Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
File: 6lg9YfLlemsW6ksanKJ7slDXSO8.mft (raw, json)
Hash identifier: u2RcQrM6bSVieX6ABundvaWdS2X84xT3R/YQq6ylHOQ=
Subject key identifier: 86:44:20:17:8A:9E:58:91:2C:EB:F6:F9:B4:9C:D1:E9:15:65:DE:27
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial: 01963C53D0A9A45CBE7B316755800955CE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 02:00:47 +0000
Manifest this update: Wed 16 Apr 2025 02:00:47 +0000
Manifest next update: Thu 17 Apr 2025 02:00:47 +0000
Files and hashes: 1: 6lg9YfLlemsW6ksanKJ7slDXSO8.crl (hash: guFQOo1xKnzbobPCciCGzYMrliwwW4RnJzNKutQyrBM=)
2: BDcWEX2jsziWI3BwAdwXDgVlUUs.roa (hash: ohMsIfsvhMfjPWnDhvdOtdCZBCwqZ7Awj2tCgJhUEaE=)
3: YZeqBXKQFmXRNEkSHxYTd5FtBG8.roa (hash: H2qTKciVzX2Iz/NfWeOKudVbBEab6voHC2+59WhtYSU=)
4: eIUbhEvS312QdpTsSOJbOfKRhjg.roa (hash: TDTdEPNKnFdTs1u7Iy6p2CE/KWnf5yhsocLiaVIOsqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:d0:a9:a4:5c:be:7b:31:67:55:80:09:55:ce:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Validity
Not Before: Apr 16 02:00:47 2025 GMT
Not After : Apr 17 02:00:47 2025 GMT
Subject: CN=864420178a9e58912cebf6f9b49cd1e91565de27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:30:44:b7:cb:ae:7b:85:34:72:b2:30:28:
d4:b5:4e:b3:75:1f:d7:39:ec:d3:93:1d:4b:72:b2:
42:09:f6:f2:59:4d:e1:9e:ce:8a:8a:8d:4f:e3:ef:
d9:4f:d2:db:cc:84:10:50:54:f0:10:b6:69:b9:63:
66:64:8e:28:c6:1e:de:14:b4:b1:db:6f:98:21:24:
4e:70:49:17:99:16:9e:cf:b5:26:04:04:6c:ba:4f:
25:1f:bc:cd:bc:04:47:1e:4e:8f:8d:db:db:8c:ac:
52:e7:cd:95:51:dd:dc:2c:2e:9d:fc:75:34:23:9d:
07:7d:e7:bb:39:af:76:a5:10:34:0f:c9:e5:a1:be:
33:f6:91:90:fa:11:10:a4:a3:63:96:e4:d0:a8:fb:
af:29:7e:05:77:e1:ef:5b:d5:a3:1a:88:82:ef:65:
8f:8f:c5:10:a0:6c:e1:4e:30:08:71:68:da:a1:52:
56:12:f2:49:fa:0e:6c:47:96:df:2f:22:fb:d0:ae:
5a:4a:91:64:17:32:54:10:72:9f:98:de:ec:8d:62:
ec:f5:2d:27:e6:bb:2f:cf:e4:25:f4:67:7b:66:1d:
de:63:c8:6b:23:82:1a:bf:20:aa:c3:b6:c3:a5:5a:
ee:5e:aa:ee:90:f9:76:87:4e:95:f0:df:40:6e:93:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:44:20:17:8A:9E:58:91:2C:EB:F6:F9:B4:9C:D1:E9:15:65:DE:27
X509v3 Authority Key Identifier:
keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:31:59:ab:e4:b0:5c:01:42:ea:92:d9:7d:f1:35:78:f3:0e:
d5:1b:fc:da:2b:09:ab:43:db:7e:84:c8:c7:a6:dc:85:8d:9b:
df:64:74:e1:f7:9d:f8:fb:16:63:a0:d8:e8:88:89:d8:04:c2:
3a:2e:b2:c1:50:5e:38:f7:88:b0:82:a5:a1:61:b7:0f:5d:c2:
c1:7a:08:94:29:9b:e8:c4:e0:2a:25:d1:da:65:02:ce:7e:b7:
d6:70:1a:f6:c8:e8:74:5e:1b:1f:f9:91:78:c4:1f:94:e4:d9:
b6:71:fa:ba:30:80:9f:00:f2:f6:eb:cf:06:6d:e3:5f:3b:12:
64:24:08:3b:d7:a5:39:37:90:39:45:47:f2:14:6a:a7:73:ce:
75:5c:ba:70:6f:8e:89:e6:05:08:02:43:13:c3:52:05:21:d1:
18:50:fb:1a:aa:3a:2a:46:44:da:56:bf:d8:8c:d4:d3:cb:68:
11:ca:38:12:77:80:5a:d9:74:df:7a:77:fc:37:b7:da:6d:1e:
fa:dd:d4:2c:34:fc:fa:2b:e2:30:5f:f8:96:20:b6:58:e0:4c:
2d:c2:02:20:c7:85:28:81:2f:12:55:94:a1:2b:7a:20:a3:2d:
f1:5e:f6:3a:c7:b7:e1:88:92:c6:47:de:db:92:62:00:6d:82:
13:ce:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:25:27 2025 by rpki-client