Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
File: 6lPzPM38X-hLhMFfBDIpBpka-ec.mft (raw, json)
Hash identifier: 4JXVGoZE3i5asg3+BqjdBnnZG3C/bvpPfYrBR29qy0s=
Subject key identifier: 55:66:EA:AA:EF:5A:6B:1D:E2:3E:59:8E:1D:B7:33:19:20:F4:AA:69
Authority key identifier: EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
Certificate issuer: /CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Certificate serial: 019656EF1927D5221B2BD4F8ECE5FE16F53B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 06:00:32 +0000
Manifest this update: Mon 21 Apr 2025 06:00:32 +0000
Manifest next update: Tue 22 Apr 2025 06:00:32 +0000
Files and hashes: 1: 6lPzPM38X-hLhMFfBDIpBpka-ec.crl (hash: NQOD9j4et374MetJLFV4t8yPkBdOYeldLCz0YJfiKZ4=)
2: xNXvRwm0cFi8tLLdb2nvNopZe5s.roa (hash: Ek+ehf6lVos9XeTSOdvg4+GzfPP9fwac2An5Jv96Lm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:19:27:d5:22:1b:2b:d4:f8:ec:e5:fe:16:f5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea53f33ccdfc5fe84b84c15f04322906991af9e7
Validity
Not Before: Apr 21 06:00:32 2025 GMT
Not After : Apr 22 06:00:32 2025 GMT
Subject: CN=5566eaaaef5a6b1de23e598e1db7331920f4aa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:ee:58:11:6b:22:f9:c6:51:90:91:3d:56:
8d:7f:55:1b:ca:ee:15:f6:a8:35:3e:33:27:93:a2:
0b:db:ab:b7:4c:1d:3a:74:aa:fe:eb:ef:0c:4d:2e:
fd:1f:15:f9:e7:69:ba:35:a5:bd:32:4f:ca:27:26:
a3:c2:33:8d:9e:38:aa:a2:28:9d:21:c8:10:b0:c9:
32:5a:b4:bc:5e:3a:66:5f:69:55:34:e7:ef:2e:65:
e1:e0:cd:b7:2e:bf:5f:4e:d7:1e:29:ff:77:d5:7c:
b6:3e:ee:d9:64:d2:34:0d:01:de:8f:ad:09:32:b0:
45:f7:19:ae:2b:aa:ac:7a:c7:42:3e:ef:a7:e5:83:
83:ed:53:df:a2:f4:6c:0b:f8:e0:55:b3:b9:6f:14:
2f:01:ce:fd:c7:3d:9b:7f:10:de:0b:17:f6:d4:4f:
77:0b:02:a6:9e:98:19:92:0b:6b:aa:95:b1:af:85:
f3:fb:1e:43:a7:7f:fa:6f:08:93:40:5a:32:5e:ba:
a8:6b:b2:27:7f:0b:d9:a9:f5:d6:97:e6:18:0e:2b:
fc:04:b8:07:03:2f:0c:22:d5:da:7e:5d:cd:4f:1d:
b4:bf:da:05:e0:9f:42:ec:9c:3c:04:fd:aa:5a:2a:
42:18:86:1d:46:c1:7e:28:e5:4e:46:69:34:9c:c2:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:66:EA:AA:EF:5A:6B:1D:E2:3E:59:8E:1D:B7:33:19:20:F4:AA:69
X509v3 Authority Key Identifier:
keyid:EA:53:F3:3C:CD:FC:5F:E8:4B:84:C1:5F:04:32:29:06:99:1A:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lPzPM38X-hLhMFfBDIpBpka-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f95298-f909-45c9-9104-8a4f63ea9bf1/1/6lPzPM38X-hLhMFfBDIpBpka-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f5:a3:9b:15:7a:d6:7c:6a:d3:a4:09:b4:a0:87:73:00:e8:
f3:ea:c5:ff:bd:46:6a:d6:c9:8a:23:84:cf:da:4a:a4:fc:10:
57:fe:a5:d5:07:1c:e9:59:59:fd:22:81:3c:c9:98:bd:c7:47:
1f:50:5d:d0:92:bb:a7:8a:9a:4c:c8:8e:29:5b:70:bc:85:ab:
94:13:f8:e7:dc:97:39:35:7c:88:cf:06:4f:d6:60:ec:93:ca:
b3:b3:b5:67:21:5b:c6:06:03:36:8d:9b:31:a4:c1:1b:9e:ce:
f0:fc:f6:8c:1d:2e:2c:1e:17:f9:af:d4:b2:bd:35:4a:e3:14:
58:62:db:bb:bc:f0:c1:4f:b4:40:0e:ee:8c:87:06:80:61:95:
88:a4:50:32:db:78:22:4a:12:be:18:79:02:fc:8e:3f:0f:d3:
6f:f4:be:98:dd:85:ff:3c:c5:3f:b5:96:94:3c:5a:2a:34:cc:
69:3e:c8:01:8f:91:fe:30:f6:d9:59:c8:84:eb:ba:5c:cd:98:
f6:54:1c:5a:1f:b0:5d:32:11:78:b3:0e:59:27:b0:da:82:1e:
35:41:c9:d9:70:74:1d:30:79:bc:34:60:f6:ee:41:bb:2d:81:
34:45:67:a9:e3:dc:06:27:dd:c9:83:da:93:31:4a:dd:ac:18:
b6:c8:ee:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:08 2025 by rpki-client