Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
File: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft (raw, json)
Hash identifier: 35CfOafIv4Llz68ju0e8TghuyHaxtZ8XwzeDH6PLFLM=
Subject key identifier: 9A:44:50:27:91:8B:5A:7E:E0:83:EA:C5:46:C8:09:34:10:00:A7:76
Authority key identifier: E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
Certificate issuer: /CN=e90391d244173f3e1aa821db77484b1ada53557f
Certificate serial: 019659B9885F1045C5DFCE97B60A24E899FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
Manifest number: 0253
Signing time: Mon 21 Apr 2025 19:00:53 +0000
Manifest this update: Mon 21 Apr 2025 19:00:53 +0000
Manifest next update: Tue 22 Apr 2025 19:00:53 +0000
Files and hashes: 1: 6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl (hash: lwtf/HFwAjezH3vl307eCFCpNIGSkvwtL1PS5Tw1epg=)
2: ht3KdHbaaKn0dUB9Eygpkn4YA9g.roa (hash: NIfc2tNf/lNxNw/7+fw+tsc47P3faBnMYY6r4SXpFYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:88:5f:10:45:c5:df:ce:97:b6:0a:24:e8:99:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e90391d244173f3e1aa821db77484b1ada53557f
Validity
Not Before: Apr 21 19:00:53 2025 GMT
Not After : Apr 22 19:00:53 2025 GMT
Subject: CN=9a445027918b5a7ee083eac546c809341000a776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:77:fe:5e:cb:2d:76:9d:99:cf:dc:71:35:84:
2d:df:4e:1c:52:0c:b8:b7:88:af:f9:27:8c:53:ba:
05:66:4a:bf:6a:ed:22:55:a9:2d:4e:e5:8a:92:67:
e1:ca:a1:8e:3c:8a:f4:11:bd:8e:fc:77:02:e9:94:
23:e5:6d:1d:2f:1d:5d:77:12:e5:a3:c5:1e:a6:cb:
d5:d2:ad:c9:85:65:ae:3e:56:f7:59:e2:5b:b7:5a:
34:0c:75:c3:13:f7:8c:f7:dc:cb:eb:d2:91:ef:1d:
70:ce:8b:02:80:78:fd:57:b2:df:5f:34:f3:6d:4c:
c1:af:78:c5:d9:36:37:c7:97:c8:4f:e7:d4:05:c3:
70:7f:2f:4e:dc:d4:32:81:39:ec:b9:b5:28:47:2e:
eb:7e:6c:1b:8f:bb:f0:c6:00:df:70:97:20:52:14:
f4:b1:91:63:84:4b:fb:fa:d9:d6:ba:11:c2:3d:28:
29:29:d0:c0:0e:78:37:c6:a3:c0:ff:b6:b2:48:7c:
4f:86:fc:4a:f6:d7:e5:31:be:66:54:0d:f4:35:bd:
1b:1d:49:58:47:d8:b6:cf:9d:d5:32:49:d5:cd:48:
47:8c:59:98:72:0a:a4:a3:56:07:7a:b0:d8:d7:db:
55:ca:95:36:b2:7b:01:ea:ca:70:57:0c:54:91:7e:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:44:50:27:91:8B:5A:7E:E0:83:EA:C5:46:C8:09:34:10:00:A7:76
X509v3 Authority Key Identifier:
keyid:E9:03:91:D2:44:17:3F:3E:1A:A8:21:DB:77:48:4B:1A:DA:53:55:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOR0kQXPz4aqCHbd0hLGtpTVX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6dd682-2b06-405c-8693-46be79870be8/1/6QOR0kQXPz4aqCHbd0hLGtpTVX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:06:55:8b:9a:da:65:ec:c8:05:c4:00:33:f0:49:4d:a7:d5:
58:3e:f9:2b:aa:a7:7a:6d:c9:c3:ca:a7:21:25:32:d0:51:f1:
a2:34:29:f3:c4:81:ce:cc:75:a4:8a:4a:c6:35:a5:ee:32:e0:
a5:a9:20:f4:80:3e:c7:68:27:6e:ac:4c:d5:34:9d:77:16:c9:
5a:3d:06:c6:de:64:d7:0d:5c:16:e3:cc:50:60:be:0c:6f:b1:
f6:7c:6e:6b:5a:d2:64:cd:c4:ed:da:ba:b4:06:b9:c6:b6:71:
da:a4:6a:90:95:ba:80:e2:2e:20:2d:82:55:ac:5e:8b:b0:3f:
e7:01:4d:12:fd:04:fa:ae:e1:bd:82:c2:a1:5a:c4:e2:bb:16:
97:56:f2:3b:19:9c:4e:90:8e:77:ff:74:de:53:bd:c2:01:e7:
c3:33:0c:6c:7f:c2:f0:f9:ab:64:28:28:a6:59:99:47:6b:9c:
8e:a0:e8:1a:bd:a0:b2:8a:d4:68:06:15:75:d4:74:ee:bf:11:
0f:3c:d1:1c:74:02:3a:d1:e0:8f:ab:fd:eb:f1:63:03:7c:09:
9f:7a:ea:cd:c0:a7:78:c3:c5:bd:a9:22:7d:7c:3f:49:c5:40:
78:04:0d:ef:60:a3:36:0b:b6:18:d9:bc:4e:e2:e7:43:87:3b:
7a:4f:3c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:30:58 2025 by rpki-client