
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
File: 6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft (raw, json)
Hash identifier: ejaBnP92Qucd/Y3qQ1RAbgkn6KI8ehYCUEfjUQRk2os=
Subject key identifier: C2:F2:92:A8:CD:DE:F8:9B:49:14:DE:9F:23:A3:1E:68:ED:25:AA:0C
Authority key identifier: EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
Certificate issuer: /CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Certificate serial: 019645567DFB0EF1BC2A2DD90A2DB0FC5071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
Manifest number: 0959
Signing time: Thu 17 Apr 2025 20:00:18 +0000
Manifest this update: Thu 17 Apr 2025 20:00:18 +0000
Manifest next update: Fri 18 Apr 2025 20:00:18 +0000
Files and hashes: 1: 6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl (hash: hPxkreYaPPUi7Q/cc3tIPHHARA71RHPweHxS855xVik=)
2: _T-vtGYkRfg0z_VEY1ujTV9wsKQ.roa (hash: 6bCPgaDCgJtCF9Wiux6xQrKawZrIY3ovPB6dkvGNia8=)
3: aOoYflX7uJIRHS-Vxicl6-foq_k.roa (hash: 3rCaBnosnTmAkm/S8jXALmR1BCxmxwNBGtyTjUO3JB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:7d:fb:0e:f1:bc:2a:2d:d9:0a:2d:b0:fc:50:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Validity
Not Before: Apr 17 20:00:18 2025 GMT
Not After : Apr 18 20:00:18 2025 GMT
Subject: CN=c2f292a8cddef89b4914de9f23a31e68ed25aa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:ad:b5:3f:47:28:af:5a:43:ff:df:05:9b:
67:e0:2c:fb:6e:aa:e3:dc:18:1a:96:1f:48:75:69:
34:70:01:73:6a:3c:92:73:ab:12:58:fd:82:90:2f:
1f:ed:21:63:93:d3:15:ff:9b:c1:9d:e6:af:4c:2c:
79:5e:7e:91:90:c1:1c:34:7d:09:33:e6:35:04:9a:
1a:46:df:52:c9:6e:64:0b:8e:1f:c4:77:15:cc:ba:
43:c7:99:62:08:ef:38:97:f1:83:d6:5d:ab:25:85:
dd:34:4a:f2:0d:80:f1:ec:f6:e0:3a:4c:2a:52:8a:
b9:b5:4f:2b:49:3d:fc:ce:8f:ad:bb:ed:a1:75:df:
cc:28:9a:46:70:49:2a:b4:90:60:65:fe:b5:31:20:
0a:9b:61:d0:25:17:82:7f:45:c7:5e:bc:e1:9c:a7:
32:a4:6f:2d:7d:5d:7d:99:0c:cf:5b:56:4c:8a:51:
84:00:69:0b:3e:71:2d:1b:fb:11:67:0a:44:e9:a9:
17:50:19:ac:37:81:24:e0:32:e5:d3:86:4e:a9:51:
60:f0:04:02:3c:d8:15:9c:f7:d3:46:f1:27:7b:b9:
5b:af:34:e5:45:b7:06:a8:1f:bb:78:64:31:a7:14:
f2:1c:ec:d0:14:ff:49:1a:8f:17:e5:a4:92:08:ac:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F2:92:A8:CD:DE:F8:9B:49:14:DE:9F:23:A3:1E:68:ED:25:AA:0C
X509v3 Authority Key Identifier:
keyid:EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c7:1e:9f:bb:2e:b1:d7:91:a1:ff:52:26:b8:a4:91:f9:8b:
93:28:b5:8a:3a:0c:7a:a7:de:29:db:dc:c1:f1:92:e7:40:45:
79:f9:c9:c3:63:3b:e6:7e:91:96:a5:44:e8:a7:fc:f2:7b:58:
70:c6:60:74:ca:48:e5:b1:b4:d5:1e:e2:0b:bf:32:de:a3:33:
a9:b8:95:d1:88:02:e1:34:0e:d6:d1:93:4b:ad:ea:98:2c:6a:
2e:d8:4b:5a:4a:72:65:51:55:60:1b:c0:a9:19:f0:a8:5a:ea:
d4:44:e8:23:02:b5:8a:8f:66:48:c7:f3:ac:30:62:2b:b7:f6:
f2:56:ab:78:b0:a2:cf:cf:c8:d4:f9:c1:8d:6e:98:37:b0:45:
f7:83:0b:16:e7:cf:63:69:90:20:de:f3:88:03:70:46:c9:6d:
c3:84:21:fd:7b:3c:71:1b:fb:2d:ee:c9:53:16:68:db:ef:e6:
3c:dd:c0:07:ce:56:5e:b1:45:e4:55:2e:ff:55:5d:a2:44:b4:
e1:e2:dc:fd:bb:9e:c3:cc:cd:2c:7c:86:17:93:81:03:47:79:
18:1a:d4:56:4b:d9:dd:af:42:df:cb:bc:48:50:20:7f:8a:a1:
30:8f:b5:a7:e7:9a:44:13:62:1a:1b:64:d3:b5:7a:9b:9b:15:
17:7e:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:47:21 2025 by rpki-client