
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
File: a5p0BaYIXJq6zwg9yQpJX80mjPg.mft (raw, json)
Hash identifier: tGeZJ4vfYyYhgkhgBkDFan+6fWRKBThPF/qZWn3uu9Y=
Subject key identifier: 0A:BD:67:90:24:05:A7:39:91:4C:EB:7F:93:26:41:C5:E9:C6:31:94
Authority key identifier: 6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
Certificate issuer: /CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Certificate serial: 01964BC68B4DB3CDC14479F8F783A8FCA9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 02:00:24 +0000
Manifest this update: Sat 19 Apr 2025 02:00:24 +0000
Manifest next update: Sun 20 Apr 2025 02:00:24 +0000
Files and hashes: 1: 3VrPGjUQ3Y-l-f7OeEozbIvcsLg.roa (hash: bLeP0OV6qVbEnqwfvFZWrAEprQe0NgLJqVsqQYDqQEk=)
2: a5p0BaYIXJq6zwg9yQpJX80mjPg.crl (hash: muwPcy/XqFuOs2oKsvVZyifJtk8JqvmLD+g81gzPzlI=)
3: hNx5M08bBB4LNOoJFKhlbkgWWJM.roa (hash: cqMnw1dZerM4/zZuXP5i5wijuCSzDOC7D7skn29vFmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:8b:4d:b3:cd:c1:44:79:f8:f7:83:a8:fc:a9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9a7405a6085c9abacf083dc90a495fcd268cf8
Validity
Not Before: Apr 19 02:00:24 2025 GMT
Not After : Apr 20 02:00:24 2025 GMT
Subject: CN=0abd67902405a739914ceb7f932641c5e9c63194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:d3:eb:3b:0a:be:05:67:82:a2:5e:9f:8d:
03:12:8e:0e:77:89:e3:a0:6c:83:1e:0e:ab:16:70:
a0:19:6d:30:77:54:8b:31:62:06:30:12:01:bb:e2:
d8:5f:c5:ed:f8:2d:a5:aa:a2:91:63:b4:65:2d:fc:
7e:13:63:90:d1:ee:f9:0e:bb:8a:0b:8c:b1:f5:ac:
55:0c:dd:73:13:0e:79:d9:a6:9c:e6:ed:f0:6a:77:
74:a7:0a:86:69:35:d7:eb:6b:9f:70:5c:15:66:e4:
68:c5:11:52:31:7a:fc:93:f6:76:13:1b:03:89:a4:
78:50:70:a8:70:f4:67:21:42:4c:68:59:b4:e0:79:
c6:ca:e1:d5:9e:ce:30:63:0f:30:69:3e:07:ea:50:
7f:98:8d:bc:bb:1d:27:d4:b0:c8:98:5d:9c:03:d0:
2e:5f:4d:9f:57:a2:0c:52:88:4e:80:de:13:d6:43:
3d:17:27:86:87:48:97:ae:31:3c:82:1b:ef:a5:28:
27:4f:8c:d1:57:3b:ee:8c:5b:44:6a:47:9a:85:52:
f0:e2:a5:7b:9c:3f:8d:5f:ec:bf:0b:88:8f:c4:08:
6e:ee:c0:81:1b:1e:4f:2b:5f:f7:28:ba:08:03:81:
fb:d2:41:5d:97:c0:a5:b8:5b:cf:e9:8c:de:c8:0e:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:67:90:24:05:A7:39:91:4C:EB:7F:93:26:41:C5:E9:C6:31:94
X509v3 Authority Key Identifier:
keyid:6B:9A:74:05:A6:08:5C:9A:BA:CF:08:3D:C9:0A:49:5F:CD:26:8C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5p0BaYIXJq6zwg9yQpJX80mjPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6457d9-b4db-4b2d-919c-2e1ee9471eec/1/a5p0BaYIXJq6zwg9yQpJX80mjPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:91:cc:d1:28:d6:2c:55:0a:19:f1:4e:e0:bb:75:aa:23:a1:
2f:9a:d7:2d:73:d0:2f:49:1a:89:05:70:39:0c:2b:5d:86:77:
49:0e:ca:b6:bd:59:0f:69:fe:ef:e3:d1:61:44:ae:83:c8:c9:
e3:f6:4d:85:df:e5:64:99:ed:46:35:0b:52:53:19:e7:58:c1:
43:0c:7d:12:52:1a:f6:71:a2:6e:38:72:65:c3:ac:a0:61:f8:
c8:2d:d9:5e:3e:ec:78:0a:b7:ef:23:15:3c:73:b4:93:f9:f4:
ea:af:1a:8a:e9:fd:d6:d7:05:ec:3b:0e:69:07:6c:0e:32:22:
90:d3:15:93:26:b8:5c:60:87:af:85:30:81:42:75:0a:d0:5c:
0d:21:e2:e1:5f:12:b3:4e:e4:ae:58:8c:15:a3:1d:3f:b8:d5:
8a:0b:74:33:8e:82:05:f1:39:1c:7b:8c:d9:c7:cf:08:01:8e:
d0:32:03:61:2c:98:67:fa:6f:b0:dd:44:c6:93:95:ef:e2:6e:
56:2d:99:4a:1a:1e:0a:a6:a1:aa:82:92:c0:f9:c0:e6:40:08:
c9:58:86:a3:b0:d5:5a:90:f7:b0:62:f1:a1:28:de:d9:84:42:
f5:30:cc:30:23:40:02:b8:f2:20:eb:ff:e9:e4:a8:8e:5a:69:
e4:ca:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:46 2025 by rpki-client