Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier: fPzysfNe4xdsHkF3s06Kw7Oow9V+xUV2rHKPu16ySsE=
Subject key identifier: 3E:BC:77:6C:B4:8F:76:F9:B0:9F:DD:64:71:37:4A:2F:94:3D:00:66
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer: /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial: 01963FC24248A41FEF90032840CBA41A826E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 18:00:17 +0000
Manifest this update: Wed 16 Apr 2025 18:00:17 +0000
Manifest next update: Thu 17 Apr 2025 18:00:17 +0000
Files and hashes: 1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: kKBPOlbToFJWhoj9UZMHdYcgL1/nNciivyFUDd/lvK0=)
2: ruzowO5hkwvsrCMVqncyR6RC2cM.roa (hash: 3UI+kEeYIksu5ENYxWY/kKHH2Zgvkj1CId+2uWMcQI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:42:48:a4:1f:ef:90:03:28:40:cb:a4:1a:82:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Validity
Not Before: Apr 16 18:00:17 2025 GMT
Not After : Apr 17 18:00:17 2025 GMT
Subject: CN=3ebc776cb48f76f9b09fdd6471374a2f943d0066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:ec:1a:0e:00:39:5f:ed:67:cd:2b:ec:f9:
8e:01:4e:fb:5c:d5:bc:62:79:14:f9:4b:89:d3:77:
40:29:ab:b6:89:59:9d:46:e7:8c:0f:ae:71:20:f2:
6b:58:61:36:31:0c:e8:64:be:0b:19:06:4d:d8:7b:
1c:c2:ff:70:0c:29:a6:84:e4:da:cf:dc:02:47:eb:
f2:90:b4:02:ac:88:7b:b9:5b:8e:80:0b:cf:7e:ea:
b6:c4:51:fc:6c:88:f4:d1:f0:8a:11:ec:bb:80:fd:
ee:f6:6c:fc:e9:7a:b7:93:9d:7b:52:6b:83:dd:4a:
06:5b:53:e0:f1:32:de:d7:6a:73:0b:6e:56:61:3f:
06:20:f4:65:1e:aa:ed:be:23:51:05:78:54:13:05:
21:b4:5c:36:73:ec:35:05:6d:a9:cf:03:44:e6:a7:
ca:cf:92:d1:ca:c3:24:9a:29:c9:d1:0a:b0:13:7a:
6e:22:f9:83:fa:66:20:91:44:1a:74:f8:c5:0d:bf:
46:ad:31:84:ff:46:ee:8a:cd:b5:c3:fe:c6:ff:f9:
01:9c:2e:12:c0:ec:f7:c8:d4:67:97:b1:ef:8f:0d:
24:ad:fd:72:9e:70:0f:5c:72:27:1e:78:11:2c:ea:
a3:0c:f3:bc:ce:08:cc:b4:b0:d5:cb:09:a1:46:47:
42:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BC:77:6C:B4:8F:76:F9:B0:9F:DD:64:71:37:4A:2F:94:3D:00:66
X509v3 Authority Key Identifier:
keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:39:8b:2e:46:29:d2:5e:bd:a9:01:49:59:d6:09:d3:e6:
3f:da:25:7d:0e:e3:54:d9:09:ec:50:bc:e4:c3:46:a5:91:d6:
e3:86:02:a2:c5:d7:ec:47:b5:bc:20:a9:fb:d6:27:f9:d4:f8:
67:5a:f2:66:a7:64:e1:bd:81:39:af:46:9e:c8:a4:d2:f8:f4:
fb:ea:25:73:14:c1:f7:1d:df:83:24:28:c5:34:e4:6a:bb:68:
72:89:09:00:78:61:0a:e7:55:17:22:da:80:4c:60:69:9d:d7:
65:ad:9d:c6:1d:48:59:1f:21:a1:00:f4:29:2e:14:0d:1d:00:
44:18:4b:86:41:d2:b8:7c:f9:40:2b:a8:ef:90:e6:26:b6:35:
19:48:9c:ac:52:68:0e:a6:09:9c:47:10:ea:3d:b2:1d:65:a0:
c3:65:0a:c6:21:dd:3a:4a:a6:02:b9:0d:a0:25:a7:d6:6d:9c:
6d:7b:f5:08:d9:9f:22:2c:9f:45:8a:b5:0b:83:08:16:a6:77:
8a:28:3c:69:54:b2:0c:07:5d:ea:b8:bc:12:ab:3e:36:ca:0f:
22:20:33:6a:96:68:86:db:1f:c6:b4:c1:93:e9:de:da:77:c0:
ef:20:36:ab:5f:f8:10:f0:0a:c1:1f:e7:d0:55:f3:f1:4a:57:
2e:5a:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:57:57 2025 by rpki-client