Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File: 6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier: MmMtQ4oUzU+KV23XN8SIvunQ/hOUBeduqsU0ipaajTk=
Subject key identifier: 0F:71:F1:38:EC:C8:20:DF:58:2E:EB:E4:35:DB:59:7B:2D:5A:5A:57
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial: 01964F35C08244745A56ADB86973DE4A59E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number: 1398
Signing time: Sat 19 Apr 2025 18:00:44 +0000
Manifest this update: Sat 19 Apr 2025 18:00:44 +0000
Manifest next update: Sun 20 Apr 2025 18:00:44 +0000
Files and hashes: 1: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: pxkDhlTDLd9unRFQSn9E7yWeiEoWbQ7mTKLoXyV70+Q=)
2: RwWHoWi8bvEcrn91U7_cQg2FozE.roa (hash: HQDbKoqS2BbhQGyXNSljHl9fABiKNRyJ1D+l6ixZKCE=)
3: vvQy0Yj8i6h1g42ZTAwhRIXBuw8.roa (hash: T8KzIT3w14qu1ZHhgwVuDOIW10SZ/SXhFvfY0nRS5nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:c0:82:44:74:5a:56:ad:b8:69:73:de:4a:59:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
Validity
Not Before: Apr 19 18:00:44 2025 GMT
Not After : Apr 20 18:00:44 2025 GMT
Subject: CN=0f71f138ecc820df582eebe435db597b2d5a5a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:d1:e3:da:bb:64:a6:2c:89:e1:96:2b:4b:
a3:cd:93:89:5b:8c:f1:82:b5:a0:24:9d:14:37:81:
a7:89:99:ae:a6:06:81:f8:29:85:5b:a4:d2:e8:39:
af:e4:92:93:ab:1f:7d:e3:4c:f9:97:a0:21:72:38:
36:f9:51:ec:c3:92:9a:af:02:3b:3a:9f:a4:6e:9e:
d5:c8:a6:94:35:2e:8a:87:c4:96:23:e9:86:4e:c5:
6f:ed:dd:59:b4:d8:a4:eb:92:83:17:3f:7f:7b:eb:
a9:9b:c4:7d:5b:84:bb:d9:b7:5d:af:b2:be:34:96:
8d:05:a0:49:73:d6:f4:0d:17:71:aa:12:ea:f7:93:
64:59:49:30:0b:74:cb:af:32:66:4c:74:d9:7e:c4:
45:86:04:88:07:0b:05:f4:5e:3b:c7:7e:1a:f2:6f:
62:d8:6c:40:c1:b1:5d:2e:ec:fd:7b:1a:28:67:a9:
c0:d4:7b:35:09:8c:8e:58:73:b8:eb:06:7e:a6:52:
04:b5:77:ae:f5:41:92:70:47:42:ab:2d:bc:71:9b:
0a:1f:41:21:dd:17:a5:e4:c0:12:59:0f:36:3a:b3:
5a:9b:bc:0b:e1:7f:e7:a6:5d:40:bb:3f:2b:7d:c9:
0d:60:b6:5b:cc:91:07:4a:f1:7e:e1:9a:94:66:ff:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:71:F1:38:EC:C8:20:DF:58:2E:EB:E4:35:DB:59:7B:2D:5A:5A:57
X509v3 Authority Key Identifier:
keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:85:90:dc:10:01:24:eb:23:ca:19:b9:6c:ab:ac:d9:70:f6:
5b:91:15:ff:48:e6:27:66:e5:0a:28:d8:4c:02:c0:cb:42:7a:
5e:40:03:8a:66:9b:d6:40:58:04:b9:d0:ea:24:3a:11:c0:8a:
04:c5:85:50:d7:30:22:ea:18:7b:87:a7:a3:94:d6:59:a8:ee:
ae:f7:c8:04:59:70:4b:24:fc:26:81:5f:54:97:3d:b8:e0:66:
f7:a5:6a:f1:e0:90:d7:07:36:eb:fa:78:1c:59:db:88:6d:4a:
e9:a8:dc:14:f3:8c:7d:16:2e:c9:6c:f9:1f:b5:2d:e9:d0:03:
a6:07:0b:2a:9b:bb:ae:59:9b:9f:80:e3:3f:dd:0a:88:48:28:
f7:27:09:f2:a2:aa:c6:42:a6:2a:0d:18:b6:de:2b:e5:c1:cd:
86:a0:b1:7d:ae:80:54:99:21:17:fa:1a:d2:dc:6b:5e:56:73:
ce:49:b2:18:8c:52:65:2a:4c:fa:b7:f2:a5:ea:0d:62:5b:2e:
85:54:dd:bb:34:45:39:26:97:36:95:b8:c6:1b:7d:0f:b6:87:
0e:a3:ea:8e:ee:04:dc:62:b2:9a:48:b5:ca:ea:10:11:9e:b3:
6b:39:63:db:62:c8:fa:2e:be:e3:77:39:57:1f:5c:cc:6f:a9:
d8:c5:62:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:19:03 2025 by rpki-client