Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.mft
File: 6InLv2njpnyqg7VN6-wnIuVTaIM.mft (raw, json)
Hash identifier: eqGEIuG9CHBrHDVo60rvbJNKwvWeocrG7UkDXAIEbts=
Subject key identifier: 4C:23:B8:6C:93:5D:2C:8B:2C:1B:38:91:FF:AA:18:76:82:23:44:86
Authority key identifier: E8:89:CB:BF:69:E3:A6:7C:AA:83:B5:4D:EB:EC:27:22:E5:53:68:83
Certificate issuer: /CN=e889cbbf69e3a67caa83b54debec2722e5536883
Certificate serial: 019644B2424B416608707DAE35F3EC2AE8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.mft
Manifest number: 01CD
Signing time: Thu 17 Apr 2025 17:00:55 +0000
Manifest this update: Thu 17 Apr 2025 17:00:55 +0000
Manifest next update: Fri 18 Apr 2025 17:00:55 +0000
Files and hashes: 1: 6InLv2njpnyqg7VN6-wnIuVTaIM.crl (hash: GMCwFMfT8flOkzhULz8QIrfAwNCHJboDNf2iyM0/2XI=)
2: ICbfx-tBOujpicEMpQ0zGeGllek.roa (hash: 8RnLLSPHJvBsy6joiz8Uy5SsL7YtPg9O1ueAzs+NFmM=)
3: z9TK7gFvliHLFVLeOL9NIuYVno0.roa (hash: F07UsHdLE5VLNA0Dfx2KB3Rv9KdwwXE6IkvxVa4XsOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:42:4b:41:66:08:70:7d:ae:35:f3:ec:2a:e8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e889cbbf69e3a67caa83b54debec2722e5536883
Validity
Not Before: Apr 17 17:00:55 2025 GMT
Not After : Apr 18 17:00:55 2025 GMT
Subject: CN=4c23b86c935d2c8b2c1b3891ffaa187682234486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:d4:e8:19:9d:a3:ce:7a:1f:b1:b5:d1:0d:
81:5e:17:8f:0c:43:59:d5:a1:1b:9c:d6:3c:c6:29:
fe:d2:08:e1:2f:21:eb:9d:b8:61:49:74:8f:7c:ea:
bf:f3:45:ba:7e:14:6e:ec:38:36:c3:dc:28:4a:1f:
bb:36:01:a1:29:25:77:90:6f:90:be:f0:c2:f1:94:
bb:30:38:c2:cb:96:58:d0:8f:c9:0d:8e:81:9c:ff:
7f:8a:98:fb:47:c8:27:ac:cd:b3:e3:46:6e:60:85:
57:89:bd:c5:6a:1f:95:38:a5:38:46:44:af:8d:29:
89:36:09:d4:d6:4f:38:7d:5b:17:d1:68:45:55:cb:
4f:7c:59:89:6e:21:e6:c4:75:f9:6a:6d:21:56:bc:
b0:f2:77:e4:72:bc:c6:02:aa:ba:49:20:25:ff:ad:
37:ee:8e:0c:f4:0d:e9:45:1d:39:15:12:46:11:c5:
0d:3c:d5:27:05:51:89:63:fa:cf:a0:4a:bc:12:62:
20:51:4a:8a:b8:27:98:ad:a8:56:b7:55:4e:91:19:
1d:7d:26:10:95:a5:9f:b9:41:13:f8:75:1d:70:b2:
3b:c1:eb:42:8b:60:5b:30:b9:40:5c:8e:18:0a:c4:
ba:54:23:d4:28:ad:04:5b:c4:74:c9:64:fc:1b:f6:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:23:B8:6C:93:5D:2C:8B:2C:1B:38:91:FF:AA:18:76:82:23:44:86
X509v3 Authority Key Identifier:
keyid:E8:89:CB:BF:69:E3:A6:7C:AA:83:B5:4D:EB:EC:27:22:E5:53:68:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:14:64:e1:19:cf:4e:84:be:0a:66:83:c6:85:6c:3c:f0:82:
93:81:42:4c:07:54:e3:b6:f6:5f:71:d3:62:cd:dc:8a:bf:f5:
f7:71:a5:35:5a:9a:e2:2b:52:d0:1f:88:21:cd:a0:d1:18:2b:
22:c8:96:55:1c:3a:d0:29:9a:44:e8:ad:e6:c4:bd:0a:1a:f1:
71:22:6f:5d:c3:48:99:5a:12:56:15:a3:f6:89:6b:bd:99:87:
41:16:88:eb:8e:88:12:74:67:ac:e3:39:2d:f9:c0:2e:13:56:
bc:4f:fe:99:f1:dc:34:b6:92:a7:8f:5b:9d:1e:30:f9:9b:c7:
56:e0:c1:80:ab:ea:28:35:7a:58:15:f5:d4:bb:bf:82:0b:98:
0f:c3:d7:9d:62:d6:42:88:ff:c2:a3:de:38:ba:aa:90:4d:79:
62:1f:49:fa:cf:c7:94:67:1f:bc:20:6f:8d:15:2f:d0:e6:1b:
3c:41:d1:6d:b9:d9:9e:f2:87:0e:6b:72:f7:9b:db:33:ad:79:
24:85:bc:8e:63:b4:ef:ac:a9:7d:d8:e3:60:d3:19:8d:72:a5:
9d:86:8d:b3:eb:de:f9:7e:88:22:f9:39:a4:43:a7:96:db:a0:
d3:00:bc:6d:97:d8:73:15:c6:d9:01:01:34:a8:50:03:3e:95:
a9:75:7a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:40:52 2025 by rpki-client