Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
File: 6rR29nfNDDKY0oEeYPSOGymzr-8.mft (raw, json)
Hash identifier: ukePAplPb2rScSHJZ2CqcRkGUsUyjUFQepBY6Ut40/g=
Subject key identifier: C0:14:8E:29:7D:CB:35:2C:65:70:BF:FC:6D:0D:FA:5C:44:00:B2:9F
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019647E9CE0C30C812C37A1E7E308913E902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
Manifest number: 133B
Signing time: Fri 18 Apr 2025 08:00:27 +0000
Manifest this update: Fri 18 Apr 2025 08:00:27 +0000
Manifest next update: Sat 19 Apr 2025 08:00:27 +0000
Files and hashes: 1: 0UzsGme_k2nP3xmC23x_NIyPI4I.roa (hash: 9GCcsHrAPMsxEip94efAnxBNP67TuW3l3gu24kwBziA=)
2: 6rR29nfNDDKY0oEeYPSOGymzr-8.crl (hash: JA5oHtCR+6Qc1Otqew648NochzAyuhwv9V+1eAY4byg=)
3: QhX-bY8Pyu0IVpXlU-objdMMYgU.roa (hash: AtV/TPeQmqPYNR6TwwiivnQLG1K0ZguaxSrJsKzoymM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:e9:ce:0c:30:c8:12:c3:7a:1e:7e:30:89:13:e9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Apr 18 08:00:27 2025 GMT
Not After : Apr 19 08:00:27 2025 GMT
Subject: CN=c0148e297dcb352c6570bffc6d0dfa5c4400b29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:23:41:56:78:19:b8:b3:6c:60:9e:dd:df:
2f:bd:72:f5:f2:ba:96:1a:f9:33:3a:90:5f:f9:0c:
70:47:fc:94:70:7b:6b:a9:96:ad:51:dc:b8:38:ea:
89:1e:8e:d3:00:b7:7b:1f:93:32:6d:1d:04:6d:8b:
e3:57:01:94:db:7a:4f:b2:5c:c7:cf:e6:33:39:26:
c1:84:1e:37:be:5f:87:67:6f:c1:72:d6:1d:2c:fb:
ad:9f:8b:c0:0c:54:5a:ba:a0:aa:91:d4:3d:22:8d:
57:2a:fb:1d:10:bc:13:93:b2:1b:04:e4:82:c1:de:
1b:60:72:d0:c4:c0:ba:4a:14:10:d8:c3:ca:c4:aa:
52:3a:b1:18:07:76:8a:8d:ba:08:50:7a:15:74:cf:
29:e5:8e:6b:bd:6b:16:59:29:4c:00:ca:fa:58:23:
7e:45:27:f9:cb:28:91:49:95:e9:30:4c:bc:50:d1:
25:51:44:c8:1e:1b:a6:72:a7:a9:66:ae:1c:74:87:
4b:a1:b7:28:d9:5c:b7:57:6a:57:b1:67:db:7b:3a:
58:a6:d9:d7:a0:39:8d:ea:60:b2:d8:66:97:66:ae:
89:cc:5b:c1:a8:9c:29:80:26:15:50:1c:97:18:3d:
43:db:ed:f7:08:ef:d4:ee:05:7c:c5:f7:24:60:32:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:14:8E:29:7D:CB:35:2C:65:70:BF:FC:6D:0D:FA:5C:44:00:B2:9F
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9d:29:cd:4b:03:0a:7c:64:1c:16:02:aa:9b:91:28:75:46:
51:05:25:14:30:47:63:26:8d:bd:19:12:ad:1f:e6:93:4d:89:
56:90:0f:d6:b2:e4:ff:f5:96:17:c5:7e:66:15:5d:e4:b8:d2:
b0:4f:d2:69:ce:f4:1c:2e:04:10:3b:73:ef:74:59:01:6b:15:
f9:80:77:f5:b8:b9:e3:81:fa:0c:3b:e5:6e:22:1c:64:1e:02:
11:82:6f:fc:bc:4d:b4:03:36:fd:d2:ee:92:3f:e7:61:5a:62:
13:ce:af:ab:36:ba:f3:bc:0b:9c:92:08:9e:fd:02:d6:39:5a:
41:fe:c1:2e:78:fb:70:e9:12:5e:c8:fe:5c:95:5a:25:6c:4b:
90:21:3f:02:6b:12:9f:b1:63:66:46:dc:b5:50:8a:72:e8:9b:
16:4f:f7:64:28:cb:cd:96:a8:67:a7:9f:23:dd:e7:ba:c1:cf:
61:e7:0a:a1:87:7f:ea:c7:37:19:d8:ed:48:68:33:a0:70:55:
16:c7:08:8f:26:13:9b:09:8a:37:ad:c9:1a:a7:51:68:98:8b:
5e:f2:8c:ab:03:63:7b:ba:d4:09:30:ce:35:f2:48:58:be:f0:
69:15:a0:6d:cc:3f:00:dc:47:59:00:46:91:2b:d2:b3:87:6d:
8e:52:dd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:42:31 2025 by rpki-client