Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
File: 6EKkZljB0BusjUOWHGtJ54jjzMM.mft (raw, json)
Hash identifier: h1wXO29MOtCKhvArCe3QiKqwxxbtugHLuUS02L12TL4=
Subject key identifier: B3:11:A3:E9:BB:52:0C:D2:4A:33:4A:8D:C5:20:87:D5:15:70:3F:5F
Authority key identifier: E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
Certificate issuer: /CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Certificate serial: 01963F8BD5D6D345A0BFE49D5AC1F90B830D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
Manifest number: 14F6
Signing time: Wed 16 Apr 2025 17:00:50 +0000
Manifest this update: Wed 16 Apr 2025 17:00:50 +0000
Manifest next update: Thu 17 Apr 2025 17:00:50 +0000
Files and hashes: 1: 6EKkZljB0BusjUOWHGtJ54jjzMM.crl (hash: OpVhlfQ88Kman8gyM9lVHcmxJk8TtlKOq3rKFxkcN9Y=)
2: xANWJIQxy5Izrn9gOyePr5tbhgY.roa (hash: BAFdEGijvRbR7pMhm3hhAYe67gFmqJkY0ASzrXKygw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:d5:d6:d3:45:a0:bf:e4:9d:5a:c1:f9:0b:83:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Validity
Not Before: Apr 16 17:00:50 2025 GMT
Not After : Apr 17 17:00:50 2025 GMT
Subject: CN=b311a3e9bb520cd24a334a8dc52087d515703f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:d6:bb:ab:1e:ec:b2:bd:2a:12:fe:fa:56:
a2:1c:65:97:3f:d6:ef:d0:e6:69:9f:07:5a:60:db:
23:53:84:8f:11:4b:44:82:8f:83:a5:b5:d9:96:5b:
d7:92:23:a1:58:b6:f5:3d:7a:49:82:4d:0b:39:cd:
97:49:fe:e6:65:04:47:37:37:84:5c:b3:b1:ee:ce:
f6:47:e7:c5:61:d4:49:7e:95:54:d8:34:b7:89:d0:
e4:3e:52:40:65:35:5a:a7:ac:84:99:aa:34:69:34:
8f:ee:4a:06:4d:07:a7:86:63:66:32:55:2c:7a:98:
9a:3a:6c:fe:8a:19:61:2c:8c:56:3a:76:e0:88:be:
16:da:b5:aa:fd:21:9e:c2:a1:c0:08:1f:e7:19:64:
d3:f6:94:81:b3:7e:bd:5f:2a:05:1f:95:e4:93:6e:
0d:64:29:cb:94:05:f2:3b:5c:35:e2:a1:d1:cf:61:
92:9b:f5:14:bf:72:d2:72:7f:d7:bf:d5:4f:78:60:
f3:31:d3:5b:17:9f:e2:1e:79:37:f5:d6:30:ed:e8:
18:22:89:ba:69:4f:03:93:11:55:67:54:e6:d0:5d:
07:59:5b:45:ab:78:e1:95:76:58:2d:63:0d:db:95:
1e:ad:7c:81:aa:d0:68:bb:1b:ed:c1:ce:51:81:1d:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:11:A3:E9:BB:52:0C:D2:4A:33:4A:8D:C5:20:87:D5:15:70:3F:5F
X509v3 Authority Key Identifier:
keyid:E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bc:be:02:4e:05:72:09:68:e9:d1:06:69:e1:f3:9e:95:ef:
00:ae:90:86:b4:22:ff:6f:09:09:b4:00:d2:0a:f6:54:ad:42:
c4:0f:1f:7f:0a:33:6d:99:92:ad:48:9d:cd:b4:13:1f:e8:ae:
e7:11:31:1f:f0:38:74:df:6c:fd:77:3b:4b:a1:54:58:80:b6:
f7:83:74:ea:76:f9:b9:26:74:34:ee:76:ef:4e:50:7c:21:89:
66:ac:5c:86:bd:e6:f3:8d:e9:0f:48:5f:f7:4a:c2:35:c0:19:
46:b2:c2:33:de:86:1c:89:31:ac:84:43:29:69:6d:4e:17:3f:
25:d7:a2:dc:96:20:20:85:63:18:9f:ec:61:d6:66:ab:bc:57:
ab:19:ad:76:7a:c7:1a:d3:f7:9f:e1:ca:2d:0f:d7:15:14:f0:
6c:28:01:17:95:46:c4:e8:5f:03:c6:42:fb:b7:41:b1:a5:c6:
5c:31:7d:0f:64:8b:5c:15:e6:5c:80:2a:f2:4d:3d:b3:2a:6d:
c4:f2:4c:d0:e2:8c:c1:8b:0f:79:47:5a:76:d5:64:e4:78:bb:
93:cd:82:89:81:37:f1:27:db:24:4f:c8:d7:3f:a6:45:01:b3:
05:9c:9e:66:05:68:75:84:0a:61:10:41:70:89:a6:8d:7d:08:
cb:c5:1d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:30:51 2025 by rpki-client