Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
File: 6N8-nLacyliscCotXpE1w7yrcgA.mft (raw, json)
Hash identifier: /bnNVu8d39zgmJxgs/yuKLS3883pK+vbI6MAxELEOS8=
Subject key identifier: 45:15:42:67:A8:2E:A8:13:72:98:84:54:EA:B6:01:8A:20:05:84:51
Authority key identifier: E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
Certificate issuer: /CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Certificate serial: 019665BD500D029A2A1F7D1DEEA775D958FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
Manifest number: 150E
Signing time: Thu 24 Apr 2025 03:00:27 +0000
Manifest this update: Thu 24 Apr 2025 03:00:27 +0000
Manifest next update: Fri 25 Apr 2025 03:00:27 +0000
Files and hashes: 1: 6N8-nLacyliscCotXpE1w7yrcgA.crl (hash: 89vLtrtnW4XNwZYLBHRfNaR2ncWx4imXHwxUVArkr8c=)
2: 9EUnRRjK1DPEOpCFHKLbj6DnnwE.roa (hash: 5pOnqwDunio8ibNAPUzfXIZHCC6lmUXt91wi8md1CvM=)
3: gU67SonlohhDi8lWe_MYl6yJJsI.roa (hash: FLpgUzbj974ZgJCetR7gymMI2OHT8rOTBcexSYhxtZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Apr 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:65:bd:50:0d:02:9a:2a:1f:7d:1d:ee:a7:75:d9:58:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8df3e9cb69cca58ac702a2d5e9135c3bcab7200
Validity
Not Before: Apr 24 03:00:27 2025 GMT
Not After : Apr 25 03:00:27 2025 GMT
Subject: CN=45154267a82ea81372988454eab6018a20058451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:a2:b5:52:b8:97:df:c7:8c:08:a1:41:08:
71:73:36:79:05:fb:95:3c:04:e9:06:9e:18:7f:b9:
05:97:33:9c:7b:e2:a4:71:88:cd:28:33:b9:f2:6a:
47:79:dd:08:0e:32:ec:c1:8e:df:8d:a7:44:e6:91:
8f:58:91:09:0a:1a:b1:24:54:42:f9:17:3d:75:4a:
d7:7b:aa:bb:af:7f:c4:44:3c:4d:3e:91:aa:dc:91:
a3:44:eb:45:7f:64:d2:8c:92:dd:75:4b:bf:7d:ae:
89:a8:1a:b1:06:69:58:97:4c:cf:e2:7b:cc:ca:62:
d2:4e:b5:8c:92:03:5f:9e:87:60:4f:31:ad:d3:53:
f0:e8:03:0d:03:65:3d:00:36:3f:5c:fd:5b:82:e7:
e5:13:bb:5c:7c:6a:22:dd:91:f2:97:bd:f6:b4:a4:
da:12:5d:7c:3d:aa:e0:bb:46:b6:a4:a0:56:f9:38:
9e:0d:b1:dc:15:16:d2:f1:b6:1e:e2:e4:5d:09:1d:
dc:e5:5a:70:e6:23:1b:a0:8c:03:b7:69:8d:2e:fe:
12:8a:14:85:00:a3:09:f2:16:04:5b:17:5e:6b:86:
3e:71:00:2f:6b:9f:30:c7:7f:4c:e2:ec:54:72:1a:
0a:4b:ba:a5:04:0d:13:bb:70:d7:89:96:be:3c:f9:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:15:42:67:A8:2E:A8:13:72:98:84:54:EA:B6:01:8A:20:05:84:51
X509v3 Authority Key Identifier:
keyid:E8:DF:3E:9C:B6:9C:CA:58:AC:70:2A:2D:5E:91:35:C3:BC:AB:72:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6N8-nLacyliscCotXpE1w7yrcgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e5dfe2-a967-4712-bee6-32187e24889f/1/6N8-nLacyliscCotXpE1w7yrcgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4c:06:ae:5e:e9:3c:4a:3f:2a:58:cf:9b:31:bb:d1:2d:65:
89:88:e4:00:16:89:41:09:92:8e:f2:6e:52:ce:95:15:0a:ce:
a3:e7:2e:e6:c7:05:9a:66:4d:1c:39:c7:62:45:f0:29:b7:78:
dc:2a:24:a3:1e:10:43:d3:2f:03:24:17:cb:d0:17:47:c4:9d:
7d:66:25:3b:aa:21:61:99:a3:32:5b:29:54:44:50:08:19:96:
d9:c8:3b:dc:ac:d5:38:72:83:99:3f:aa:c2:fd:cb:c3:8d:4b:
00:c7:ac:c8:8e:d4:2f:1f:78:01:18:cc:08:87:5e:c0:66:e7:
29:0f:e7:f7:fd:6d:f4:6d:d6:e2:36:fa:16:d5:bc:36:b3:90:
a0:d9:cb:9e:f4:4c:c0:3c:0e:7b:94:f0:54:d1:17:8b:d0:b4:
6b:c3:40:b0:2a:6c:c7:b9:41:23:95:02:c4:40:65:3e:1a:35:
1a:7f:7d:fe:3e:8a:7f:d6:e6:c8:16:82:b6:ca:a2:d5:03:ef:
68:4a:58:46:b8:ed:d1:57:80:58:16:f6:9b:55:2b:61:5a:93:
a6:1f:46:4d:8d:d3:08:91:a4:58:72:17:c6:1c:ad:89:77:20:
f4:6d:3a:2d:5f:55:1c:11:5f:8c:78:f8:1e:f8:2e:26:a8:fd:
7c:59:09:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 12:57:44 2025 by rpki-client