Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier: lc8RiRTmkljIBpzWCYXXVgFzV8rXUdEmuD934HZqMx8=
Subject key identifier: 0E:5C:F2:27:AD:57:8F:F8:15:72:5B:79:8B:5A:93:E8:9F:DC:77:55
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer: /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial: 019655A62CFBBA50664F3098E396D6FCCFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 00:01:15 +0000
Manifest this update: Mon 21 Apr 2025 00:01:15 +0000
Manifest next update: Tue 22 Apr 2025 00:01:15 +0000
Files and hashes: 1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: RRqHwv9s4ETNbTv2LMYbrY2XYsOmR9puq65/n5ejgUU=)
2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:2c:fb:ba:50:66:4f:30:98:e3:96:d6:fc:cf:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Validity
Not Before: Apr 21 00:01:15 2025 GMT
Not After : Apr 22 00:01:15 2025 GMT
Subject: CN=0e5cf227ad578ff815725b798b5a93e89fdc7755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e5:10:fe:4b:6b:99:6a:6c:d4:ed:ae:dd:73:
0c:33:cc:1c:f5:5f:10:71:56:ff:66:26:a0:7c:2e:
b6:ba:7b:e6:07:91:9c:c8:b9:fe:0e:72:a3:68:d7:
63:a8:14:fd:82:75:d1:82:70:fb:85:8d:2c:f9:45:
b3:0c:e7:3a:dd:99:bc:24:60:e1:92:51:ba:32:91:
d5:75:27:8f:b4:1a:74:b2:96:06:1d:74:94:cb:3a:
b0:7a:36:69:3e:8a:36:e4:06:0e:5a:5f:29:78:11:
75:be:b6:fd:8f:3c:e0:c2:08:b6:45:b4:7c:ac:6c:
f4:4b:b6:22:87:51:da:81:09:90:e7:78:d4:bf:29:
8c:7e:66:f8:f7:cf:2f:dd:1f:71:da:68:40:96:84:
d1:f9:69:87:2a:0f:47:3a:24:3b:f0:94:2d:e5:76:
e8:3a:4f:5d:3d:c6:24:b3:fb:46:c7:86:85:53:70:
53:84:18:34:93:52:29:8b:68:78:6c:18:ba:9b:35:
dc:f1:01:0e:a1:e2:97:ff:23:e1:0c:29:5e:18:16:
98:f9:bc:74:b8:27:b9:3f:d7:ec:46:03:bc:c4:fc:
96:69:c4:7a:b0:dd:44:68:60:08:06:95:4e:57:1b:
52:79:2b:a0:27:88:0a:a8:c7:86:42:0c:a6:39:74:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5C:F2:27:AD:57:8F:F8:15:72:5B:79:8B:5A:93:E8:9F:DC:77:55
X509v3 Authority Key Identifier:
keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7f:a2:31:9c:1c:8c:4a:08:be:8f:0e:2e:6b:04:63:2b:77:
95:4e:f6:b8:ed:74:f6:b3:34:39:39:78:3c:44:e0:32:04:82:
5b:d4:93:5f:52:de:d4:ec:ea:01:54:e6:f4:d5:b1:f5:c9:69:
c6:9d:1c:a2:b2:92:91:f6:42:4a:69:29:20:ff:f9:62:ce:b1:
2f:91:56:bb:db:f0:f8:7f:81:6a:5b:32:21:40:c7:dc:61:bc:
84:8b:66:e8:2f:12:3a:96:5f:ea:80:40:31:13:e5:1c:1a:35:
92:7b:b0:90:d8:29:16:ba:1d:15:6c:f1:e0:c3:eb:83:83:bd:
f5:ab:d5:cd:1e:be:7f:2e:ba:bd:94:a2:3d:9d:93:d6:f6:e4:
f4:8c:bd:98:b0:19:d0:1d:61:82:df:33:46:89:64:de:a1:70:
03:0a:d9:9b:3d:62:dc:e8:9e:16:84:9e:31:e9:60:95:94:96:
a3:d2:a8:07:b1:0d:1d:99:3d:da:91:31:f7:22:ed:f3:c8:d5:
1f:ea:d6:8e:25:68:65:d8:b2:02:0e:1c:21:14:26:c4:91:1a:
f3:d9:40:65:68:6c:69:4a:45:8f:26:6f:58:12:fe:fd:8b:92:
5a:5d:67:64:3a:cf:be:c6:b4:6e:b3:16:ac:22:7f:c3:19:51:
2d:9d:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:22:19 2025 by rpki-client