Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
File: 6tIKIulI-5ZEEprTAZ8I1PSYH88.mft (raw, json)
Hash identifier: tveurWmCguwNfdo5XNEtinCFPLhawyLkpfG4qOO/+SE=
Subject key identifier: AC:A6:AC:94:38:D0:DB:6B:14:93:9F:58:CF:A1:D4:30:54:73:EA:66
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Certificate issuer: /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial: 01965B714510A9650B829B74EED0B403C16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
Manifest number: 04CE
Signing time: Tue 22 Apr 2025 03:01:11 +0000
Manifest this update: Tue 22 Apr 2025 03:01:11 +0000
Manifest next update: Wed 23 Apr 2025 03:01:11 +0000
Files and hashes: 1: 603LAvQ5JXA5_S8BjHWOsHJK9Wo.roa (hash: 8uIPD2qt5HOkYhC38b1edHK/qDoR0Hb99DfiBmCJ4B8=)
2: 6tIKIulI-5ZEEprTAZ8I1PSYH88.crl (hash: yptvYc0W2gf0MlKXFKOISf06PyqwBKJMoh5cqw41wPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:45:10:a9:65:0b:82:9b:74:ee:d0:b4:03:c1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Validity
Not Before: Apr 22 03:01:11 2025 GMT
Not After : Apr 23 03:01:11 2025 GMT
Subject: CN=aca6ac9438d0db6b14939f58cfa1d4305473ea66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:a9:5a:ed:fe:b5:b0:3c:66:4b:67:59:63:
69:b8:63:11:3d:59:fc:a1:a5:dd:e6:e6:7a:eb:f1:
a5:c4:db:e5:8d:5c:4d:e3:cf:60:b7:d6:dc:9c:82:
70:a9:f2:f4:fc:54:14:9e:4b:41:7e:82:3c:fa:7f:
4a:9a:4f:a4:9b:bb:08:ae:1c:6e:6b:1e:09:35:1c:
dc:bd:ed:ca:28:da:12:20:cd:cb:29:78:de:53:bd:
8b:bc:84:7f:4c:e4:8d:38:31:5e:70:e0:93:9a:d2:
6f:68:33:99:84:29:dc:b1:c8:78:fe:b7:e8:55:26:
9c:67:8c:9d:72:58:78:c1:b9:0b:a2:9d:4a:ec:70:
46:fe:8e:12:30:92:29:3d:27:43:83:e7:d7:5f:94:
89:25:49:3b:09:f8:1d:e1:7c:f3:02:b8:4d:29:01:
18:68:8a:10:33:6a:43:aa:32:38:8f:45:fa:6e:a3:
2c:2f:5c:25:30:f1:69:cc:78:e8:8d:7d:9b:7b:e9:
f8:5c:66:73:8c:53:79:86:0e:c1:3a:5a:f8:ec:2b:
ea:b4:61:94:a1:db:81:87:84:f5:22:63:51:9d:c8:
85:b1:8d:8a:1f:b8:d9:19:49:cf:ee:1c:99:4b:b2:
5d:18:5f:90:f4:3f:c5:72:e1:0c:df:a1:77:cc:c8:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:AC:94:38:D0:DB:6B:14:93:9F:58:CF:A1:D4:30:54:73:EA:66
X509v3 Authority Key Identifier:
keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c4:2a:7e:4e:33:29:f1:03:6c:56:ce:6b:90:84:4d:1d:79:
38:1b:c2:75:cb:73:dd:0a:9a:01:9a:7d:af:1f:1b:a8:1d:f3:
39:81:50:5f:83:1d:92:ec:92:91:cc:61:37:b3:c0:53:bf:8a:
87:b3:5b:e1:7b:06:18:ec:57:31:dc:14:cd:67:49:3e:d9:60:
94:5c:ae:29:90:a1:76:b9:fe:bf:c7:fc:ea:b3:4a:40:81:1f:
7a:9a:3e:50:e5:f4:86:2b:3d:b7:e9:77:b6:b3:17:7f:6a:50:
9b:ca:88:d6:04:ef:77:b2:63:ad:a8:cb:13:95:bc:6e:7b:3e:
b3:a6:68:a4:e0:ca:cc:a5:24:d5:98:18:8c:5b:9b:ac:0b:aa:
a2:d8:7c:db:a2:7d:22:f4:b5:fc:17:8a:ba:ed:76:a6:d2:be:
97:ea:ca:a3:c3:f6:e1:9f:b4:2e:0a:e1:55:49:0b:b3:d8:81:
47:69:e7:e6:c7:75:c0:58:5c:6a:d7:27:25:df:2b:3f:ff:5b:
ba:9b:9a:4b:87:24:9a:bc:da:1b:da:77:91:ba:4a:08:a0:05:
17:ef:af:05:1c:19:de:82:00:5b:59:45:fe:11:07:0f:16:60:
64:91:4d:b9:ae:cc:d4:94:c4:3a:63:3a:3d:e0:3f:23:1c:b6:
99:e7:65:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:49:38 2025 by rpki-client