Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File: bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier: fP9bWTkv2I2FzpDV7L2AZfvIPSelV5s8n0MLec7fV5Y=
Subject key identifier: 88:D6:DD:33:4A:DB:AF:83:32:8E:FB:E6:45:1E:B0:2A:E6:1C:BA:41
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer: /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial: 01959073DAD7B19C246C241E5DED42961C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number: 0A6A
Signing time: Thu 13 Mar 2025 17:01:06 +0000
Manifest this update: Thu 13 Mar 2025 17:01:06 +0000
Manifest next update: Fri 14 Mar 2025 17:01:06 +0000
Files and hashes: 1: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: 8wayc2A1J5zYtZx2bE3WcKqXT9Ol/pF04wJSRWpPFiM=)
2: kqOQ78t4w6FZpmwe4_k_12IlEMA.roa (hash: HyBjAoXV0kXvavyvJersLyuqJgRnm+q7hrBZfg1KGdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:da:d7:b1:9c:24:6c:24:1e:5d:ed:42:96:1c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Validity
Not Before: Mar 13 17:01:06 2025 GMT
Not After : Mar 14 17:01:06 2025 GMT
Subject: CN=88d6dd334adbaf83328efbe6451eb02ae61cba41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:04:f7:9e:60:93:6c:ed:9a:b1:9f:32:a5:
1b:76:fc:fd:65:28:43:b5:b7:3b:20:62:e0:b6:b6:
26:d9:f7:98:64:64:1f:c9:75:95:3e:3d:ab:1b:b1:
1b:c5:85:2b:9f:ae:23:68:96:a0:bb:7e:18:67:c5:
dd:21:dc:db:0a:f0:73:19:b6:6d:0c:f0:28:bd:3e:
d9:55:15:4b:be:5a:5c:dc:5e:5d:94:1e:52:39:d7:
3b:38:36:69:75:23:7e:6a:75:40:cb:6f:78:86:de:
3c:b3:e3:5b:19:61:f5:c4:ee:78:1b:76:e7:3d:ff:
3b:5f:23:6f:06:45:76:1f:83:e9:ee:63:83:e6:ce:
45:16:c9:c8:e4:66:9e:04:26:00:64:84:b9:c8:64:
31:65:da:9c:88:66:fd:38:ce:b7:4d:79:ed:f1:53:
e4:b6:4f:41:17:1a:ae:1d:f9:09:3e:e5:2f:8b:50:
d1:d0:b7:c9:03:a5:a0:43:a1:92:46:da:05:64:b3:
26:d5:ed:b4:68:c8:19:40:83:86:0f:5a:6d:02:6d:
11:c5:1c:36:b0:e0:35:2d:8d:8d:49:38:2c:dd:31:
49:e8:68:e4:96:f1:ad:d0:1c:2c:2c:30:16:88:14:
29:c0:4b:87:2d:7d:25:f3:c1:88:45:ce:16:6b:b7:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D6:DD:33:4A:DB:AF:83:32:8E:FB:E6:45:1E:B0:2A:E6:1C:BA:41
X509v3 Authority Key Identifier:
keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b9:ed:36:07:ca:67:de:f0:c5:f9:5b:e9:9c:77:c8:0c:be:
5c:d8:1b:ca:70:c7:12:cb:bc:ce:ee:66:95:d2:02:28:64:52:
17:c6:a1:20:26:29:f5:7c:42:b0:70:89:fb:e9:f6:dc:30:23:
32:39:a6:27:28:38:61:3f:c1:01:19:c7:85:d9:2c:a3:39:92:
a8:9b:a5:b2:ff:90:4f:a3:7a:f6:23:f0:2f:49:ef:80:0c:3c:
64:8a:15:4e:81:d4:c3:e3:e8:7f:40:76:cd:aa:84:19:37:43:
da:dc:8b:d9:ec:73:e2:a4:a5:e5:4a:0a:cd:38:f5:3c:67:62:
7f:98:07:10:e3:dc:ae:5e:76:e5:d4:15:3b:e8:6d:f1:63:12:
9e:28:82:35:b3:9a:89:2b:d2:78:27:90:78:1a:dc:24:a7:85:
bc:ab:0c:4e:3f:1b:42:c3:62:e0:af:68:f4:91:e3:31:f6:fe:
77:60:b1:c2:e4:31:d4:51:a4:8a:99:fc:01:1c:c5:d3:75:60:
72:d3:dd:e2:5b:1e:97:ad:34:05:4b:a3:c0:ab:86:57:be:2a:
f3:77:0a:20:59:e6:5c:58:f9:9f:a7:5d:57:42:34:d7:b5:f3:
d9:82:77:72:17:be:7a:f8:2b:f3:60:e3:63:2e:5e:8f:f4:e3:
d1:68:e4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:31 2025 by rpki-client