Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: q9Y8omLKTzpstJHiGhWvY/IfRZNCdrLGy9C6ckPBVSY=
Subject key identifier: 6A:99:EE:56:61:13:90:72:8D:BE:69:8B:1C:18:07:C9:13:F8:0F:68
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019643D69C1343842959444F9D861A51E762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 13:01:00 +0000
Manifest this update: Thu 17 Apr 2025 13:01:00 +0000
Manifest next update: Fri 18 Apr 2025 13:01:00 +0000
Files and hashes: 1: 139lyeNlCTZU0BOy4AWB3XIegPQ.roa (hash: VzrpaxikQ2FR1JamVqwQwq75MdkFdQ6cyhvfG8bUdXQ=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: VE3ZtIwNo7ZX3MpOaAd21daRGT1TWVsCQH7Rm8aP/+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:9c:13:43:84:29:59:44:4f:9d:86:1a:51:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Apr 17 13:01:00 2025 GMT
Not After : Apr 18 13:01:00 2025 GMT
Subject: CN=6a99ee56611390728dbe698b1c1807c913f80f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:37:d2:f9:2a:8d:8b:28:04:a7:12:52:0d:
f7:6c:ee:37:73:c0:69:82:4a:a8:e8:55:b4:a3:b9:
9b:6d:17:b8:1e:de:33:99:0f:fb:1c:f8:d0:57:b6:
77:56:32:33:2e:c4:34:34:0f:90:ab:52:a4:79:41:
c2:63:26:64:e5:a8:e4:33:de:01:93:c9:2a:d9:ff:
17:a5:12:6d:46:92:cf:02:ad:67:a4:e6:c6:d4:73:
62:1e:5b:33:48:d4:d3:de:d4:f2:e7:82:7b:c7:8b:
cd:66:b0:22:c8:8f:b1:a2:cb:e9:74:d9:c2:49:f6:
c5:4f:55:63:45:98:33:42:c4:8c:33:34:66:0a:a3:
a7:3d:70:49:dc:ea:7b:42:43:9f:1f:68:b7:52:f8:
42:04:6b:04:5b:af:04:2c:bd:8b:e1:e3:8b:c5:e2:
23:60:1d:c1:53:01:ba:ba:c7:ed:9a:2c:ff:4e:c1:
0f:e8:f4:c8:b0:64:d0:98:e3:f7:55:f8:cc:a4:f6:
db:c7:6d:21:12:9f:66:a8:8e:28:6a:9e:0a:cf:1f:
0d:7d:60:56:3e:53:aa:01:7f:8a:c8:51:9f:23:15:
89:43:4f:f8:55:37:2d:fe:c9:80:98:90:8d:a9:a5:
a9:7b:cd:0d:27:62:f3:ec:b8:2b:09:49:90:44:67:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:99:EE:56:61:13:90:72:8D:BE:69:8B:1C:18:07:C9:13:F8:0F:68
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:17:a7:4a:fd:93:91:3d:0e:33:09:8d:a1:52:9e:d6:03:3c:
c1:e1:7e:61:11:40:ce:ae:7c:42:54:c2:59:17:26:0b:a3:bd:
df:3a:ab:df:10:62:fc:5f:c3:cc:0e:fc:b4:08:aa:3e:60:fa:
c2:3b:6e:da:91:32:10:b0:8c:2d:e9:c4:2d:b1:e4:1a:b1:b2:
d0:45:08:f6:09:8e:23:fd:6b:5c:5d:6c:92:f0:0c:b1:7d:f7:
ca:0d:c7:7e:50:48:a4:c4:74:b3:2f:1d:b9:6a:47:18:c4:57:
03:1d:0e:22:99:28:85:11:3a:d7:ee:1d:8e:93:e4:51:d5:a2:
63:06:63:93:8f:85:05:eb:d2:42:79:b0:bd:56:a2:57:c0:3e:
04:61:2a:da:cb:4c:67:0c:4b:60:13:93:1b:61:25:99:8e:e1:
ee:3c:fc:f6:20:cd:e3:64:4a:c7:0f:5f:aa:ce:db:16:3b:a2:
32:72:ee:28:12:73:8a:c2:7a:c5:b9:d0:a1:25:3f:6e:27:02:
f8:31:b5:67:87:4f:39:67:90:29:04:99:96:1b:c8:6f:38:4c:
72:f8:0e:65:90:ed:e5:ec:7a:37:0d:cc:36:b7:d4:50:3f:0a:
9c:ca:01:47:3a:ab:fb:9a:f5:38:6d:5e:14:40:90:64:8f:98:
02:e7:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:14 2025 by rpki-client