Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
File: 61VMRARsNkOakZc4lC8x-nVraRE.mft (raw, json)
Hash identifier: 2fPsZEPkHUN5GKK3PVxXZAfhXcqV4X94ZO9q86D3PWI=
Subject key identifier: F4:33:7F:2B:58:FD:14:6D:A1:DC:6A:E0:CA:DB:0A:06:3F:99:D9:5F
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 01965048590FA0727D4D8CB672E72E377F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
Manifest number: 1249
Signing time: Sat 19 Apr 2025 23:00:40 +0000
Manifest this update: Sat 19 Apr 2025 23:00:40 +0000
Manifest next update: Sun 20 Apr 2025 23:00:40 +0000
Files and hashes: 1: 61VMRARsNkOakZc4lC8x-nVraRE.crl (hash: NTUeiMWZhSNUGloScyt+eO/p7jalCSoujOz1bgDFADQ=)
2: E1bl48S3uJKeNjvLI-bFqfXhncs.roa (hash: ArUx/3Qpsc+v7haQQn7oiPimdfGwPvnJmdz3/p9me1Q=)
3: V3CR4lYDNh-Wfn6M2vlTj-37od8.roa (hash: n4U7/jlyixasB2+KGy4l8AmX928ML9kaTph3fSn4QJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:59:0f:a0:72:7d:4d:8c:b6:72:e7:2e:37:7f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Apr 19 23:00:40 2025 GMT
Not After : Apr 20 23:00:40 2025 GMT
Subject: CN=f4337f2b58fd146da1dc6ae0cadb0a063f99d95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ca:3a:a3:3d:5c:a9:fc:39:9d:77:df:de:d3:
69:63:4d:7e:2b:c5:bd:a8:8f:ce:eb:d6:f6:80:8a:
1d:11:3a:ae:94:9e:48:1f:34:7b:ca:2e:6c:bf:3a:
07:99:eb:09:1c:e8:cb:ea:a2:0b:4a:ca:c0:ca:85:
f7:d6:b2:d7:3d:e5:ac:ec:e7:c6:00:e9:17:ad:1b:
d5:46:59:5a:5d:20:69:95:c8:5f:de:ab:f4:a4:ac:
b7:e0:fd:fc:d1:e5:7d:5c:74:3b:f2:db:1f:42:0b:
d4:29:94:6f:7a:fa:bf:02:ca:c8:16:e7:dd:c3:ca:
bc:8e:c1:04:25:69:68:54:a8:27:e0:f9:f0:a9:c7:
97:83:16:e5:f2:00:47:a0:0d:22:0b:4c:97:d6:03:
6c:85:12:d2:73:f1:2c:a6:e0:57:3a:02:3c:1c:7d:
de:bd:22:2b:e7:31:da:a3:7a:74:f4:4e:1d:1e:fb:
9a:86:e4:11:43:64:93:d9:2a:00:d9:7c:cd:3b:f3:
da:1a:c3:53:f3:db:22:a7:57:fe:27:d4:25:99:42:
c5:4a:3c:1f:16:c4:62:d9:3e:5e:9e:3a:32:97:c8:
b9:aa:38:ad:d4:8c:54:5e:45:2d:da:ab:cc:5c:0a:
42:57:dc:18:78:52:72:80:54:aa:f1:e2:4b:2e:f4:
aa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:33:7F:2B:58:FD:14:6D:A1:DC:6A:E0:CA:DB:0A:06:3F:99:D9:5F
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c1:97:0e:53:2d:83:80:c6:01:a2:9e:94:37:78:1b:78:4e:
06:fe:3e:f6:c3:a6:ba:56:e8:8e:67:4f:05:f0:dd:7f:f7:8b:
0a:b6:da:1a:6c:7f:43:73:61:5a:8c:50:23:51:76:4c:6f:c8:
28:25:af:45:b4:90:42:74:6d:10:af:d9:80:8b:b9:96:20:28:
f0:06:ca:94:04:1c:24:ae:16:28:e3:e7:2e:0e:3b:7f:b0:6d:
87:17:37:62:69:b0:5f:bf:da:fa:68:86:55:cd:40:0c:ce:a2:
2b:97:1d:28:71:fc:93:5a:0b:b2:ee:5d:23:f1:de:9e:f4:94:
fc:54:b5:ce:4b:63:3c:b4:29:66:5f:8f:b4:ac:e2:10:2f:fb:
f1:b1:32:a0:b0:1f:51:75:61:0c:7f:da:d8:6a:d7:97:fb:ca:
c4:89:b2:fc:89:37:45:12:e0:8b:2c:63:d9:c4:31:a8:a8:af:
29:70:63:2f:5a:46:8d:60:88:e1:b9:26:c0:b2:d7:df:c4:b0:
85:17:10:be:20:50:31:bb:68:82:91:42:84:f6:6e:47:fc:3f:
d0:09:c8:b6:da:42:a6:16:94:6c:aa:3e:22:2f:fd:07:c5:02:
e2:5d:e7:a8:c3:b6:65:09:22:b4:2c:9d:f7:5d:87:98:b7:62:
b9:d4:7c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:25:11 2025 by rpki-client