Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: qVl7WsRDqCWlYKJZ0yBgaw7Pn5lB79Szao6mSOIcFkQ=
Subject key identifier: EC:03:F0:C8:DE:88:85:0B:D8:7D:5C:2C:03:8D:C5:14:51:82:8F:D4
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 01960452EC8D8B598BA228E36A85A407D45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 0425
Signing time: Sat 05 Apr 2025 05:01:05 +0000
Manifest this update: Sat 05 Apr 2025 05:01:05 +0000
Manifest next update: Sun 06 Apr 2025 05:01:05 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: 1C+B6Tf8e9fHoX6aLg9C9+LBEIkLv2YSGv0/zh20Zno=)
2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=)
3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:52:ec:8d:8b:59:8b:a2:28:e3:6a:85:a4:07:d4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Apr 5 05:01:05 2025 GMT
Not After : Apr 6 05:01:05 2025 GMT
Subject: CN=ec03f0c8de88850bd87d5c2c038dc51451828fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:c7:13:8e:0c:56:a0:c1:fa:47:82:d3:d1:
7d:97:50:82:16:3c:c2:a8:8e:9a:a6:e6:11:7f:53:
33:09:60:fc:3a:13:25:ec:f6:73:21:8d:d9:e9:57:
82:64:96:88:34:3a:96:f7:20:c0:56:35:9c:08:14:
51:ac:20:a9:f8:d4:b3:6d:f2:b0:fe:da:3d:54:fb:
52:ae:a9:8a:b9:ba:ba:21:3e:36:56:d1:6f:39:08:
06:6b:db:f6:7d:e5:ba:06:4f:b0:d1:4c:c4:20:88:
d1:39:93:a0:e7:f2:3e:92:ca:7e:d7:d2:fa:fa:0a:
5a:7e:7c:ed:f8:d1:c2:93:7c:af:b4:32:6d:65:45:
c0:7e:2c:42:cd:94:41:5d:15:aa:fe:72:4b:9d:50:
64:35:30:75:4f:f6:14:75:6a:7f:07:72:2f:38:e6:
5a:4c:b4:f1:e6:88:db:d0:29:6e:71:d9:48:a0:9a:
47:95:48:2a:1f:ae:64:58:f7:07:9e:9a:35:a1:8b:
c3:68:d3:09:cd:d8:a9:91:ae:f8:d2:c9:dc:18:cd:
75:9f:6a:da:23:9c:69:81:c6:fa:a1:80:e4:87:8b:
f0:e4:3e:bc:43:53:7f:cb:9f:cb:5f:7d:8c:65:d4:
25:db:e5:77:80:a4:19:f3:07:18:2e:67:e7:b2:bf:
a5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:03:F0:C8:DE:88:85:0B:D8:7D:5C:2C:03:8D:C5:14:51:82:8F:D4
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:43:8b:bc:cb:73:da:5e:07:cb:3e:3d:83:b3:af:10:3e:c2:
75:19:92:f9:e6:ef:30:9a:3b:b2:30:8e:2c:c8:29:0d:d0:f2:
06:7c:84:6a:f8:df:c2:2f:5b:93:45:b4:9f:f0:d8:93:2c:0c:
22:d8:fe:41:d6:2c:7d:dd:fa:b3:7f:cd:aa:88:24:eb:c1:d7:
20:e9:52:ee:5c:71:bf:a0:ab:f1:a1:bb:18:d1:a0:c5:5e:5c:
df:7a:32:09:32:a2:9f:cf:ab:9a:3f:4b:51:e6:b7:47:0f:32:
6c:d5:36:5e:11:9d:64:8b:fb:6b:54:c2:94:b8:4b:df:6d:cf:
cf:6c:b0:4b:16:8d:4f:09:7e:2d:f8:aa:ef:2f:d2:79:d0:81:
24:8b:70:98:1b:fb:02:75:06:95:5a:e1:55:e7:8f:5b:da:e5:
50:62:0c:d7:09:52:a7:0a:2a:a5:b1:f6:90:66:ef:d0:f7:65:
6a:db:6d:2f:89:40:12:aa:45:eb:9a:87:75:ea:3a:4d:99:42:
9f:cd:b5:82:bf:11:1e:48:6c:d8:96:c1:5f:78:88:93:5f:60:
bb:7a:6a:1d:c7:d4:0c:57:9d:01:89:db:21:58:fa:0f:d9:c5:
99:24:fd:5a:bd:a7:ae:ab:9c:5e:56:bf:ca:28:f5:6b:b1:ed:
57:a8:d5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:38 2025 by rpki-client