Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier: YsfVqlwNPkELF+073jyTF6QigR7GC7UemMLGwxRPG2w=
Subject key identifier: 23:92:B7:EA:F6:F1:26:71:0F:F9:F1:19:55:EB:D5:01:09:93:28:CE
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 01958F980DAD3E83C41D002AFCBF66D06DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number: 0FF4
Signing time: Thu 13 Mar 2025 13:01:01 +0000
Manifest this update: Thu 13 Mar 2025 13:01:01 +0000
Manifest next update: Fri 14 Mar 2025 13:01:01 +0000
Files and hashes: 1: Qm0v2QB0N6w8qGQL8ta92rDkpA0.roa (hash: aEK3PYUQq1E1pzkJ/CLkmP6YwUe047cyT3qoeHQ2dn8=)
2: dS8Rkw8dzyED62hL_7OXnHLvH04.roa (hash: qEmro5fJia38aDC86kQ3vNKBrJLyPDYdvwDe7Qknl6I=)
3: jIx4n0qvGCMbvZ4nZHfe7AlAvc4.roa (hash: PbvVUSgN0dLFWz6bc4odaxxggERGNNwAo8M1AiayrEs=)
4: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: Utjtdj3Jlsy/CsgH8PINWggLxuJbSNXUC85ATGRPs9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:0d:ad:3e:83:c4:1d:00:2a:fc:bf:66:d0:6d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Mar 13 13:01:01 2025 GMT
Not After : Mar 14 13:01:01 2025 GMT
Subject: CN=2392b7eaf6f126710ff9f11955ebd501099328ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:90:a8:cb:d5:9b:b0:e9:d1:1b:89:ce:72:
79:e9:e4:0f:97:3a:ad:b5:8b:e5:94:af:d9:20:7d:
5a:af:e0:6e:20:09:f0:51:d2:68:62:c3:c9:10:24:
38:ec:66:f3:7a:94:c1:7a:a8:45:ad:af:10:0e:d0:
fb:ae:86:ee:54:77:9f:44:0f:a6:26:e2:d8:62:13:
c1:67:11:c7:a7:b2:2f:94:4a:d5:09:17:af:24:7f:
c6:bd:47:34:00:09:dc:b0:bb:47:19:21:05:c0:e7:
31:58:76:ba:53:b2:01:2f:44:20:43:53:69:79:d7:
8b:db:b5:bc:73:85:f5:fb:82:04:cd:06:76:d1:f5:
5d:ce:c4:6d:e5:a7:4d:e2:26:c2:02:99:e0:3a:af:
c6:75:5d:05:bd:39:4e:b8:4b:11:7b:08:65:20:a3:
1f:fa:4f:73:fd:46:a3:8a:ca:64:d4:47:a5:64:ff:
7b:84:f2:a8:3d:c4:dc:a2:72:0a:91:dd:4f:62:7c:
46:f0:a0:76:44:6c:45:d2:8d:df:62:b3:71:81:f8:
e1:b7:5b:50:bc:24:3d:52:f0:da:e8:f4:9b:ed:3c:
89:3d:91:15:f2:56:3f:98:64:cd:17:ff:58:70:da:
1f:ac:45:33:97:9f:b5:f4:f2:c8:0c:92:04:a6:18:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:92:B7:EA:F6:F1:26:71:0F:F9:F1:19:55:EB:D5:01:09:93:28:CE
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3d:6b:eb:bb:1f:60:dd:2b:f9:f4:a4:79:d1:75:6c:e7:4d:
8c:d9:40:d0:4a:e9:b0:f3:9f:5c:5b:b0:e5:30:32:c4:df:5b:
21:08:59:dd:e0:5b:ac:56:c0:90:8c:7b:5a:69:67:f4:71:9e:
33:48:ae:05:74:c5:a1:d8:ad:57:c4:a3:36:9f:fc:4a:95:82:
6f:c5:8c:70:61:cd:74:e7:3d:3c:67:31:c0:fa:83:80:cc:8e:
6d:9c:fe:24:64:74:d7:0f:e0:7d:7e:74:fd:5d:67:e3:02:85:
00:23:a6:db:aa:b3:cb:b0:f3:0b:e6:aa:75:27:f2:e9:53:13:
6a:31:71:df:bc:f1:f2:4a:97:6e:bc:89:54:49:99:44:55:b4:
93:19:26:8d:60:a1:91:11:b8:29:44:53:37:6f:40:00:7b:7c:
86:fd:c4:63:ff:c5:fc:e7:0e:03:0d:76:d7:fa:9c:5a:6d:1f:
43:3a:b0:fc:56:33:09:bd:67:25:af:cd:41:63:b7:b8:ce:eb:
61:82:9b:56:ea:c1:0c:77:73:61:af:e7:1d:09:12:7f:02:d2:
62:dc:1a:d3:5e:a5:68:a1:ba:96:2b:4a:26:7b:11:c4:1a:3d:
88:d5:f4:af:7e:1e:07:f5:69:f7:ab:83:e7:7e:11:a9:20:38:
f4:1e:cb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:01 2025 by rpki-client