Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: P1LMjN/Ixr2xsh2uVSFzRDmztdE03uewvm4qGjyHpbM=
Subject key identifier: D7:8C:C0:06:04:1F:44:9E:0B:32:4B:4C:8F:15:7E:A9:8A:97:E2:1C
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 019655387633677C8946B1E94D1480363FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 22:01:25 +0000
Manifest this update: Sun 20 Apr 2025 22:01:25 +0000
Manifest next update: Mon 21 Apr 2025 22:01:25 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: FZCk5eawleKdnEbX8C09mgAamRRwvZpzCCI3WdH/e/M=)
2: EdM8mT-itEKC9G8RLMrDLsNcS3o.roa (hash: aC1rODFSDGloRhxUO+L4zBSj1xyAZL+tlsZ8+nVllOY=)
3: LKntu7OdIVDRUeVXjemgx5JdRkc.roa (hash: kna/rCNXXypoDbewR/02DlClr5ejgsrzdo1XT3WKJ6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:76:33:67:7c:89:46:b1:e9:4d:14:80:36:3f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Apr 20 22:01:25 2025 GMT
Not After : Apr 21 22:01:25 2025 GMT
Subject: CN=d78cc006041f449e0b324b4c8f157ea98a97e21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:5c:c6:b4:e4:b3:7c:ad:e1:98:cc:f9:48:
bd:0d:0f:d7:9b:7c:b1:64:3e:81:2b:e3:0e:16:0e:
f9:22:1e:61:95:7f:6a:15:cd:ff:09:75:61:26:8b:
35:4e:5e:fb:9a:bc:03:52:67:c8:f3:e8:b3:e2:ff:
90:81:36:23:e3:a5:37:a9:7f:d6:32:f6:b1:6f:43:
be:a8:db:4a:70:7c:33:25:de:e5:4e:88:eb:93:a1:
9c:85:27:17:ce:c3:3d:7f:b8:b3:23:29:b9:29:35:
8f:6c:4f:04:ef:03:9c:a6:f1:36:8f:55:d3:52:37:
ca:13:60:bd:a9:34:22:39:50:20:59:c1:f9:23:ff:
44:d3:8a:fb:e1:dd:2e:65:6c:08:ce:40:ce:90:da:
ed:8a:e1:62:e9:bd:44:a9:fd:76:d5:d3:24:06:f2:
e4:3e:6c:5d:28:7b:e9:77:c4:6b:c6:e7:fb:b1:89:
74:04:3a:df:42:50:da:3d:f2:73:b8:61:ff:47:c8:
e1:e0:ad:1f:de:c3:88:90:96:0c:d1:81:87:07:28:
23:b0:69:c1:d7:a9:2d:35:45:fb:20:c8:b0:04:54:
3f:cf:71:a7:7d:21:cf:7d:13:f1:53:b5:f5:47:0f:
34:13:fa:b9:dd:d4:09:50:d8:7a:06:e5:bc:07:49:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8C:C0:06:04:1F:44:9E:0B:32:4B:4C:8F:15:7E:A9:8A:97:E2:1C
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:05:e4:65:03:e7:57:52:f1:18:6b:96:86:78:b1:4d:d8:98:
27:df:c4:6c:ce:f2:f3:d0:dc:94:2c:d0:94:a2:9a:e1:14:83:
e5:fd:a4:7f:49:54:e4:6f:f5:2a:ef:a6:a0:4c:77:be:e7:6f:
d4:99:37:4a:9e:3c:cb:72:1e:40:d7:a4:2e:7f:5e:9e:50:73:
b7:8f:50:e1:03:ca:73:b4:65:37:fc:b0:68:bd:e4:66:65:f1:
19:91:33:70:ea:a4:51:6a:0a:d5:20:2e:f7:c1:0b:33:90:77:
1b:86:73:23:db:1d:c3:79:05:e0:39:87:4e:b5:42:ba:78:4d:
17:38:fe:38:78:e5:a1:33:12:49:5d:9d:71:8d:b6:fe:38:ea:
ce:1b:0d:0e:60:3b:32:66:c6:a3:ff:c0:57:d7:ce:2c:56:e4:
36:2b:05:92:7d:f6:48:21:e1:76:f9:5e:b0:3b:c8:92:4f:0b:
df:eb:08:38:ec:3b:f5:8e:c4:fd:81:d5:c9:ee:c5:f3:ad:dc:
cc:c9:2c:f2:35:5b:fb:ca:cc:20:39:e5:0b:3e:64:0d:fd:0a:
8f:69:84:aa:4a:f1:c6:39:45:3d:37:8b:8d:6e:16:aa:ec:62:
e1:74:cc:47:68:39:0a:42:91:08:0d:bc:1e:a0:91:6a:fd:eb:
c2:ee:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:33 2025 by rpki-client