Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
File: 6FZKS1_vRERHffDaWxmSTVLRAJQ.mft (raw, json)
Hash identifier: K2HbyXwwUeIuDRnGiol8I+7FsdwAdBRkwvnoHH43nbk=
Subject key identifier: BA:AA:DA:93:C7:07:1D:DD:CF:99:5B:51:E7:4A:AE:43:64:21:FC:C1
Authority key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
Certificate issuer: /CN=e8564a4b5fef4444477df0da5b19924d52d10094
Certificate serial: 019655DCCD2CC15BA5B9FB981BD05F50334E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 01:00:55 +0000
Manifest this update: Mon 21 Apr 2025 01:00:55 +0000
Manifest next update: Tue 22 Apr 2025 01:00:55 +0000
Files and hashes: 1: 6FZKS1_vRERHffDaWxmSTVLRAJQ.crl (hash: KKPmE7Vh64FGEYpQ9MCwihxs7AJSSQwV7UoqeY3FO0M=)
2: 9SVfluOBZwBfs-bjwE_rTE8NN74.roa (hash: vH7rlpjAcAk1sy3DNBgkpNoFX/t68ex1sv/VxyfNsUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:cd:2c:c1:5b:a5:b9:fb:98:1b:d0:5f:50:33:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8564a4b5fef4444477df0da5b19924d52d10094
Validity
Not Before: Apr 21 01:00:55 2025 GMT
Not After : Apr 22 01:00:55 2025 GMT
Subject: CN=baaada93c7071dddcf995b51e74aae436421fcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:de:da:b0:a4:04:9f:f9:a2:4e:b3:77:2b:
cf:29:c8:d5:c4:b1:36:66:66:9f:20:d3:52:54:7b:
50:c7:26:ec:41:07:4e:f4:c4:9e:a8:3e:8f:a7:92:
09:7b:91:73:7c:6b:42:c5:79:fe:2e:70:6b:5a:94:
1b:e1:f0:8a:ee:d8:14:49:d1:f7:0b:37:92:de:e0:
c7:49:85:8d:62:cb:2e:0f:6e:23:88:93:ec:23:25:
d1:33:86:0d:5d:7a:b3:91:88:4e:c7:37:0c:1d:67:
1b:fb:b2:40:7d:cc:98:cd:a2:92:76:40:d7:85:16:
32:45:f7:01:11:4f:d6:b8:a2:53:89:f9:e6:2d:9c:
0c:6f:30:39:e4:f9:f5:ca:20:1b:2b:ec:4d:a6:67:
0c:b6:2f:c4:c4:18:0c:ed:62:0d:c8:b2:54:b0:95:
da:b0:d3:84:45:d3:91:68:0a:39:5a:bf:96:4e:8a:
83:89:ec:cd:fa:27:6e:6b:4f:a5:67:ea:63:17:53:
cc:ce:50:17:81:26:3f:7c:70:90:2f:ff:0b:72:03:
35:a6:91:a5:d7:a9:ac:1d:d9:78:6f:c8:23:93:99:
88:8c:2a:48:b2:d7:70:27:57:c4:06:8f:58:16:30:
86:e5:ab:9a:0a:d2:93:2f:b0:71:62:5c:ce:19:ee:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:DA:93:C7:07:1D:DD:CF:99:5B:51:E7:4A:AE:43:64:21:FC:C1
X509v3 Authority Key Identifier:
keyid:E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:da:95:dc:9e:b0:21:f6:db:f7:82:b8:45:21:73:20:e6:3a:
d6:68:72:29:ea:7a:e6:e9:93:e7:c7:77:c2:c4:0d:2e:a6:fe:
4b:ef:3a:b0:90:b2:37:63:74:14:0f:cf:4a:3d:f7:f6:4c:c7:
96:b6:05:da:63:bc:44:36:7b:36:07:f6:c0:1f:26:35:67:70:
d6:0c:47:20:c8:ae:9d:fd:11:0a:43:c5:bd:13:31:b2:4e:c6:
60:fe:d9:cf:7f:6d:46:7a:23:fe:87:6f:ba:7d:00:92:cf:e2:
00:b2:ef:33:ba:0c:2e:34:28:92:9d:d4:64:15:f0:58:f0:dc:
6f:07:11:51:28:55:c1:17:e9:33:6d:ef:39:f0:9a:ba:39:56:
9d:e7:85:f5:81:5e:b9:c0:28:43:4c:4b:0b:01:5c:d8:dc:32:
83:19:e6:77:91:6b:db:ce:be:9d:7f:33:77:b7:1a:b8:5d:9a:
bb:1f:84:83:7c:e5:e3:b8:af:05:9a:5a:c1:8e:08:46:8b:ee:
33:74:b1:47:39:8c:e0:ac:bc:8a:52:2d:b5:c2:98:ca:b4:8c:
72:b3:d6:e6:1c:77:94:8e:38:7b:55:92:d4:15:c0:23:f6:62:
90:fd:a6:76:77:2d:75:52:c3:6b:e5:64:d8:98:e7:cf:ad:f7:
e8:b7:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:51 2025 by rpki-client