Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft (raw, json)
Hash identifier: GI5mUjwwpFhIvjy/SXn+7mFWY2NnGqC/ITww1C/9o9U=
Subject key identifier: 49:11:CB:09:D2:9C:97:E0:AC:6F:B6:BC:55:59:08:4D:92:22:AD:B8
Authority key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Certificate issuer: /CN=e97656f22015589ff7cc66056867f605d81449bc
Certificate serial: 0196428CFB9FD3BE30A4A2B34FD4B818BA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 07:00:57 +0000
Manifest this update: Thu 17 Apr 2025 07:00:57 +0000
Manifest next update: Fri 18 Apr 2025 07:00:57 +0000
Files and hashes: 1: 46IkgipDtz-gl4yWGt7SVQgrM2Y.roa (hash: xd1tjAJC9B4oABZm0yY50qZfUkL+C2aunMu/YZc9css=)
2: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl (hash: BOyewTvswq/RH4idazA+3/l16gtZbCk3URQSjbVjDUQ=)
3: TJ9h-OeDoNwLJy-bpo2ooNFoYYY.roa (hash: uSX/ck6PKaNlZa7GifLSaPti7K35d8cXLGS+lgOUDKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:8c:fb:9f:d3:be:30:a4:a2:b3:4f:d4:b8:18:ba:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97656f22015589ff7cc66056867f605d81449bc
Validity
Not Before: Apr 17 07:00:57 2025 GMT
Not After : Apr 18 07:00:57 2025 GMT
Subject: CN=4911cb09d29c97e0ac6fb6bc5559084d9222adb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:10:10:12:9f:ea:b9:83:12:86:af:66:a4:
d3:dc:b7:d8:90:c0:bd:1e:d6:1c:88:08:8e:68:f7:
ac:fe:05:b1:93:85:33:79:a4:97:0e:f8:e9:b0:62:
52:99:05:03:ab:c1:20:80:86:cf:9d:c1:39:96:d1:
53:43:61:45:01:ea:e7:85:96:7d:47:2f:d3:df:3f:
e9:a4:f6:8a:83:47:74:1a:fa:60:e4:13:0f:62:b7:
ed:73:54:b0:c8:1c:b3:22:1d:bf:0b:de:2b:77:9d:
e2:24:50:89:3f:99:27:2c:52:f8:f6:fd:a2:6b:d9:
4f:47:a4:49:3c:fb:54:71:25:a8:78:2f:83:61:4f:
47:0d:12:d7:7e:f5:2e:35:ca:59:55:61:59:50:39:
9e:1c:fc:4d:1b:f8:09:c7:4b:ba:59:17:5c:14:95:
9f:40:43:5a:3a:54:3e:85:27:de:1c:f7:2a:4c:fb:
97:04:ed:55:bd:44:41:7b:d5:9f:6d:3b:54:64:47:
ba:0a:f5:4a:2d:5a:ea:f1:a5:d4:0a:11:40:fa:a2:
f7:82:4a:75:f5:6d:3d:95:13:5a:eb:1a:47:7d:cc:
ad:04:a5:47:28:05:22:b8:3b:54:87:94:e8:98:9a:
92:5d:a0:d2:c5:24:fc:fc:81:0e:d2:9c:65:20:82:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:11:CB:09:D2:9C:97:E0:AC:6F:B6:BC:55:59:08:4D:92:22:AD:B8
X509v3 Authority Key Identifier:
keyid:E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:77:bd:bf:ac:d0:63:bd:e6:7d:cc:c6:e1:d5:3e:52:19:6d:
a0:01:fd:e3:14:d9:1d:ad:ef:e6:c2:bd:5d:e2:04:29:9f:c3:
88:24:a9:1b:4a:5f:68:67:0f:e8:a7:9d:34:9e:57:8f:82:d2:
63:39:9a:58:84:5b:2e:40:12:a8:66:2f:4c:4f:d9:d1:02:31:
ea:d5:c4:27:4b:40:d7:d1:49:4b:ba:a9:23:1d:19:1e:04:9d:
d2:59:39:99:a8:51:a3:a2:f6:ce:0b:2c:86:d5:4d:b2:0f:f9:
d9:18:ce:b4:9c:27:fa:c1:3d:8f:09:0e:bf:6d:09:b5:26:27:
44:88:2a:a6:4b:3b:3d:e9:b1:0c:4c:dc:a8:72:1a:43:70:d9:
cf:c9:90:3a:bf:f6:74:00:a8:cb:74:a6:4f:3f:80:4a:ff:4e:
8a:b9:2b:bf:c6:d4:b2:51:97:9a:52:23:c8:75:0f:8d:5a:03:
78:d1:78:d4:18:62:bc:c7:77:c1:b5:f4:fc:b7:81:71:53:fd:
8e:bc:33:81:34:96:68:8e:2e:83:14:1a:19:c8:c0:10:11:bb:
4b:09:0c:b1:a3:6b:b1:94:7a:08:15:fe:31:38:d9:bd:5c:98:
c4:41:c7:62:53:32:85:80:59:87:ef:6b:0f:d0:e3:7d:a8:66:
44:25:35:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:56:28 2025 by rpki-client