Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
File: 6hIZKS2GypY5e4qL0k4IsaiXwaM.mft (raw, json)
Hash identifier: VE7Q1R8YyV7OzOWYr6R2aApCuNx9N54+9Sztea4Iwjo=
Subject key identifier: 86:28:0C:CC:0B:BB:4B:C0:1B:EB:83:B7:F3:C7:91:AE:49:62:EE:04
Authority key identifier: EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
Certificate issuer: /CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Certificate serial: 01965123C1D4C946D1CD11D69B7E9925B9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
Manifest number: 1504
Signing time: Sun 20 Apr 2025 03:00:19 +0000
Manifest this update: Sun 20 Apr 2025 03:00:19 +0000
Manifest next update: Mon 21 Apr 2025 03:00:19 +0000
Files and hashes: 1: 6hIZKS2GypY5e4qL0k4IsaiXwaM.crl (hash: l7K+tQPNqmN+3n3S5P0x81R9AI23ST9VXBK6acuBnlk=)
2: quAuk4oARA-zncvhJ5NL9KJVCeU.roa (hash: ItFM8RojPzfJum0retpVKJonKxKfGyoIIi91j+DB94o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:c1:d4:c9:46:d1:cd:11:d6:9b:7e:99:25:b9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea1219292d86ca96397b8a8bd24e08b1a897c1a3
Validity
Not Before: Apr 20 03:00:19 2025 GMT
Not After : Apr 21 03:00:19 2025 GMT
Subject: CN=86280ccc0bbb4bc01beb83b7f3c791ae4962ee04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:c3:fd:5f:e8:b7:c1:86:42:f9:45:9c:45:
8e:9f:f9:1c:76:0c:df:f7:55:52:b0:91:04:2a:93:
07:d9:7a:02:d8:2d:50:ee:da:79:d5:c0:67:bb:1b:
fe:af:b6:29:38:67:e0:5a:37:30:f2:eb:a5:98:dc:
d3:00:4f:5e:4d:1b:fc:4b:8b:97:e4:c9:d8:35:15:
d5:e7:32:b9:5d:9d:b1:49:25:d8:83:18:d1:94:8d:
9b:40:4a:08:93:8d:34:81:b7:f5:98:92:93:cc:af:
fe:74:2d:fc:1f:dd:b9:9b:5a:11:89:83:fc:2a:d5:
15:1a:8a:72:68:b1:4e:9e:84:2f:bf:5e:40:5b:ed:
6b:ca:76:5e:3b:ee:3b:c8:7d:94:74:a3:c2:43:ed:
26:36:0b:cf:1d:f4:df:ea:91:46:92:7e:52:9f:6b:
32:53:9c:35:e4:65:a9:a2:13:5d:30:2b:30:08:34:
4f:6a:69:7d:27:df:aa:73:a5:6a:84:f9:f6:14:1c:
62:b9:38:51:5f:88:de:7e:6a:0d:5a:fd:29:b1:27:
2a:57:07:87:27:80:55:6e:86:db:6b:45:fe:88:e1:
85:7d:40:b9:8f:5d:0d:8b:d1:b5:85:29:86:d6:fb:
ef:67:1e:7d:86:87:56:c9:99:8d:a6:ed:b8:94:38:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:28:0C:CC:0B:BB:4B:C0:1B:EB:83:B7:F3:C7:91:AE:49:62:EE:04
X509v3 Authority Key Identifier:
keyid:EA:12:19:29:2D:86:CA:96:39:7B:8A:8B:D2:4E:08:B1:A8:97:C1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hIZKS2GypY5e4qL0k4IsaiXwaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/6hIZKS2GypY5e4qL0k4IsaiXwaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ab:8e:ed:48:1c:df:64:e0:63:e1:fb:61:a2:57:87:06:79:
cf:f2:da:53:ec:fd:ca:c3:da:38:bf:12:4c:aa:34:33:87:47:
d6:05:b8:ce:f1:2d:86:f2:93:76:18:1a:64:23:c7:21:36:d1:
38:1e:d2:54:cc:9d:a4:e5:65:9f:2d:58:ff:dc:cd:a4:69:d8:
23:09:1d:55:4a:49:c0:15:88:40:94:df:07:40:be:be:83:20:
e5:2b:87:69:df:80:8b:59:7d:58:a7:de:cc:c3:d4:f1:cc:ab:
cd:a8:bb:54:9a:1b:ef:6a:a6:c7:fa:a4:a9:77:71:08:5a:19:
9b:68:e1:61:7b:b0:22:27:4f:7a:a5:45:a3:2a:6f:68:73:2a:
8b:48:90:e8:bf:ac:e4:dd:83:e6:a1:87:b0:f6:5b:fd:69:90:
fc:b5:57:83:14:e0:9b:db:bc:91:b8:37:14:1b:97:37:9c:fe:
bf:2b:3b:4a:00:b1:7d:c0:bc:b2:ed:7a:c0:3f:b0:35:a6:8d:
c6:b9:53:7a:f9:98:2f:89:25:e3:51:71:a2:8b:24:07:99:9d:
d8:b6:7f:f8:1f:e9:fc:7f:bc:94:5b:af:be:f7:27:09:bb:06:
b6:9e:f3:83:9c:c6:47:c1:a0:e8:73:cc:72:9a:0e:c7:30:1e:
5e:c2:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:48 2025 by rpki-client