Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File: 6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier: BWeWoXfcwA6QTc1v065YxYmZM95GvirvUjjK8VueLG4=
Subject key identifier: E0:1A:C2:3C:1F:86:D6:4F:A1:94:9E:2A:A6:65:A1:2D:F2:60:8C:CF
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer: /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial: 01964BFD6E66DBF9CB74B220D7D4A0863561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number: 0564
Signing time: Sat 19 Apr 2025 03:00:22 +0000
Manifest this update: Sat 19 Apr 2025 03:00:22 +0000
Manifest next update: Sun 20 Apr 2025 03:00:22 +0000
Files and hashes: 1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: iGUaS2+fJs0cJ02R5lnrhUmfbhxYtyJQnfOeu4PxiSs=)
2: eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa (hash: yIhVuzNldSheNj9t68+efRcjN+q//cUeoESSltGdZEM=)
3: v_xrcu_njaocN3K-X9oPxCjEg6k.roa (hash: 9gD6GNup8/leD5HSb02l/wSBrP9d9vIusha+3wIJKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:6e:66:db:f9:cb:74:b2:20:d7:d4:a0:86:35:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Validity
Not Before: Apr 19 03:00:22 2025 GMT
Not After : Apr 20 03:00:22 2025 GMT
Subject: CN=e01ac23c1f86d64fa1949e2aa665a12df2608ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:58:b9:f6:1b:bf:31:32:24:e7:2e:d0:92:
fd:bb:d8:bd:93:ed:58:3e:2c:3e:80:85:7f:fd:ba:
b8:f2:78:c8:0c:1c:99:ad:93:95:13:e6:73:d6:9c:
06:1f:96:24:2f:31:0b:9b:d3:63:c5:36:9d:03:19:
e5:dd:fc:2d:d9:2e:29:95:e6:45:ed:bb:e4:df:ea:
b2:41:45:71:7a:b0:23:38:0c:19:96:ce:2c:fc:3e:
5d:a8:f5:94:eb:e5:33:ba:19:7f:b7:0e:23:c2:b8:
f9:1f:41:58:b2:52:e2:99:e7:4a:d3:0a:c4:34:c7:
fb:cd:67:d5:77:e7:2a:16:0b:f4:09:77:47:b0:81:
ad:78:19:7e:f4:6b:bf:84:e8:aa:4c:7b:a7:ea:d5:
33:13:d6:79:83:6a:3f:b7:1c:f1:2d:5a:5f:bc:4a:
f3:b1:9f:ea:69:61:d5:a2:f3:52:5b:15:bc:63:0b:
92:a9:cd:2c:bf:cc:e1:ea:a9:52:bf:e9:68:84:b4:
54:e2:81:c9:8b:60:93:1c:89:7c:b5:7a:09:16:b4:
93:29:24:95:bf:60:89:61:c5:9d:f3:72:eb:2a:f1:
6f:48:17:78:b3:d5:01:f1:7a:3a:30:1f:c4:65:53:
e4:67:6e:93:0c:2d:61:6b:59:db:98:30:82:4b:6e:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1A:C2:3C:1F:86:D6:4F:A1:94:9E:2A:A6:65:A1:2D:F2:60:8C:CF
X509v3 Authority Key Identifier:
keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:ba:58:bb:29:f2:ff:c1:75:6c:bb:c9:2b:2c:23:fe:df:aa:
0d:77:c6:eb:fd:3f:36:d7:42:90:c2:30:7e:28:88:60:90:de:
70:a2:ce:51:e9:80:d6:8b:17:e0:e6:15:99:0a:22:7c:ca:de:
b9:05:a9:e4:01:ed:31:b6:b5:1a:ea:af:a1:a3:b0:ef:c7:8a:
12:6a:53:3c:f8:62:5b:6f:c1:d8:4f:19:98:98:64:7f:6a:4f:
91:d0:4e:a0:99:d9:62:0f:a3:51:4b:4f:73:bb:31:7f:2f:c5:
4f:e2:96:44:b0:8e:4f:ed:7a:48:17:b9:ce:7b:11:74:a4:05:
1c:fc:21:7b:25:90:38:2c:86:5d:fb:19:99:43:45:06:e9:ae:
48:e2:e4:2a:c4:48:32:3b:e9:67:53:d9:25:b2:91:8d:47:52:
0a:6a:55:42:37:3e:cb:69:7f:b6:d0:28:7d:fa:84:90:87:ce:
5f:7f:07:71:74:f5:11:12:b9:e8:75:57:03:b1:48:7c:81:7f:
0c:ad:3b:d8:dd:3f:8d:2c:66:1b:43:35:b9:34:e0:45:75:5e:
c7:68:2b:2d:8b:eb:97:04:b5:40:a2:50:e6:9d:26:23:74:8d:
a4:6e:bc:de:49:b8:d9:c3:a6:78:e8:d0:47:e4:42:07:e5:89:
4c:9d:be:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:42:43 2025 by rpki-client