Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
File: 6R-du-aLhAJ87U0x6IA_E-nWXRM.mft (raw, json)
Hash identifier: x6eEcIgD77dAawdB1UAHX1bdHBwfBteRwATdeJkuAh8=
Subject key identifier: AE:2E:8D:8E:00:CC:A1:9A:78:EB:D9:EC:7F:0A:C0:16:2E:D2:0B:71
Authority key identifier: E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13
Certificate issuer: /CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
Certificate serial: 019646D7684E0942A71E6DE66DAAF3FF52EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
Manifest number: 1206
Signing time: Fri 18 Apr 2025 03:00:44 +0000
Manifest this update: Fri 18 Apr 2025 03:00:44 +0000
Manifest next update: Sat 19 Apr 2025 03:00:44 +0000
Files and hashes: 1: 6R-du-aLhAJ87U0x6IA_E-nWXRM.crl (hash: n8zOI9CMx9JlazhtmnXr9zRNnWq2EoHkJk4q76Flv30=)
2: JQUZ8AmIUaKrA3xLbBffsdyduoM.roa (hash: JNfVnNEK9ITAEhIOPMGzXPcwJP4nPhm5O7ysI5end8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:d7:68:4e:09:42:a7:1e:6d:e6:6d:aa:f3:ff:52:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
Validity
Not Before: Apr 18 03:00:44 2025 GMT
Not After : Apr 19 03:00:44 2025 GMT
Subject: CN=ae2e8d8e00cca19a78ebd9ec7f0ac0162ed20b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:ce:dd:46:b4:90:b0:30:bd:c3:e1:5f:09:
59:0b:86:40:eb:78:6d:87:bc:bd:66:dc:e0:6f:6a:
2a:6b:17:a8:bb:b9:82:00:8d:6d:1b:99:b1:52:10:
4d:05:6f:7b:4f:00:f9:a5:44:10:f5:90:fd:c2:43:
ae:f5:76:bb:30:c7:e6:d8:4c:aa:41:a6:58:4a:da:
54:ca:ee:a3:c3:44:50:19:31:be:07:93:a8:4a:f2:
4b:13:37:9c:ff:24:ae:61:d6:45:67:d3:0a:f5:81:
d8:5d:7a:ab:7c:e3:c5:74:1f:cd:01:80:b0:4d:07:
95:a9:38:54:4e:59:bb:7c:bf:60:87:16:a6:4f:c8:
c8:54:ed:ff:17:4a:06:16:1f:c7:8b:af:06:f1:8d:
e6:e7:8c:96:08:fe:5d:7a:87:c0:ba:48:69:06:b6:
b3:27:3c:d0:b5:fa:a3:5e:94:0f:18:a2:87:b5:7f:
66:f1:ca:31:c8:95:9e:57:7f:70:c6:44:b9:80:5c:
13:45:e2:24:a0:4d:18:69:0e:cb:1a:af:6b:63:90:
2f:e8:8d:ff:48:fd:be:64:74:ba:5c:e1:37:7f:85:
00:09:e0:c3:1d:02:cc:35:d5:d5:5c:44:a1:63:1c:
f1:9f:a3:a2:d4:0a:bf:00:d3:22:73:cb:56:ab:d9:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2E:8D:8E:00:CC:A1:9A:78:EB:D9:EC:7F:0A:C0:16:2E:D2:0B:71
X509v3 Authority Key Identifier:
keyid:E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:34:1a:68:99:9a:15:4a:f4:67:17:d1:49:20:c7:db:a6:64:
24:5a:ae:b1:12:51:89:e1:05:04:eb:2f:6b:dc:e7:6f:f4:38:
ff:fb:c0:c8:be:3d:82:24:9c:71:c9:3b:42:7e:64:de:3e:f4:
66:c1:5e:ba:27:e2:54:84:25:95:53:30:0e:27:1e:4c:bf:c2:
49:d3:72:bd:9e:5f:36:8e:74:b6:b9:dd:ec:b2:26:2e:9e:85:
5b:05:d9:9d:01:5e:4e:e1:fa:84:2a:69:6b:99:93:f9:fa:f3:
31:b1:c0:34:ed:d2:18:d2:37:58:38:ba:dd:b5:16:aa:26:ae:
05:29:3b:ee:8a:50:e4:59:64:9f:1d:27:16:fd:66:d2:1f:55:
a1:2c:2b:e2:49:58:47:88:e8:a5:b0:69:40:f3:30:73:19:7b:
54:af:23:5a:45:86:67:ad:bc:53:88:26:01:ac:79:09:9c:fc:
be:15:03:22:94:94:e6:6a:95:74:51:37:83:0f:0d:25:45:23:
a0:c3:18:a9:00:84:ad:b0:53:ae:66:4c:e0:08:6b:b2:05:90:
91:fb:ad:a7:b7:ca:af:ea:f8:9a:55:48:ad:c9:a3:9b:0d:c2:
db:2e:dc:6e:ec:61:b2:ac:af:95:91:0e:5a:af:54:fb:ec:de:
e3:07:59:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:42:04 2025 by rpki-client