Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: Oi4RR97reoRdEz3p+SiDrMnbHcbj5x5NXtKgZjYnBCY=
Subject key identifier: C6:C4:64:2A:9E:89:76:96:12:2F:3A:59:86:39:A7:FD:46:2E:52:17
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 019658DD7244E1E474370997B71C248294E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 15:00:29 +0000
Manifest this update: Mon 21 Apr 2025 15:00:29 +0000
Manifest next update: Tue 22 Apr 2025 15:00:29 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: 0JfFYPt12iY5/yX2UpvSvFtbOxOBsxmDoDnUCqy8JuQ=)
2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=)
3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:72:44:e1:e4:74:37:09:97:b7:1c:24:82:94:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: Apr 21 15:00:29 2025 GMT
Not After : Apr 22 15:00:29 2025 GMT
Subject: CN=c6c4642a9e897696122f3a598639a7fd462e5217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:af:5b:70:b0:96:38:7f:ec:0f:fe:16:93:
65:52:ac:03:df:cb:fd:39:38:9f:01:17:e5:62:77:
45:cb:52:dc:0b:d8:dd:72:f1:1f:87:3f:14:e4:33:
17:d0:73:3b:10:5a:f8:a9:85:56:62:28:9d:dd:25:
92:ea:d8:49:3c:12:54:b6:65:40:a9:ba:d3:7a:f2:
5f:8d:5c:6c:83:60:79:1e:12:fb:af:ea:3a:48:b6:
db:eb:07:ae:d8:60:b2:7b:e1:e4:79:a5:fa:3c:4c:
1a:e4:53:82:76:4b:ea:5c:2b:23:4f:c6:21:4a:67:
c6:88:4c:34:6c:f7:af:a7:eb:57:1f:85:d1:e8:e0:
05:a3:c0:db:9e:28:dd:46:98:f9:a0:bc:28:b4:d0:
dd:0d:ee:f6:ff:43:ba:82:2d:0f:51:5c:cc:86:95:
0b:69:5d:08:46:23:94:fe:ce:34:aa:c7:cd:45:a6:
a3:b3:35:94:b1:bf:8a:48:61:3e:a9:bd:2a:ea:cc:
c0:d7:5f:8b:3a:fb:07:7c:76:f9:a1:d5:e4:a7:0b:
cb:b1:75:84:c7:70:94:cd:a9:b7:3b:81:cb:d2:8b:
df:cf:ca:21:56:7d:84:0e:55:25:26:35:b3:c4:3f:
5b:da:70:5f:20:65:2f:21:d0:73:6e:53:69:f1:ae:
c2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C4:64:2A:9E:89:76:96:12:2F:3A:59:86:39:A7:FD:46:2E:52:17
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:76:76:c8:d0:e5:a1:00:79:03:f4:a4:54:78:14:e5:f3:14:
47:02:01:1f:47:be:44:27:55:7c:9b:03:2d:83:dd:28:b7:3f:
ab:c0:0e:18:e8:b5:aa:9e:cb:63:31:97:76:9e:a1:5c:f7:b5:
08:3c:0f:57:e8:4e:8a:2a:99:80:e1:10:05:b2:4b:c7:46:36:
08:c1:12:6f:7b:ca:f2:fc:63:8c:8c:dd:fe:aa:e5:73:56:e4:
45:e3:f7:48:97:c2:1b:2b:65:b4:6a:44:5c:0d:f0:84:b2:39:
9e:54:ec:88:ef:2d:e1:3b:2f:66:c4:f4:a6:5d:1f:47:87:55:
37:86:6a:47:c2:b5:97:b1:6d:ae:64:05:5f:c5:2d:c5:03:01:
13:de:e1:47:ec:49:ee:7c:da:25:69:d2:95:b3:10:dd:13:11:
80:3f:89:21:a3:52:41:c4:2b:ee:e4:da:8a:eb:6d:66:94:2c:
3d:2f:6f:57:f8:5e:30:af:53:7a:27:cb:5b:6b:a6:47:fe:a4:
a2:98:91:f2:66:02:fd:2b:60:c2:4b:7b:68:33:01:e3:ae:17:
bb:2b:70:a7:14:25:fc:42:d4:9c:7d:1a:99:93:0e:40:d8:d8:
db:9d:b7:f7:74:68:58:e5:1a:19:21:c9:d2:26:ca:8b:47:d8:
1b:a5:94:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:29:23 2025 by rpki-client