Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
File: 6vlt8xs_QE31t345nOeTcbT0REM.mft (raw, json)
Hash identifier: 1JiZqTPi0KpjrpKmOmqLiI+rYqUTZeqRQWby9xzotCo=
Subject key identifier: C7:E5:04:24:15:11:3E:C3:E5:72:1B:A7:8D:6E:7C:AF:0C:CD:5B:6E
Authority key identifier: EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
Certificate issuer: /CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Certificate serial: 01958B844D47EEEED86DA5F7874CC8849B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
Manifest number: 0239
Signing time: Wed 12 Mar 2025 18:00:58 +0000
Manifest this update: Wed 12 Mar 2025 18:00:58 +0000
Manifest next update: Thu 13 Mar 2025 18:00:58 +0000
Files and hashes: 1: 6vlt8xs_QE31t345nOeTcbT0REM.crl (hash: ZQ7fFQd/rVkx3xRx3CmaFaqGYAD44mWR7o2GSJGZM3U=)
2: zku7rL4ehWHvRZK1RwrAb6MT-1c.roa (hash: nNwzvzSXO21Gwoc000T5O5APuYh4t3vWkKVJ9XFGR80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:4d:47:ee:ee:d8:6d:a5:f7:87:4c:c8:84:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaf96df31b3f404df5b77e399ce79371b4f44443
Validity
Not Before: Mar 12 18:00:58 2025 GMT
Not After : Mar 13 18:00:58 2025 GMT
Subject: CN=c7e5042415113ec3e5721ba78d6e7caf0ccd5b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:17:44:99:8d:99:42:9e:38:85:3f:fa:8b:
22:91:fc:17:72:27:ff:a5:e1:3f:4c:89:f9:c8:61:
90:85:f5:4e:35:69:b1:2d:b7:3f:7c:fa:ee:3a:c6:
b3:05:f4:c9:e3:1e:64:f5:ae:34:92:b9:90:8e:36:
1a:35:09:55:a6:d5:17:99:5c:0e:85:ee:23:5c:72:
56:58:57:c3:a9:71:73:8a:0e:30:56:a3:f7:75:9d:
29:d4:4c:79:2c:df:71:c3:2a:74:f2:99:f9:d3:23:
3b:b0:4a:e0:7a:ec:54:b7:b7:0b:69:15:ca:24:a0:
ee:f3:43:16:7b:a6:56:45:27:4f:45:e4:35:07:66:
2b:b9:25:21:2e:2f:fa:dd:7b:bd:3b:01:8f:7e:0f:
3d:3a:fa:88:27:0a:7b:c5:94:3c:19:43:f7:d2:1b:
16:7e:f1:c5:64:10:e7:a9:b9:66:8d:58:d0:a4:3e:
4b:d3:cc:f6:02:ff:0a:03:d2:e6:9c:dc:03:85:fe:
1e:46:36:d8:8f:42:cb:e0:b8:69:ee:bd:e6:25:6e:
55:0e:d8:c5:8f:b1:b6:72:5f:d5:c3:69:2b:36:f7:
ba:14:cc:d1:1a:c3:60:cb:e7:65:f0:c5:3c:ec:f6:
1b:96:0a:7d:74:29:63:a7:7c:25:4a:a1:41:5a:46:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:04:24:15:11:3E:C3:E5:72:1B:A7:8D:6E:7C:AF:0C:CD:5B:6E
X509v3 Authority Key Identifier:
keyid:EA:F9:6D:F3:1B:3F:40:4D:F5:B7:7E:39:9C:E7:93:71:B4:F4:44:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6vlt8xs_QE31t345nOeTcbT0REM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/0e039a-be96-41fc-abcd-964b61bc319b/1/6vlt8xs_QE31t345nOeTcbT0REM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f9:05:57:62:29:30:cd:b4:b6:39:ca:ee:4f:de:76:8b:69:
86:0b:64:eb:b3:28:87:91:bd:63:50:c1:ed:e5:9e:90:ea:b6:
d4:25:d3:14:5e:d8:c6:20:46:3f:a6:79:36:61:33:71:c8:82:
51:3c:8e:c3:97:01:74:90:bb:13:bf:3c:a7:15:a2:f1:7f:72:
f3:45:b1:09:62:0c:70:6e:17:57:f9:69:2b:bd:28:75:b2:70:
6a:3f:22:55:ab:26:f5:8b:ba:71:a9:3b:1e:47:e0:d5:8c:fa:
f7:31:5d:37:fe:4c:22:9e:ba:c8:ca:0c:ec:89:8a:61:7a:86:
f2:d1:3f:96:b8:d0:41:6d:3a:2a:b0:8a:d3:a3:64:66:13:f5:
f2:3e:50:74:dc:b4:a7:0a:65:09:f3:59:2f:8a:71:6d:44:a5:
30:08:54:08:13:89:4c:01:25:ef:ed:a3:ed:0c:2d:f8:23:36:
c2:f3:2b:7e:2f:59:97:f7:f9:1c:07:f8:59:de:ae:ba:9b:3a:
2f:e8:77:25:20:ce:72:34:20:0d:81:54:f3:b0:02:0b:d3:3f:
b0:a0:17:36:b4:3d:35:2e:29:f5:77:c1:37:5e:7f:1f:a8:f2:
3b:1b:f9:34:a2:ae:78:71:67:b6:29:5f:61:94:bc:84:c7:cd:
87:1c:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:51 2025 by rpki-client