Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
File: a-OcMb6T9W5jvSbVscBy3HdTGeY.mft (raw, json)
Hash identifier: mdaesSw/X9PDiwuTyJ3VqUzDEluTWNnEd/qS82Nb1Os=
Subject key identifier: 26:FE:DF:F5:53:49:E2:C7:5B:FD:4F:F1:77:F0:CC:40:91:5E:4A:FF
Authority key identifier: 6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
Certificate issuer: /CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Certificate serial: 0196451F8E72491C88E6A969BFF36A977289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
Manifest number: 02C6
Signing time: Thu 17 Apr 2025 19:00:17 +0000
Manifest this update: Thu 17 Apr 2025 19:00:17 +0000
Manifest next update: Fri 18 Apr 2025 19:00:17 +0000
Files and hashes: 1: a-OcMb6T9W5jvSbVscBy3HdTGeY.crl (hash: 1WAdslcSCA7NCdclQJD9QQ0XZP1+vIp7pYGLUE+g1kA=)
2: avdVBk-rHRbW-M4AabpJX7CSjxg.roa (hash: XlwxkSLG5mJnTFp/kB80ylCJ16RiA9KQHhkduE06FV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:8e:72:49:1c:88:e6:a9:69:bf:f3:6a:97:72:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Validity
Not Before: Apr 17 19:00:17 2025 GMT
Not After : Apr 18 19:00:17 2025 GMT
Subject: CN=26fedff55349e2c75bfd4ff177f0cc40915e4aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:83:4b:70:c7:60:74:9f:13:83:d7:40:40:
97:b5:ee:85:23:22:c2:f4:84:39:e2:a4:05:77:80:
3b:89:c5:bf:a1:2a:87:e9:6a:20:78:f3:21:3a:70:
fd:73:70:91:42:8d:8f:80:a8:79:7a:06:7f:d6:f9:
e0:ab:f5:93:5e:4b:60:9f:ae:ad:e6:db:85:ac:18:
42:ab:55:a9:53:8e:a8:50:68:b1:43:45:4b:70:e5:
de:6e:30:ff:37:f0:d9:64:b6:d5:b2:0d:9a:00:c1:
46:b3:38:87:a8:c5:b3:4a:22:75:47:19:95:e2:36:
a2:d8:4d:4f:70:02:d2:b8:d2:8c:ab:79:d9:59:58:
27:f2:fd:3e:b6:6f:38:1c:12:73:01:2e:0f:75:37:
2f:2e:a6:b1:a9:77:b6:6f:1c:2d:12:cb:b1:f2:99:
8b:6d:87:b4:88:fc:43:0a:a5:4a:8c:b9:52:ad:9c:
c0:af:68:6b:98:4d:88:43:d6:b9:d0:c0:41:7d:9b:
27:30:f3:ef:99:04:94:54:ef:71:cf:65:6a:fc:3b:
6c:25:d2:a5:78:18:0c:c2:5c:b5:6f:1d:25:98:f2:
25:cd:2f:4f:ba:6a:91:51:4e:a0:f7:85:44:6d:9f:
a7:23:2b:16:0c:9a:e8:2f:75:81:b8:ea:fb:5e:30:
a7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FE:DF:F5:53:49:E2:C7:5B:FD:4F:F1:77:F0:CC:40:91:5E:4A:FF
X509v3 Authority Key Identifier:
keyid:6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4e:ab:d9:69:28:fa:f4:6b:14:d1:32:95:e3:64:91:fe:0c:
40:64:51:26:9e:23:32:b7:77:49:3f:3d:be:b2:4a:98:c7:78:
4c:75:5c:62:9e:fe:48:a6:fe:d9:b8:d6:8c:43:94:8b:26:91:
cd:c7:ba:7a:a4:00:73:28:be:88:44:e6:36:25:59:14:e9:6a:
5f:fe:40:35:e2:2a:ea:35:db:36:64:98:d9:49:2f:30:23:7a:
d2:e2:b1:c8:95:a8:d5:b1:a4:63:01:9c:eb:46:2b:12:ef:6d:
1b:49:e6:c9:40:b9:67:0d:1f:ef:b0:01:22:7c:6b:0a:6e:5a:
f6:45:42:ac:dc:d6:c0:7a:1f:28:af:00:7c:83:eb:6e:34:93:
2e:de:6b:ce:6e:4c:90:04:d1:ec:14:e1:0d:f3:b8:3f:5e:83:
9f:df:09:31:8d:e4:65:a6:44:23:0e:33:70:1d:d3:12:14:2c:
14:db:0e:54:9c:ec:01:f2:8a:59:37:5d:48:da:5d:96:93:3e:
dc:70:cf:71:0e:58:c7:9d:a3:26:91:23:31:75:db:0c:08:9e:
cc:34:7b:15:e0:52:a0:ad:18:ea:c7:e4:72:89:05:f0:5a:6b:
d5:48:34:4d:0a:44:1d:90:3b:39:56:2c:05:14:a2:fd:b6:6c:
2d:6a:5f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:35 2025 by rpki-client