Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
File: 6ySQqKEzr8STmogtt1JsFfiS6Mg.mft (raw, json)
Hash identifier: i5NBysfhaB8RJlJx+mI9sWMxxOEe7rMbM4onuiuOdU0=
Subject key identifier: F1:47:0C:BC:59:64:63:03:F0:43:57:01:8B:41:D1:1A:36:50:EF:14
Authority key identifier: EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8
Certificate issuer: /CN=eb2490a8a133afc4939a882db7526c15f892e8c8
Certificate serial: 01965492E1ADE5FE89498D1D60672BBCF8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 19:00:34 +0000
Manifest this update: Sun 20 Apr 2025 19:00:34 +0000
Manifest next update: Mon 21 Apr 2025 19:00:34 +0000
Files and hashes: 1: 6ySQqKEzr8STmogtt1JsFfiS6Mg.crl (hash: LDOwa8yTgz0t+/ZWOFeM7mLVXkrTdDEVwIWjCD6i0Ns=)
2: dp2EkQj5_zKrlsEr5C_rrbMhRyA.roa (hash: mX2VEnqBHs2wq24qAd7nrxxeH5xEJp3U/9aLReWzccA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:e1:ad:e5:fe:89:49:8d:1d:60:67:2b:bc:f8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2490a8a133afc4939a882db7526c15f892e8c8
Validity
Not Before: Apr 20 19:00:34 2025 GMT
Not After : Apr 21 19:00:34 2025 GMT
Subject: CN=f1470cbc59646303f04357018b41d11a3650ef14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:fd:52:52:6f:04:49:f4:5d:6b:ad:45:70:
2f:b9:f4:e2:22:f2:61:e2:41:fa:57:b3:a2:1f:6e:
4e:c7:46:e8:8e:e6:d4:dd:0a:2a:30:12:be:d2:41:
35:23:3a:92:bc:4e:f2:4e:87:de:8b:84:5e:63:2c:
1f:4a:1c:81:c3:8c:c8:a6:74:8f:9a:41:c8:85:03:
78:71:8e:42:c2:2a:95:9c:e2:ec:24:19:0b:52:f7:
4b:2d:cc:76:a2:15:67:7e:34:20:0c:31:4d:01:bc:
33:ad:1f:bc:46:ef:5f:53:b7:57:a0:49:4c:07:3d:
49:91:e8:f9:cc:c2:f4:85:3f:ee:53:df:7c:e0:42:
4e:6f:99:b7:74:52:b0:28:87:17:28:20:92:a4:5b:
71:a0:19:c1:88:2f:2c:8b:45:94:a2:32:1b:1e:a2:
78:63:71:8b:ea:3e:1a:85:de:d2:26:4f:e8:73:77:
65:18:d6:05:ca:bb:a0:9f:58:86:25:5f:70:49:89:
15:59:a6:d7:88:7e:48:fd:b5:9b:b7:6b:ab:8c:df:
57:bd:9c:24:74:ca:e6:18:d5:9b:80:b7:dd:41:4f:
b0:08:0d:e3:9f:7c:ed:03:7f:93:76:f7:ae:a5:b9:
c3:21:14:0c:74:60:14:aa:62:8d:8a:75:83:42:11:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:0C:BC:59:64:63:03:F0:43:57:01:8B:41:D1:1A:36:50:EF:14
X509v3 Authority Key Identifier:
keyid:EB:24:90:A8:A1:33:AF:C4:93:9A:88:2D:B7:52:6C:15:F8:92:E8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ySQqKEzr8STmogtt1JsFfiS6Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/74592e-aa80-400b-b479-39c550f0a4e4/1/6ySQqKEzr8STmogtt1JsFfiS6Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e7:86:60:ca:07:c8:bc:fa:e1:21:e7:24:55:0f:6f:4d:63:
86:51:45:af:35:f2:0f:71:a3:1f:f2:62:7f:a1:81:49:52:db:
f4:85:c4:e8:31:73:45:b3:28:da:2f:15:f1:09:d3:38:35:5e:
6f:d8:56:58:d9:52:9d:a5:81:7b:be:8f:e6:02:e6:91:92:ab:
f0:c5:14:67:ed:eb:49:48:7f:a4:61:aa:e0:0f:7a:d5:06:e8:
9c:24:38:58:b8:b0:37:3a:1b:10:f7:1d:34:34:c9:ff:44:a5:
d4:b2:77:db:87:73:1b:5c:5c:5e:f1:2b:6e:7a:22:68:53:8a:
23:8f:9c:21:ff:6e:02:a6:b9:f4:ba:53:27:a6:81:81:7e:ba:
01:80:d8:de:c1:ce:0f:46:95:19:00:84:40:d2:b4:0c:0d:af:
e2:79:67:ad:fc:11:10:14:9c:94:a7:98:8e:d8:77:82:12:a7:
dc:ae:07:ed:20:d1:a5:79:73:ba:b7:a9:f1:3d:11:38:2e:bc:
f4:a2:99:6b:6b:8c:a9:8d:58:2d:2b:74:19:5f:16:88:6f:f7:
1b:d4:f5:82:7d:77:3c:e4:d3:92:0e:06:87:3d:bf:eb:3e:25:
56:80:72:1e:4e:26:0d:69:cc:3b:b5:37:1c:b2:5b:d8:58:f4:
24:61:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:17 2025 by rpki-client