Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
File: 6wK1I7069vxsN93WbN9HmT24Yys.mft (raw, json)
Hash identifier: mUnZzrK+hlIUobttgXcUu7pQjKq+Tu9GY79NLEQ876A=
Subject key identifier: 5E:62:F5:64:BE:56:BF:05:FD:9C:55:36:36:E3:EF:CD:B3:EC:79:70
Authority key identifier: EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
Certificate issuer: /CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Certificate serial: 019659F0466D5A1E0F16881B717ECD0208EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
Manifest number: 077C
Signing time: Mon 21 Apr 2025 20:00:40 +0000
Manifest this update: Mon 21 Apr 2025 20:00:40 +0000
Manifest next update: Tue 22 Apr 2025 20:00:40 +0000
Files and hashes: 1: 1zUeCNsyUySRrcIIfazZmjAut_s.roa (hash: WXspWFEbktg81y3mrIdyXASjQtA7MBr6Jnt3pUsHMi4=)
2: 6wK1I7069vxsN93WbN9HmT24Yys.crl (hash: rWQIdbaqVjI6vJXpZyv0f1Mjz8Aux/8ZO4GAnlzEDgM=)
3: zd1TadsFdkDRbaDn6de93U3QGzg.roa (hash: 3y34pfznptay8iJNHTIdskxBHxaww5H8QXxFU6fcGRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:46:6d:5a:1e:0f:16:88:1b:71:7e:cd:02:08:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Validity
Not Before: Apr 21 20:00:40 2025 GMT
Not After : Apr 22 20:00:40 2025 GMT
Subject: CN=5e62f564be56bf05fd9c553636e3efcdb3ec7970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:98:cf:9a:1c:1b:f1:fc:08:c4:4c:37:1b:
16:92:41:0a:cc:a6:0b:1c:91:0a:1c:46:bd:bc:59:
34:a4:59:12:ca:88:5e:b9:e1:6b:ed:24:92:7a:6b:
f7:3a:b1:54:de:33:c1:56:52:ae:e6:b5:c7:c2:04:
63:b1:c7:d0:98:88:51:8a:da:8b:a4:a6:5d:06:2d:
97:12:b0:dc:17:08:e5:e6:be:5b:b1:bb:9e:af:64:
60:b6:fd:3a:3b:eb:68:df:37:6b:89:18:b0:7a:fd:
6b:62:50:35:4e:cd:8c:2f:1d:ac:b0:f8:40:20:42:
8e:67:03:60:f0:f1:b3:5c:65:bd:c3:e0:10:0f:0a:
5a:a0:3e:07:f8:30:30:75:42:bf:17:64:52:01:cf:
c3:04:65:a6:68:a8:cb:0b:a3:55:32:d8:05:7f:54:
13:c4:bb:a0:df:30:1b:9b:e9:58:8d:73:85:b0:2c:
95:2a:25:68:47:dd:0a:03:19:85:93:82:65:56:1d:
18:e3:ba:26:2b:6f:ee:78:65:cb:cb:2c:ed:38:40:
96:ae:58:9b:13:e5:88:50:e3:3b:8d:91:0f:42:50:
bd:67:3a:78:3c:2d:7b:e1:7f:d7:bd:b7:74:5e:4e:
b0:89:58:58:4c:ca:9b:99:e2:03:f3:7b:35:f1:18:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:62:F5:64:BE:56:BF:05:FD:9C:55:36:36:E3:EF:CD:B3:EC:79:70
X509v3 Authority Key Identifier:
keyid:EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:19:00:84:8a:bf:b4:d0:7d:fb:74:04:b7:3c:d1:0e:e1:4d:
6c:7b:0f:6d:89:22:58:78:50:92:c4:91:7b:df:7d:b4:7e:b7:
2c:1c:39:b3:ec:6a:5a:44:21:8c:21:fd:55:cf:24:45:05:e2:
34:fe:06:aa:ca:ba:c9:ae:85:37:d0:b1:c6:96:2a:0b:0c:f6:
67:60:15:bb:ae:dc:f9:ed:bf:6a:6a:21:a8:92:62:98:e6:93:
69:5b:92:27:74:6f:6f:72:38:79:76:a8:bc:34:20:ce:ec:78:
90:fa:88:d5:ec:12:9a:1f:46:a3:df:40:cf:83:94:a4:d7:f2:
9a:65:8a:99:32:f9:8f:79:4b:bc:f4:05:5d:3e:3e:1e:61:87:
f4:89:2a:6c:16:9f:d6:56:4e:98:ef:85:1e:10:24:18:90:04:
06:eb:73:d2:5a:2a:73:31:40:e9:d9:b8:b0:d0:e4:56:fd:e9:
ee:9a:92:c0:e6:ea:06:0c:0a:13:53:83:1b:1f:95:83:f5:6b:
f4:a3:ab:86:c8:02:8d:c0:38:0c:96:1a:08:51:ff:1d:2d:76:
c4:2b:24:20:0a:c1:09:76:5b:25:97:58:8d:ad:c3:de:53:50:
0a:b8:5c:06:a4:18:09:b7:f2:f0:2d:97:db:51:e7:be:41:5b:
84:08:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:53:06 2025 by rpki-client