Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
File: b6MuZYEYPyxIl6dlIzOQH39b7nM.mft (raw, json)
Hash identifier: jjxCdlVO6zpojKY9R7udzrjJXlGswykpGZg4ps6jWq8=
Subject key identifier: 11:FC:5A:37:84:F3:AA:0C:93:5D:4E:B5:28:01:33:FC:CC:75:DF:AB
Authority key identifier: 6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73
Certificate issuer: /CN=6fa32e6581183f2c4897a7652333901f7f5bee73
Certificate serial: 01964BFE1D7A130915496BBBB1D14ACBFF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
Manifest number: 075E
Signing time: Sat 19 Apr 2025 03:01:06 +0000
Manifest this update: Sat 19 Apr 2025 03:01:06 +0000
Manifest next update: Sun 20 Apr 2025 03:01:06 +0000
Files and hashes: 1: 6C-l-Krcx9diUb3Zftv9sijenyA.roa (hash: 8qEJJSdL4/1lUqWVRQzqlshhqS0031IQa9tDeTSS/GA=)
2: PHw1GAOmBnBvGouxlCLHPCg3QCo.roa (hash: M7Tf/O06Ds+1gFag6lHjuDXeoUB2izemcywbR990N8U=)
3: b6MuZYEYPyxIl6dlIzOQH39b7nM.crl (hash: fiKJ3Kn1zgfwknbX2byscz6nqRByOalP/wD/6ey//dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fe:1d:7a:13:09:15:49:6b:bb:b1:d1:4a:cb:ff:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa32e6581183f2c4897a7652333901f7f5bee73
Validity
Not Before: Apr 19 03:01:06 2025 GMT
Not After : Apr 20 03:01:06 2025 GMT
Subject: CN=11fc5a3784f3aa0c935d4eb5280133fccc75dfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:93:67:43:1f:70:4e:94:3f:26:d1:16:4a:
f2:57:67:8a:22:90:78:ee:57:fb:61:f9:d0:98:9c:
d5:69:e6:89:dd:a6:8b:ab:03:bd:e9:f0:6b:6e:d4:
4c:8b:43:28:23:8e:69:e1:59:1e:b3:1d:3a:21:b8:
9c:0d:d6:12:f0:a0:49:b4:c2:0a:10:7f:94:80:a1:
3d:68:71:f6:61:71:a0:13:40:39:d6:6b:3d:74:c8:
75:10:42:e4:eb:3c:bd:3a:df:10:09:ed:a5:0d:b5:
43:aa:7a:26:52:c1:bd:db:a9:a0:a6:2e:11:b5:bd:
b4:de:27:91:07:98:26:77:80:33:f6:ce:8c:26:b3:
23:db:88:97:38:f1:26:35:3e:1b:8c:a9:c6:08:88:
86:98:91:92:f4:86:80:8f:cc:62:65:04:f5:b9:88:
dd:26:9b:24:6b:ff:d8:da:3b:5a:f4:64:45:21:e6:
22:32:97:96:61:e7:e2:06:cf:8f:d6:cd:0a:ef:5a:
8d:bb:19:16:90:a0:e1:99:72:7f:10:dc:03:4e:2a:
59:16:55:04:e7:c4:18:0c:e3:31:b9:a0:77:10:c9:
c3:9b:f3:0d:c1:71:94:f7:01:07:36:44:d8:0a:d6:
c5:07:dd:67:42:30:b6:76:7a:cc:13:07:db:a6:b5:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FC:5A:37:84:F3:AA:0C:93:5D:4E:B5:28:01:33:FC:CC:75:DF:AB
X509v3 Authority Key Identifier:
keyid:6F:A3:2E:65:81:18:3F:2C:48:97:A7:65:23:33:90:1F:7F:5B:EE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6MuZYEYPyxIl6dlIzOQH39b7nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85ca8e-d74b-4c05-81b6-770f0572c0e7/1/b6MuZYEYPyxIl6dlIzOQH39b7nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:01:97:3c:02:3c:01:44:9d:66:ca:55:51:9d:c8:24:1e:e5:
b8:f3:ae:46:0c:eb:d4:1f:60:2b:ea:b0:93:8f:b0:7d:59:5e:
03:31:b5:f6:b1:0a:5f:5d:9c:6f:de:a8:3d:74:0e:63:41:52:
6c:f1:93:b4:73:c6:74:ee:c4:85:e3:f3:87:44:54:88:0a:84:
09:fb:e7:df:3a:6f:58:d2:a6:f5:ea:8a:ec:d2:89:39:b6:6c:
87:48:df:87:85:38:58:23:0d:0c:75:42:7d:6a:c5:91:c4:2c:
66:6a:cf:0a:28:05:38:ed:24:c6:33:a4:f5:ac:6b:db:41:85:
9a:17:9e:9b:de:7e:7e:e0:fb:58:ae:35:29:4c:14:fa:26:66:
11:1e:6b:f6:ee:cc:26:ad:bc:5f:32:91:5e:27:1f:03:37:d8:
31:b3:af:c0:8b:41:c1:d7:6c:5b:10:20:a8:3d:88:d1:a5:b9:
0d:2f:5f:6b:ce:bb:ec:e9:51:4c:f7:52:d3:bf:25:62:85:95:
9b:b5:9b:c4:f6:52:a4:43:a0:2d:e5:6a:9a:c5:c5:98:9e:61:
54:11:a7:a8:12:2f:59:d9:8b:d9:dc:e0:da:2a:04:eb:90:58:
1e:8d:03:c7:98:64:0d:00:f1:86:c0:b0:31:67:77:d3:48:53:
da:75:48:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:02:50 2025 by rpki-client