:cc:0e:3b:d3:
3e:ab:e8:07:69:bb:11:a8:01:7f:38:84:1f:ac:94:7a:cd:5a:
42:3e:43:4b:01:58:f9:61:97:60:70:a4:05:51:36:8b:b8:a5:
ec:d6:70:ca:be:12:a8:a5:6f:80:e0:0d:07:8c:7a:62:45:1e:
97:90:e3:00:3f:e3:b2:5d:81:b8:7a:da:8f:b0:bc:2b:1c:7f:
74:41:43:5e:a3:43:2e:07:0a:eb:a3:cf:c2:83:9d:37:b2:f2:
b7:5f:78:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:29:47 2025 by rpki-client