Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
File: 6MpwwfyVubHp3Hd1RVutuSFPkdA.mft (raw, json)
Hash identifier: 8GKFz8nzqdkDYiRwbuK3qoh6Mp7KMuM4ej6hAPp63D4=
Subject key identifier: 2F:32:68:73:4F:1D:84:A6:0A:6F:E0:4E:82:AB:FF:34:47:24:6C:E8
Authority key identifier: E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
Certificate issuer: /CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Certificate serial: 01964EFEDCB609E0EC0FCD929A10FF56EC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
Manifest number: 1401
Signing time: Sat 19 Apr 2025 17:00:47 +0000
Manifest this update: Sat 19 Apr 2025 17:00:47 +0000
Manifest next update: Sun 20 Apr 2025 17:00:47 +0000
Files and hashes: 1: 6MpwwfyVubHp3Hd1RVutuSFPkdA.crl (hash: kzTADNLHinKsDgm9gWCZcKxoPENE8FtgFHdTEbhK/KM=)
2: h3MBCKUGhHfeEGJEjBUvFcZingY.roa (hash: Kf87fhJV7eWi54ATVvDhv4SnGp1TZLheM1w//OwPipM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:dc:b6:09:e0:ec:0f:cd:92:9a:10:ff:56:ec:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8ca70c1fc95b9b1e9dc7775455badb9214f91d0
Validity
Not Before: Apr 19 17:00:47 2025 GMT
Not After : Apr 20 17:00:47 2025 GMT
Subject: CN=2f3268734f1d84a60a6fe04e82abff3447246ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:58:8c:f7:09:e9:d8:8b:0c:51:b9:fe:4c:da:
04:48:50:07:32:e9:34:05:06:85:b6:ad:ce:8c:65:
7e:ef:f4:8f:d8:07:06:2a:81:d4:25:71:0e:1c:a6:
7d:41:16:77:30:b3:cf:0b:4e:57:e8:80:de:3e:91:
79:ad:89:80:41:0b:b1:73:fa:9d:b4:af:88:c1:24:
8d:7a:c2:90:b1:6f:7a:e2:1b:a2:a1:33:5e:d6:8c:
64:40:35:bc:16:88:a3:59:23:e7:18:e2:5a:c3:f4:
93:06:ce:40:f7:f0:61:3b:f7:8b:a0:a9:9a:6d:08:
7a:df:a1:bc:eb:1d:a7:c8:cd:35:b9:9a:14:7a:56:
2f:41:4a:70:27:28:fb:7a:4c:d5:31:c7:30:c0:5a:
07:a2:da:42:2c:46:32:ff:52:be:63:00:5f:05:78:
cf:2a:16:a7:db:6e:26:a1:ae:9c:c0:92:7b:e0:48:
81:9d:e3:a5:eb:46:90:a9:71:f4:a1:a8:98:c9:30:
b8:5b:70:6d:03:4e:0c:92:88:58:d8:a8:c2:91:2e:
46:1b:bb:78:dc:8e:1d:d2:a3:2b:4c:c3:1e:c4:02:
92:b0:f2:81:a9:b9:16:0a:df:85:34:63:1d:d4:e9:
0d:9f:e3:84:74:80:4a:34:97:83:fb:1a:f9:51:16:
fb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:32:68:73:4F:1D:84:A6:0A:6F:E0:4E:82:AB:FF:34:47:24:6C:E8
X509v3 Authority Key Identifier:
keyid:E8:CA:70:C1:FC:95:B9:B1:E9:DC:77:75:45:5B:AD:B9:21:4F:91:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MpwwfyVubHp3Hd1RVutuSFPkdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fb9fe-ddc7-4432-a4a3-16d9f7d074f3/1/6MpwwfyVubHp3Hd1RVutuSFPkdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:87:ca:02:95:62:57:0e:e8:e0:4e:e3:29:b3:d1:23:56:f3:
4f:3c:77:d7:4f:d9:45:97:63:07:65:a1:d9:56:35:59:06:98:
06:8f:4b:5c:29:04:b2:a0:68:64:aa:75:2c:69:fd:4e:dd:ba:
0d:01:28:6f:f7:ce:ed:d0:40:16:f8:79:15:6c:4f:3c:9e:0a:
62:39:3a:5b:8d:c2:7c:d8:23:de:69:4d:d7:14:27:3c:91:9b:
95:68:4c:c2:f7:2b:af:09:96:39:b9:7b:18:bf:15:50:d7:05:
15:23:fc:bc:04:10:09:89:8e:4a:ba:d6:65:ec:f7:4f:bf:6e:
30:af:59:26:f8:0b:15:89:99:b9:c6:85:a3:3a:99:e9:0b:ba:
a1:09:5f:a0:23:ba:11:5a:c2:39:fc:69:e2:8e:10:2e:49:0f:
8f:f1:38:91:10:55:9f:cc:1b:53:45:d3:81:c5:ef:21:28:a9:
af:cd:d0:08:95:5b:86:d5:8d:8f:c7:bf:16:20:be:64:1a:36:
b7:aa:4e:4f:a9:ce:ee:88:25:3d:39:44:c8:23:99:6b:40:ba:
f6:f5:0e:56:9d:af:56:06:18:f5:a8:da:4a:ca:39:26:70:ec:
bf:5d:89:79:96:ab:a9:f4:ff:1e:d3:ba:fb:6e:d0:f2:c1:06:
14:16:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:43:35 2025 by rpki-client