Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
File: 6Oz45OybRCqVN0wqPH54Swdhh8w.mft (raw, json)
Hash identifier: sVSGLrq1Rkud2Rutj5dwoZ/BguyLAvr+xOkHNEB/OcA=
Subject key identifier: 34:0B:05:C9:20:93:EC:5C:E2:BF:2F:25:57:D1:84:0F:76:FF:62:54
Authority key identifier: E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
Certificate issuer: /CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Certificate serial: 019649D81C763A6642A9E97ABF66EE26AAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
Manifest number: 1489
Signing time: Fri 18 Apr 2025 17:00:21 +0000
Manifest this update: Fri 18 Apr 2025 17:00:21 +0000
Manifest next update: Sat 19 Apr 2025 17:00:21 +0000
Files and hashes: 1: 1favdYYY_m115fJbPCqnNQTQC-4.roa (hash: JqdrpIAPsvsNkIpUiM7hC8jOVuzgCWUVOGVp30lphlM=)
2: 6Oz45OybRCqVN0wqPH54Swdhh8w.crl (hash: gzbgbgWrV+LgPR+F9ZWN01wuDq2LbDFWZ81DAO1oCCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:1c:76:3a:66:42:a9:e9:7a:bf:66:ee:26:aa:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ecf8e4ec9b442a95374c2a3c7e784b076187cc
Validity
Not Before: Apr 18 17:00:21 2025 GMT
Not After : Apr 19 17:00:21 2025 GMT
Subject: CN=340b05c92093ec5ce2bf2f2557d1840f76ff6254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:7c:e9:6e:f2:a8:5b:46:3e:10:7b:b4:eb:
fa:80:79:45:cb:71:c8:55:72:a1:fe:fe:99:d8:1e:
71:fc:26:d3:46:ec:0e:1f:db:f2:0e:69:8c:58:dc:
b9:f9:89:10:ab:19:87:cb:b6:7f:42:b8:85:5e:6a:
87:03:46:15:bb:66:5a:0e:f4:26:80:f1:8f:ac:58:
43:29:f0:34:f4:b7:53:45:2b:b7:01:6d:f0:76:f0:
f7:30:9c:6b:70:f4:ed:67:b3:5c:26:bd:4a:8e:6f:
46:44:e8:cf:be:44:74:47:70:bb:b0:1f:e0:c9:68:
e1:45:1d:ad:ab:de:a8:52:5a:e9:00:73:12:1f:5a:
65:c9:f9:f1:67:45:a9:53:7c:a8:d1:51:fe:de:91:
e4:69:e9:35:ca:cc:1f:00:87:cf:19:8f:97:34:9b:
9e:36:f2:83:04:f2:9f:63:46:9a:cf:72:d5:33:24:
83:38:bc:e4:66:ca:ce:27:3a:25:e7:c4:b3:35:e7:
0a:03:1d:6a:08:c1:b6:d6:a4:d7:81:c9:89:32:48:
27:df:15:27:8d:94:5a:4f:f0:ad:25:93:37:0c:12:
0b:d3:ce:00:68:45:aa:04:4e:7a:8d:cc:74:b0:77:
31:96:b0:d0:55:f6:68:ed:10:97:54:4f:6f:d4:d5:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0B:05:C9:20:93:EC:5C:E2:BF:2F:25:57:D1:84:0F:76:FF:62:54
X509v3 Authority Key Identifier:
keyid:E8:EC:F8:E4:EC:9B:44:2A:95:37:4C:2A:3C:7E:78:4B:07:61:87:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Oz45OybRCqVN0wqPH54Swdhh8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5e80b4-cb16-4a35-b429-229ae9f728d6/1/6Oz45OybRCqVN0wqPH54Swdhh8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8b:27:a0:a6:72:ed:b5:6e:7c:59:9f:6c:a2:a4:dc:a5:eb:
ca:89:33:03:3c:fe:92:41:ca:b8:4f:49:57:b1:99:f0:b4:64:
5d:b8:46:21:b4:ba:68:e0:50:a9:e4:ae:16:fe:91:75:81:53:
42:b8:ba:bf:ab:65:c7:1b:8b:f5:31:2d:2c:1d:98:cd:2d:7c:
5d:ec:9f:80:d0:b0:79:dc:ae:6c:ed:11:cb:16:4a:82:1e:61:
92:a1:f4:56:31:d9:da:3c:94:ba:f2:72:80:42:24:56:18:83:
29:4e:b6:fd:ac:35:f7:93:9f:6b:66:ad:da:1b:ed:f9:01:2c:
52:aa:9d:00:56:c0:48:7a:07:cd:10:cb:46:37:05:49:d2:5b:
32:db:0b:66:b1:f9:c4:9c:d5:89:45:a2:a9:e0:f7:26:0b:3d:
0e:f1:19:dd:50:af:8c:9b:51:56:5e:ea:45:2b:ad:68:23:ab:
98:72:c3:7b:fa:6c:a9:8f:09:0a:ab:95:4c:ed:d7:06:6a:64:
e0:ce:39:34:8b:8a:e4:4a:8c:fa:d9:db:12:b2:a9:ee:8d:5f:
09:0a:73:a0:9a:49:9a:aa:19:da:f2:79:39:38:c5:c2:69:a9:
af:11:3a:0c:3f:d6:39:4a:d8:8d:ab:20:9f:82:1e:ba:8a:12:
8c:e4:e5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:21:20 2025 by rpki-client