Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
File: 6b_QQQx787sddbGKyx6WOTrSGyY.mft (raw, json)
Hash identifier: mx3vJfn8gjHyPfHwxLc9jp8Iw5JJIoIiuv2WjpPwA2M=
Subject key identifier: D6:3D:32:DA:8A:DB:4E:53:86:35:91:DA:26:0C:48:71:3B:64:FC:01
Authority key identifier: E9:BF:D0:41:0C:7B:F3:BB:1D:75:B1:8A:CB:1E:96:39:3A:D2:1B:26
Certificate issuer: /CN=e9bfd0410c7bf3bb1d75b18acb1e96393ad21b26
Certificate serial: 01965500AC1B8F228059B6575F30CD36ED8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
Manifest number: 014D
Signing time: Sun 20 Apr 2025 21:00:29 +0000
Manifest this update: Sun 20 Apr 2025 21:00:29 +0000
Manifest next update: Mon 21 Apr 2025 21:00:29 +0000
Files and hashes: 1: 6b_QQQx787sddbGKyx6WOTrSGyY.crl (hash: zdn3BQUbfsY5XEtJ59knQDAjwiKzsVtqVHocGNNFI+E=)
2: GxL8fwk7MmwPNTtCp-ZrLwDGehU.roa (hash: lyYJo+TOxOK6xLDSZatPtZ0yRjTCazkuCS6AXT1948U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:ac:1b:8f:22:80:59:b6:57:5f:30:cd:36:ed:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9bfd0410c7bf3bb1d75b18acb1e96393ad21b26
Validity
Not Before: Apr 20 21:00:29 2025 GMT
Not After : Apr 21 21:00:29 2025 GMT
Subject: CN=d63d32da8adb4e53863591da260c48713b64fc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:34:2f:92:ea:b1:f7:f8:3b:fa:c8:83:3b:
99:5d:a2:ba:61:d7:4d:e2:dd:8d:c0:07:83:23:ff:
de:b5:c8:33:55:a0:b2:eb:e4:7d:1b:94:64:35:4f:
8b:24:34:74:3f:60:30:c9:f3:af:24:f3:d7:b6:63:
18:b8:f3:9a:4e:b2:bd:1d:c3:de:89:d4:b0:75:a5:
a1:cf:4e:4b:df:51:3f:83:da:5e:1d:90:b0:d0:58:
57:4b:90:2f:3d:85:e4:1a:d9:57:96:dd:60:b7:10:
d8:ce:fb:a8:4e:c7:ed:30:57:da:99:c8:23:e6:b8:
36:b3:1d:16:0d:63:dd:68:a5:27:42:a2:41:3c:97:
00:37:e3:1a:16:94:8d:92:3a:2a:0d:a7:bc:f1:df:
04:db:32:df:3c:a7:6f:9e:15:32:0d:09:99:39:37:
48:db:b9:36:37:ad:bb:7a:52:31:fc:77:17:ba:75:
c0:3b:e6:44:93:3e:87:58:1d:80:90:ed:be:5d:50:
09:c3:e9:25:ac:7a:16:1f:ce:08:57:18:91:fd:6d:
6a:64:f6:a7:d2:e4:98:7a:a2:57:29:4e:68:0b:bc:
56:4a:cb:45:21:fb:20:74:ec:8e:7a:ea:0b:e2:5b:
94:63:48:a2:f7:99:f3:bd:0d:a1:84:03:aa:47:60:
8e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3D:32:DA:8A:DB:4E:53:86:35:91:DA:26:0C:48:71:3B:64:FC:01
X509v3 Authority Key Identifier:
keyid:E9:BF:D0:41:0C:7B:F3:BB:1D:75:B1:8A:CB:1E:96:39:3A:D2:1B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b_QQQx787sddbGKyx6WOTrSGyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d939f-9ef9-4076-a8f3-7a70b787d2ef/1/6b_QQQx787sddbGKyx6WOTrSGyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:59:bc:a0:ad:44:fb:8c:8d:9c:5e:28:8e:e7:6e:08:81:7e:
2a:4e:9a:50:8a:ef:1f:d7:e9:4d:30:0c:4b:1b:f0:fb:23:fd:
d6:b1:32:6b:f5:e0:11:c5:e5:25:7e:04:7e:5d:3b:c0:35:ff:
55:e6:82:d9:ac:37:27:f7:1d:da:79:8f:25:0a:e6:c2:3e:e4:
dd:e4:bc:ff:fb:ae:3a:50:36:17:b1:71:8b:58:a2:6f:29:a5:
fe:ae:53:f1:d6:d0:26:e0:dd:ff:74:77:a3:40:cd:83:a5:87:
22:85:04:a2:61:f7:fe:c1:6f:d3:af:95:76:45:4c:df:5e:8b:
be:22:ff:8c:b7:c3:fa:d5:0e:57:ef:88:f4:4e:cb:65:bf:57:
4d:ca:7f:39:43:a0:fd:c3:14:9c:25:1b:6c:bd:0f:c0:c0:73:
ea:28:ff:7e:3b:2b:fa:4b:fc:53:01:b2:35:fc:e2:e5:6e:4c:
8b:e8:34:3b:91:63:de:b5:f9:9e:fe:53:d8:4a:80:36:14:a3:
4c:a1:73:17:33:53:0b:21:e0:82:ea:a4:a9:8c:62:0a:f4:f1:
62:d2:0e:2a:be:01:7f:4a:22:25:b0:ac:d8:e8:a0:aa:19:13:
ea:e5:36:7a:64:29:c7:15:0c:09:e2:e3:3d:94:03:5c:ff:f4:
7e:80:36:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:55 2025 by rpki-client