Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier: J4d7oGBUkb99r2WRQZukVWem3JMc2zv0K94qdZQ+nH8=
Subject key identifier: F6:DD:46:92:7A:DC:0D:2A:B2:DA:73:E8:1F:50:0F:D4:93:5B:47:B9
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 01965915156FBD84C7D9BD3F90C46BA0D44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number: 0A49
Signing time: Mon 21 Apr 2025 16:01:16 +0000
Manifest this update: Mon 21 Apr 2025 16:01:16 +0000
Manifest next update: Tue 22 Apr 2025 16:01:16 +0000
Files and hashes: 1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=)
2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: 10pWbggpZpIRUo/t0FoCOFUT2k1I3veYuxYT2X8hrIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:15:6f:bd:84:c7:d9:bd:3f:90:c4:6b:a0:d4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Apr 21 16:01:16 2025 GMT
Not After : Apr 22 16:01:16 2025 GMT
Subject: CN=f6dd46927adc0d2ab2da73e81f500fd4935b47b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:24:d5:5a:63:66:ec:ac:c1:6f:d9:a9:60:
34:6c:c9:b5:bf:7d:2b:cc:6c:40:e2:f4:f5:a7:c9:
b5:80:9a:0a:cb:1f:f4:a2:e1:9e:35:69:9b:0f:de:
56:d4:e6:00:9a:e8:ed:bb:24:04:c2:e0:a6:5a:54:
28:76:1b:7a:a9:4c:1e:12:60:b6:7c:d2:cb:75:91:
1a:a3:a8:16:9c:73:1b:79:6c:36:9c:ce:0b:cb:57:
3f:0c:52:c5:eb:b3:a8:08:9a:61:80:7f:12:25:30:
e9:23:b3:b7:ff:0a:bc:4d:eb:df:92:09:44:ae:a3:
84:02:1c:39:91:3e:a2:7d:ac:c3:fe:2a:90:ea:a1:
d1:54:c6:53:b6:b6:34:0e:59:d6:30:e1:8f:34:d0:
02:c7:fa:7f:93:15:a6:3a:a8:72:a4:d9:fa:1f:ee:
2f:67:db:3d:4b:e8:0a:75:0f:3f:19:a2:4f:5a:61:
5f:a7:93:27:2b:2c:54:4c:95:66:a0:b6:41:d2:02:
d9:c7:c5:a3:f4:56:8c:51:25:7c:e5:2c:fe:bd:83:
eb:32:5e:d7:0a:74:7a:dc:12:82:a8:71:6a:b0:80:
fc:41:ed:f1:9a:ab:a1:07:64:65:b0:1b:71:f3:b1:
94:c1:7f:5f:77:fb:42:0b:27:7c:13:59:a0:2a:2a:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DD:46:92:7A:DC:0D:2A:B2:DA:73:E8:1F:50:0F:D4:93:5B:47:B9
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d0:6b:0b:98:68:61:bf:4f:8c:43:c9:d5:e3:55:56:65:bc:
94:70:d4:32:4e:0d:20:5a:c7:42:dd:0c:19:3f:f9:c9:1a:c5:
a7:f3:d3:b6:7f:c1:6d:5c:bc:07:58:05:fb:36:d2:bf:28:60:
6e:b3:3c:84:cc:3c:95:89:b4:3b:83:b7:a3:fc:02:49:c3:92:
45:12:78:b6:d5:83:ef:60:bb:30:64:c3:fc:83:d0:95:22:73:
1f:f7:b1:9c:6d:fd:ee:82:7d:ba:f8:21:38:87:a8:ce:17:cb:
9e:2b:e6:08:a8:64:c6:2b:af:b2:12:9e:f5:fb:ec:d3:04:18:
5c:1b:43:64:42:07:d2:04:24:48:14:30:2a:93:3f:84:a2:b2:
c0:6b:70:5c:ae:88:30:d6:cb:04:2f:2b:c4:9c:23:7d:17:ea:
d6:12:80:75:81:9a:9d:1d:48:f4:5d:f5:c6:b7:2f:4c:f6:59:
cf:de:f6:a1:03:c4:cb:0c:2a:3d:f6:97:63:a3:00:3c:d6:9a:
53:50:4d:a5:7d:03:4f:52:e5:a0:61:93:e7:9c:3c:e4:8c:ef:
7d:ae:59:b0:ef:39:33:77:29:b8:4c:ac:84:d2:c3:09:1c:6c:
79:f3:da:ff:a4:fc:e7:e7:23:b6:17:cb:48:a8:75:08:f8:28:
4b:ba:7e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:25 2025 by rpki-client