
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File: a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier: 6tlyAzLsO7QuKXazKmv9AO3hBI/h3HqWDKgM42gygW4=
Subject key identifier: E1:90:11:44:6D:3C:25:5E:08:42:86:57:5C:35:01:A1:50:EA:86:6D
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer: /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial: 019654256D1B64A922D8B8D1466E6BC50867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number: 03C9
Signing time: Sun 20 Apr 2025 17:01:00 +0000
Manifest this update: Sun 20 Apr 2025 17:01:00 +0000
Manifest next update: Mon 21 Apr 2025 17:01:00 +0000
Files and hashes: 1: 0bVZzhMFVS1g8jzWdISxg74CDIY.roa (hash: 0CO5Cokq43YXaFcPiFBIU+s3WfK4TaB7E8kyWwFMXGc=)
2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: MD/o7KWWoULFHrPkeWlnrub4FsNLG+iXIXlpzQV6OK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:6d:1b:64:a9:22:d8:b8:d1:46:6e:6b:c5:08:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Validity
Not Before: Apr 20 17:01:00 2025 GMT
Not After : Apr 21 17:01:00 2025 GMT
Subject: CN=e19011446d3c255e084286575c3501a150ea866d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:55:18:06:b8:19:60:b4:99:33:5a:de:a4:
ab:e9:60:59:af:15:51:c2:2e:d0:f5:8e:03:ef:08:
f8:da:f5:ac:32:8f:71:58:d1:a0:7d:c9:a9:1c:b8:
08:ad:a6:27:e9:f4:75:73:15:95:ae:88:51:b4:4f:
5c:52:d7:c4:45:e4:b6:b1:5d:97:09:de:34:1a:56:
64:59:53:12:c8:37:1f:a6:f6:2c:1c:c3:b0:65:b0:
ae:da:ea:cf:d0:33:41:fe:2c:3c:c7:56:fc:cb:cf:
78:9c:59:b0:b0:0e:90:e9:32:e3:bf:12:78:05:f3:
83:3a:4e:06:b6:8b:b0:6f:9d:b7:79:41:e4:12:31:
31:27:6a:47:99:23:43:e1:d4:02:6b:fe:5d:c0:dd:
ae:91:55:39:56:80:b2:e7:51:23:7c:d7:79:39:b5:
91:10:41:ff:7d:7e:62:b0:42:52:cd:3e:2c:e4:a1:
48:d6:0f:65:73:ce:fc:33:17:1c:bd:79:e9:ef:58:
5d:11:3e:f0:de:56:d6:68:c5:1d:8c:8e:07:58:51:
96:c4:96:8c:57:37:9e:4d:e6:c7:ef:1b:a4:85:32:
8f:8a:69:15:32:01:02:84:47:15:04:81:7d:59:79:
cd:d9:0c:1d:f7:a7:f4:ad:a6:b0:06:8b:f3:4b:25:
2f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:90:11:44:6D:3C:25:5E:08:42:86:57:5C:35:01:A1:50:EA:86:6D
X509v3 Authority Key Identifier:
keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e0:45:2e:00:9a:df:aa:de:cf:71:44:87:45:91:f7:f0:a3:
ce:34:75:7e:27:d7:10:8a:c2:6a:9e:14:d9:06:5e:2d:b2:be:
54:e3:76:9d:a9:1c:98:fc:ef:a3:fc:8c:43:c7:0a:87:aa:06:
5e:be:2e:2d:99:86:ac:a3:2b:4f:0b:df:19:72:3a:f5:ea:24:
5b:22:94:3b:c4:fa:a9:7d:cb:f6:c1:38:e6:c3:00:7f:4e:b0:
58:b6:46:04:09:b0:3e:78:21:9e:5f:81:48:af:5b:dd:e2:57:
41:61:f5:7c:a1:8b:e0:45:f2:e4:9d:2c:66:5d:4a:2c:e6:7a:
77:41:8a:e2:a9:51:d8:57:11:30:5e:f0:e8:91:2a:73:51:9e:
50:4d:56:7a:a2:b0:d4:20:e1:4e:c1:39:94:4d:4e:a6:77:27:
f3:ef:21:80:96:4e:7d:bf:68:32:99:5f:55:c7:04:d9:68:d5:
65:9c:f2:32:48:9c:6b:58:8e:3b:64:50:e1:c2:e5:12:e4:c0:
38:b9:ae:d9:ec:55:61:cb:a6:9f:4d:f6:eb:26:6e:66:f5:3b:
71:37:39:52:f0:de:9b:28:df:37:ad:96:d1:bb:c6:50:86:19:
40:f6:f0:6d:c1:3d:6a:4b:cd:1f:0b:f5:ba:7f:a5:fe:75:38:
e7:58:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:36 2025 by rpki-client