Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: 45gDfS+8wbFXiU75dtDSZTqZnILwibMTlYsBzl/Nf4o=
Subject key identifier: 54:93:F4:6E:24:07:4E:FF:02:28:F4:61:94:6D:3C:37:00:79:24:42
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 019658DD29F6451C2649C3777A12BC73FE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 1320
Signing time: Mon 21 Apr 2025 15:00:11 +0000
Manifest this update: Mon 21 Apr 2025 15:00:11 +0000
Manifest next update: Tue 22 Apr 2025 15:00:11 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: pieyTNJ9ZAvevCESu/B4j2tu/+cvmdyBZc6yWY1nebE=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:29:f6:45:1c:26:49:c3:77:7a:12:bc:73:fe:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Apr 21 15:00:11 2025 GMT
Not After : Apr 22 15:00:11 2025 GMT
Subject: CN=5493f46e24074eff0228f461946d3c3700792442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:8d:22:16:49:d8:d3:fe:bb:51:9a:81:cc:
06:33:c1:c0:61:15:29:f3:4e:3d:a2:cc:70:62:43:
c1:e5:52:c9:ab:ca:58:44:f4:ef:2d:7b:3e:b9:f5:
8c:3c:6a:9c:c4:53:96:5f:b8:30:48:ca:3a:3e:81:
de:3f:38:47:32:b1:de:72:cd:96:90:af:82:aa:80:
ee:16:c8:4e:b8:f7:eb:ab:e1:bb:62:92:9f:b8:82:
1a:41:bd:35:f4:38:48:b5:1f:65:45:9e:b6:9b:bb:
b7:b2:01:a2:83:90:f8:ca:84:65:1b:f9:cc:52:fd:
7e:cc:e1:1a:1f:c8:89:35:d3:cc:d5:a0:22:31:c6:
d4:00:3a:71:76:1e:19:d0:b7:00:95:32:ce:6f:2a:
3b:90:d1:a4:d6:01:5f:c2:36:4e:3c:9a:c5:21:96:
ad:32:4e:aa:e2:12:9e:6a:ca:78:8a:7a:17:55:38:
1c:e1:d1:5c:a7:7b:9f:71:2c:9f:c4:19:88:e5:9b:
f1:a0:49:84:8f:01:f9:1a:e9:bf:02:e1:f7:81:c7:
53:18:34:67:d9:96:7e:a0:1a:11:1b:63:0f:71:12:
96:02:4d:45:26:09:f8:f6:37:70:9f:24:dd:13:e6:
31:47:4c:02:9c:40:28:9c:89:66:28:c4:c1:8f:d2:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:93:F4:6E:24:07:4E:FF:02:28:F4:61:94:6D:3C:37:00:79:24:42
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:96:ab:0c:a2:75:c2:6f:d7:18:1b:07:92:85:0c:78:9f:92:
88:08:48:fa:68:8d:ce:de:9c:be:35:81:01:5b:3b:f9:07:97:
54:ef:64:63:4a:87:b6:e0:ea:62:b3:26:e8:94:93:f8:ab:25:
28:3e:87:ed:d7:bb:80:48:3b:26:a2:a0:53:4d:0f:e9:d6:5b:
33:a8:0f:05:1a:8e:ae:56:24:f7:b3:f5:be:c0:35:92:28:d9:
64:50:0a:48:d1:4d:90:f4:eb:38:01:cc:45:42:6a:d0:1b:43:
2a:0f:6e:0e:b9:4d:bf:83:ba:ab:cb:23:a6:5c:aa:9a:43:0e:
2e:43:4b:75:87:e0:92:66:df:58:0b:cd:f2:56:6c:06:d8:3c:
d7:8a:d4:1b:8a:a3:91:fa:dd:27:ee:ba:50:0c:36:09:b9:95:
87:c1:28:4a:c5:e0:79:9e:8e:69:bf:a1:ef:c5:b2:82:98:3c:
28:8c:32:53:b7:88:b1:74:bc:03:4a:74:53:f0:9d:11:cf:e5:
c0:6a:dd:a7:1a:8f:78:65:da:cd:8b:6b:08:f9:83:d3:e6:95:
14:50:b8:88:95:97:e5:e4:9d:ca:ea:a1:44:f6:05:03:b4:44:
45:54:cd:f7:16:f7:dc:12:76:c7:67:70:36:30:8f:20:aa:97:
a0:2e:52:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:18 2025 by rpki-client