Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: RziTfxxDhTV0P6GDAZ+ImuiiUGCV8GGsvF6vkrphQ6w=
Subject key identifier: C9:B0:E8:E9:05:17:2C:EA:3F:C9:63:76:E5:C0:49:D5:16:FC:5B:BF
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 01965801EA95DC5C09BD61B75F8DD6FC476C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 1515
Signing time: Mon 21 Apr 2025 11:00:42 +0000
Manifest this update: Mon 21 Apr 2025 11:00:42 +0000
Manifest next update: Tue 22 Apr 2025 11:00:42 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: mqcCrLqRZU7Yys0WVKFn+GUMaPp/ldl9q+kfxHUbB2Y=)
2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
4: oDuQtsfWsb20exJBO7QurYBeWk8.roa (hash: gEKk7yZspSpg2oEhPVCqnu3t/dgmJib8oW+i8A65aR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:ea:95:dc:5c:09:bd:61:b7:5f:8d:d6:fc:47:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Apr 21 11:00:42 2025 GMT
Not After : Apr 22 11:00:42 2025 GMT
Subject: CN=c9b0e8e905172cea3fc96376e5c049d516fc5bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:bb:56:a8:41:1c:89:b3:70:30:b1:d6:d9:
56:46:a9:a4:27:57:5a:15:a9:af:87:0f:ee:cd:c4:
45:57:a9:42:c1:0b:62:47:53:68:00:43:74:42:18:
0b:c5:53:16:8f:7a:99:2c:0c:ba:80:b3:f4:8b:ba:
02:85:fc:44:cf:1d:5a:d2:44:81:54:1a:6b:9e:2a:
8c:e6:fa:2e:74:b9:24:0b:dd:89:a6:1d:ad:1e:60:
63:66:6b:56:e2:57:b0:df:5f:76:61:2a:f8:9b:4c:
7a:33:6c:72:ae:cb:33:ca:13:4c:1e:fb:ef:05:32:
8a:f4:b4:23:41:e5:42:ea:bd:71:fa:e8:5b:aa:7b:
63:55:6b:b9:fb:97:12:cf:75:fd:dd:ff:20:99:b2:
ce:fa:e8:03:cf:48:0f:8d:5e:e4:09:1c:b5:ab:d1:
6b:57:31:72:f8:ba:3c:c5:2b:49:f8:6e:3f:dc:48:
56:05:2f:a3:19:a0:8e:ca:85:79:75:bc:c1:1f:14:
83:7e:7a:64:46:a0:cc:68:dc:be:e8:7c:46:21:d3:
8e:f6:e6:41:7d:de:4c:fc:e7:c8:7c:9b:b8:0d:96:
9b:0c:26:c8:57:1d:80:30:61:97:b3:a6:c0:9a:7a:
67:70:af:dd:47:2a:2d:e9:5d:ab:e5:66:f0:32:4d:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B0:E8:E9:05:17:2C:EA:3F:C9:63:76:E5:C0:49:D5:16:FC:5B:BF
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1a:42:4e:3f:60:35:65:92:27:c0:f8:08:1a:65:52:87:41:
6c:bd:24:20:24:1d:79:ad:d3:cf:76:c5:c8:2c:78:2a:56:b9:
9a:ad:1d:34:ac:07:0f:7a:0a:04:38:09:2c:1c:09:f2:21:48:
fa:48:0c:b7:37:9b:59:02:29:c9:25:a3:13:b7:be:0c:88:76:
24:b9:3d:e2:74:2f:23:c1:df:f1:56:d6:c0:3f:4b:6e:ae:6f:
ef:6b:3b:73:0d:f9:be:e4:fe:8d:39:16:f8:4d:27:76:a0:4a:
91:3c:59:be:17:cf:e8:8a:8d:dd:64:2d:0f:54:45:83:8b:3b:
15:6a:9c:4c:01:ac:c8:77:1e:2b:b1:64:e9:0d:70:00:0e:70:
59:f3:7b:6c:d5:ed:05:df:5f:4b:5c:56:46:58:03:94:b3:4c:
fd:8d:8e:3e:53:2f:e0:9d:56:1e:4d:d7:e9:1c:d4:b8:a7:99:
a2:fb:7a:29:09:9b:d1:6c:44:9c:5d:60:6c:b7:60:c7:52:0b:
3f:aa:65:e8:10:04:b2:48:17:48:73:27:f9:de:31:90:a9:ea:
0f:26:f7:99:ee:3c:6e:b1:e6:de:af:1f:f0:04:2e:12:61:3b:
b7:34:89:65:65:1b:e0:2c:35:4b:77:0e:9a:7a:c6:df:db:1d:
05:b1:c1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:28:23 2025 by rpki-client