Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.mft
File: 6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.mft (raw, json)
Hash identifier: JIFpydTPYkFBhmZjUi8JAJ6LDbg1lJhf435CZUFOONc=
Subject key identifier: A5:E8:67:77:CA:EA:59:4A:07:87:98:50:ED:F6:69:D6:02:49:B5:8F
Authority key identifier: E9:93:8A:1E:90:11:F2:26:9E:67:A6:3D:A3:80:01:9D:29:6D:99:83
Certificate issuer: /CN=e9938a1e9011f2269e67a63da380019d296d9983
Certificate serial: 019652A4B688AE62F79D067DBF169C0BC8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.mft
Manifest number: 0A71
Signing time: Sun 20 Apr 2025 10:00:48 +0000
Manifest this update: Sun 20 Apr 2025 10:00:48 +0000
Manifest next update: Mon 21 Apr 2025 10:00:48 +0000
Files and hashes: 1: 6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.crl (hash: VFCIFskih5UiiewrBFygY6HqDcPCDjcmy7P8xfisHEs=)
2: nZ86ecfoxVaYdUOOxkglMxbKvX0.roa (hash: fT87ThsPBrWvOzVvu1MJiqKVPeHA17ObJUBDMM+0zB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:b6:88:ae:62:f7:9d:06:7d:bf:16:9c:0b:c8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9938a1e9011f2269e67a63da380019d296d9983
Validity
Not Before: Apr 20 10:00:48 2025 GMT
Not After : Apr 21 10:00:48 2025 GMT
Subject: CN=a5e86777caea594a07879850edf669d60249b58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:73:a4:49:71:69:5a:df:26:b6:06:2f:2f:
08:35:8d:95:91:3e:af:50:3e:39:54:c3:8e:9d:92:
b5:bf:13:32:b5:d6:f7:6a:f6:4b:22:73:7b:9b:be:
d7:bf:16:09:b5:b8:23:9b:c7:8c:b0:23:e6:f2:e8:
86:35:0a:a4:fe:75:be:3c:8d:81:a6:99:b5:63:4f:
b1:eb:2a:66:e5:e8:7f:d3:90:ae:20:14:ec:12:96:
d4:f7:be:b7:48:24:26:bb:6d:b2:16:0c:44:32:fa:
03:30:a8:0a:6f:e6:17:05:80:e0:bc:0f:65:5e:d4:
a7:ce:07:08:67:1a:2b:20:15:76:7b:73:a9:74:a0:
22:17:aa:5e:b7:93:ca:05:b2:39:44:cf:b7:04:4e:
57:82:a3:b3:71:00:b9:f7:05:72:27:bc:b4:87:e0:
78:b3:6e:76:d0:75:22:15:d3:1f:1e:ee:00:ca:88:
aa:15:ca:b0:29:e7:16:13:2a:25:a7:a2:c8:a3:90:
b7:46:8c:d0:71:33:99:68:3c:70:f4:b0:2e:e4:08:
84:d1:89:36:33:56:b1:db:71:90:01:81:1d:09:ff:
5e:70:d5:a7:79:f0:f4:2f:c1:01:2c:31:3e:dc:51:
5c:fd:f7:94:c7:10:d6:0a:89:13:3d:51:ee:d1:5b:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E8:67:77:CA:EA:59:4A:07:87:98:50:ED:F6:69:D6:02:49:B5:8F
X509v3 Authority Key Identifier:
keyid:E9:93:8A:1E:90:11:F2:26:9E:67:A6:3D:A3:80:01:9D:29:6D:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:59:c9:ce:18:07:66:61:70:06:45:0a:56:0d:94:96:1f:5b:
29:18:7f:b8:62:ff:89:1d:0b:82:fa:ab:6f:15:40:dd:6a:5c:
39:98:06:41:46:b8:a4:0b:8c:89:87:a5:2e:d1:63:16:19:a7:
06:df:ee:ea:8b:8b:1f:15:93:12:ac:9a:5d:c8:d6:7e:83:d4:
ff:9b:14:29:7a:89:8b:57:74:12:45:82:3f:c5:63:d0:50:50:
ed:c1:41:da:39:78:dc:25:f7:bf:55:60:42:ea:21:09:7d:60:
ee:4f:f9:9d:02:1c:8d:7a:9f:ee:24:a6:0f:50:e2:07:e6:f2:
37:c7:5a:e0:22:2d:af:10:4a:34:b0:18:60:03:cb:cb:89:ad:
aa:26:2d:ee:eb:15:f5:2a:80:74:78:c2:fd:e4:be:b9:03:0f:
ae:97:bb:c2:e5:39:be:de:33:32:06:e8:00:24:ba:26:dc:eb:
21:c6:5e:34:74:c0:bc:52:d0:45:b5:04:0a:8e:59:17:dd:a2:
31:c9:63:46:04:e3:1b:b1:43:a3:a8:ea:a8:be:48:e0:7d:d5:
7c:b5:ec:01:47:34:96:d2:03:6e:48:6d:d7:d9:59:23:18:8f:
26:17:9c:76:45:a7:20:34:9e:b9:d0:3f:8c:40:5b:24:53:88:
21:9a:c6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:03:51 2025 by rpki-client