Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
File: 6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft (raw, json)
Hash identifier: soLS7C1lsBCQDMiBSV21aWzq9YTNqiTmcdJWKR2SPDU=
Subject key identifier: 03:EA:9A:F3:D5:C8:30:A1:C3:30:D7:77:93:71:CE:6A:CF:01:4B:78
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Certificate issuer: /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial: 0196493378234B17BAA9E7881061BD7BB892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 14:00:31 +0000
Manifest this update: Fri 18 Apr 2025 14:00:31 +0000
Manifest next update: Sat 19 Apr 2025 14:00:31 +0000
Files and hashes: 1: 6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl (hash: yuPe9+XELis+3E/2735xaQ3rj/gkg9zF9qdoy6JsYRE=)
2: CEi11oDah-Xj3CSyKJ8iomoOYoM.roa (hash: ez/wVHjqJzETmetoc7ih07UD25PAbuMs0U3dxKCFOXE=)
3: h_PujoF1idQej6mkI673sMCS4CI.roa (hash: gJAR6zsyEp9IfdpTVmdU+2Uly1ejVeeDkLflgAL2GD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:33:78:23:4b:17:ba:a9:e7:88:10:61:bd:7b:b8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Validity
Not Before: Apr 18 14:00:31 2025 GMT
Not After : Apr 19 14:00:31 2025 GMT
Subject: CN=03ea9af3d5c830a1c330d7779371ce6acf014b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:19:b4:7e:2f:b0:c8:f8:bc:18:cc:cc:64:
e7:03:41:9c:df:ab:3d:a3:dc:65:f7:19:6c:89:db:
7c:14:b5:87:67:49:1c:87:81:21:69:22:0c:47:97:
d9:eb:fc:13:e4:4c:a6:17:68:cf:f8:d9:21:16:68:
b3:a6:de:b7:2f:81:88:54:7b:d5:29:b3:ee:46:93:
47:ae:48:3f:84:42:2d:67:7a:20:40:bb:39:c9:15:
4d:06:30:38:01:5c:a3:ee:95:0c:11:3d:b7:03:99:
b2:59:59:af:1a:b6:c0:52:b4:86:c9:d4:76:f7:cb:
d4:94:7c:a5:4e:1e:f6:99:23:b6:49:54:f3:f3:67:
86:4c:84:57:13:b7:6e:27:fe:2d:e4:ec:9c:53:65:
d4:d6:51:92:fa:c8:fb:4e:d4:66:76:94:48:08:fe:
66:db:bc:ea:0f:2b:72:86:cb:9c:a2:3a:79:b3:75:
5f:e2:16:82:f4:82:e6:fb:60:44:d7:56:dd:84:e7:
27:79:3f:9d:80:07:b7:61:ff:50:ae:ca:a4:00:c9:
f4:ea:52:20:0e:ee:69:ed:01:3d:b7:4c:99:86:49:
d4:58:c8:ea:a7:47:45:0e:65:b6:41:ab:86:6f:74:
36:d6:a3:3c:69:e7:06:0c:82:41:ab:4d:07:0f:6e:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EA:9A:F3:D5:C8:30:A1:C3:30:D7:77:93:71:CE:6A:CF:01:4B:78
X509v3 Authority Key Identifier:
keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f3:68:2e:86:6b:68:e2:ed:9a:38:bf:c5:51:9b:c9:15:40:
95:29:3e:67:f2:df:d8:3f:3f:9e:11:d1:a3:d1:dd:52:c7:6d:
7d:89:21:0a:c2:c9:43:16:ee:b2:78:ea:82:e2:2c:60:99:1c:
76:0c:eb:65:39:36:37:a6:d6:6b:e2:d5:86:2c:63:f0:20:1c:
2b:45:c0:36:d7:32:16:46:a7:f1:94:b2:5f:5c:0e:2b:cd:c9:
4f:c9:e5:d8:44:2d:24:2e:df:c1:d0:11:57:af:db:43:3e:88:
4b:7e:6d:83:97:96:7c:d6:31:39:b4:ce:c1:2d:08:c1:81:ed:
63:29:0d:b7:f7:97:2e:37:b7:60:43:05:5a:ac:92:5a:d8:d4:
3f:17:5c:b6:3a:7a:bb:49:7d:da:85:5a:1b:6d:e4:09:96:22:
32:71:ce:b5:dc:2f:f9:f3:77:73:ae:6c:65:56:b0:9f:1f:52:
a0:1e:a7:a3:a0:69:1d:f7:d1:8e:35:1d:af:61:d2:8c:e8:fc:
62:1d:3e:38:31:cf:47:e4:83:28:b9:7e:c3:7f:ce:6f:77:d9:
9f:20:67:e7:3b:33:54:ea:c0:16:c7:4b:43:02:1b:31:41:37:
1e:88:3b:4a:db:df:6c:de:c1:97:76:7b:dd:e9:c8:9e:df:49:
cf:6c:f6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:38:12 2025 by rpki-client