Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
File: 612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json)
Hash identifier: ZpOyBIWm/dUVEWRh2QCf0XYT+XLnvGqQq5QfBLYubd4=
Subject key identifier: CC:1E:3F:FD:3F:E7:53:18:9D:C1:A0:46:1C:44:52:94:C5:ED:A9:05
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Certificate issuer: /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial: 01964CA2A932B9D08DC5BFD0495F52D14FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
Manifest number: 12AC
Signing time: Sat 19 Apr 2025 06:00:50 +0000
Manifest this update: Sat 19 Apr 2025 06:00:50 +0000
Manifest next update: Sun 20 Apr 2025 06:00:50 +0000
Files and hashes: 1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: 12dKQ1bvA9gREcWGA/B9zqAIUqFwPmoePLMReRMKHXY=)
2: T71-lLx_IRd0xdRoRiuKn01ramI.roa (hash: NdMh7OdN9MHFrjt5MDBsZ76I4BvEZisy0vA5gq92uHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:a9:32:b9:d0:8d:c5:bf:d0:49:5f:52:d1:4f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Validity
Not Before: Apr 19 06:00:50 2025 GMT
Not After : Apr 20 06:00:50 2025 GMT
Subject: CN=cc1e3ffd3fe753189dc1a0461c445294c5eda905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:0c:5c:99:15:78:25:cb:28:20:b8:3a:f6:
4c:29:f8:fc:2f:dd:5d:34:0a:81:39:04:99:00:ec:
fe:67:dc:5a:ee:d8:f2:fb:af:a4:f1:1b:9d:6e:6e:
90:b5:7f:a2:b4:87:c1:47:af:bd:df:fa:bc:60:8f:
c8:b3:ea:1b:48:95:8a:4c:d5:3d:b8:c2:79:ab:e8:
18:d1:85:2a:60:c1:98:20:ae:cd:1d:d6:26:8d:d0:
65:83:41:2a:3b:cf:1d:7c:fe:95:34:c2:af:63:ac:
00:a2:f5:c3:83:2b:16:20:40:7f:64:9b:08:a4:f3:
ba:ce:ad:4e:ea:ba:fd:5e:3f:64:36:d7:68:10:ae:
e0:41:d0:3d:cc:75:7c:12:7a:d4:b9:a0:15:64:a1:
e9:f9:bb:c9:26:be:42:be:32:0b:34:1e:77:64:87:
2a:50:b2:ce:e1:3d:f2:58:07:6c:8c:60:3c:55:c7:
52:87:41:97:09:d8:23:d3:48:a1:34:e1:d4:71:ad:
16:54:14:a7:f3:cd:14:9c:f8:44:d8:58:69:2f:9a:
97:53:8e:ec:f3:99:63:7a:63:f5:39:bd:7e:b2:2f:
ba:e7:fc:e5:38:cb:3d:24:ae:b5:49:f1:75:c3:11:
77:24:68:a8:69:d0:96:4a:73:62:d0:93:ec:6d:71:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1E:3F:FD:3F:E7:53:18:9D:C1:A0:46:1C:44:52:94:C5:ED:A9:05
X509v3 Authority Key Identifier:
keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b7:44:0b:ba:6a:d0:b1:20:4a:df:bf:9a:37:76:28:08:d5:
7c:92:9e:f9:f2:71:43:fe:6b:bd:60:44:4b:f3:92:1a:51:13:
2f:31:cc:fe:46:bb:58:ef:5e:9d:cc:c1:44:49:14:b7:58:74:
c2:01:1f:5d:df:eb:37:9b:08:64:65:36:7d:a6:e6:47:f3:2f:
a8:8c:f5:a1:fc:04:27:d7:32:57:a7:fe:57:88:58:6b:f7:0e:
f2:24:9b:45:21:c2:75:93:8b:7a:24:c6:eb:40:41:be:4d:a5:
b0:20:b1:44:c8:8c:19:78:59:0d:6f:22:b4:a4:aa:d5:f7:3d:
00:39:d2:09:6a:bd:19:ec:52:16:c6:1a:65:ee:1a:d8:a1:a4:
ea:b1:61:55:9d:f7:cf:3a:40:34:82:0f:2f:fc:61:3d:57:68:
a5:c2:fe:c8:0f:88:0b:17:5e:b3:f0:29:6a:36:86:b9:d6:5d:
b7:2f:e7:61:a9:ab:e5:ed:a5:08:b0:a7:2f:5f:00:59:e9:7d:
66:5f:0a:6a:de:c0:6b:f6:99:94:b7:1e:9d:c4:4f:22:8d:4f:
80:66:99:81:fe:2c:94:2b:47:dc:a3:97:47:77:17:a7:99:13:
3c:b9:06:aa:d3:d9:66:b2:57:d1:98:a3:13:ed:ad:e0:ab:87:
e5:8c:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:41 2025 by rpki-client