Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
File: 6x3AD9LB4-qvzszBtLofj9CkqYw.mft (raw, json)
Hash identifier: XBzXDWtLzKIt535hR4s2oM7gnnjJGOTHMbkY6nSm7Qo=
Subject key identifier: 7A:08:2B:8A:EB:E7:46:B6:EB:73:C8:5D:50:3D:DD:D1:FC:80:82:9A
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Certificate issuer: /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial: 01965236DD029A207560832F95F7CC5339B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 08:00:49 +0000
Manifest this update: Sun 20 Apr 2025 08:00:49 +0000
Manifest next update: Mon 21 Apr 2025 08:00:49 +0000
Files and hashes: 1: 6x3AD9LB4-qvzszBtLofj9CkqYw.crl (hash: yO8ceAQEJ3X2YNIacw9HbpnlHjT1tvC10vs5stFGVss=)
2: DFRvHnIOEohSALE7cr1DMFzARjs.roa (hash: cAP5xtyhQuK53sxOeCJOPJgNAhGARVo8d78ULbFvVa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:dd:02:9a:20:75:60:83:2f:95:f7:cc:53:39:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Validity
Not Before: Apr 20 08:00:49 2025 GMT
Not After : Apr 21 08:00:49 2025 GMT
Subject: CN=7a082b8aebe746b6eb73c85d503dddd1fc80829a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:10:8e:d1:8a:7e:8d:c8:6f:ae:2a:f1:6e:
f0:84:67:88:d3:4e:c3:4d:1c:d0:89:54:01:d8:66:
99:3f:20:be:58:63:f6:98:04:ca:2f:2f:1d:90:98:
5c:b3:35:e1:c5:1b:f6:7d:fb:dd:e8:59:3f:f5:82:
75:71:11:93:a0:c0:fa:8c:6c:b9:3f:31:e3:f5:61:
60:7a:34:86:02:51:dc:86:71:82:cd:9c:4c:f7:b3:
01:07:14:e6:d6:d6:f7:05:c7:7a:11:b7:69:01:84:
c4:bb:5c:26:70:c6:b8:17:9f:46:27:01:20:2b:be:
11:bb:57:27:12:56:bf:b6:42:21:81:da:61:7a:e2:
56:94:e7:f4:fe:fc:56:9c:4e:38:51:97:43:43:6f:
d7:1a:b1:4d:f4:18:62:08:23:61:60:32:6d:15:ab:
68:bd:a1:6b:c3:2b:4c:3d:ff:ba:73:a7:27:67:81:
21:a2:ed:b6:df:c7:72:30:91:a1:c4:c5:f9:72:16:
41:a4:d9:3f:1b:ed:4a:a7:29:5f:36:d3:dd:a7:11:
ea:20:77:f7:1b:55:6d:44:27:ce:a3:88:1f:91:f8:
19:07:d1:8c:fe:aa:26:1a:1b:a7:fb:ec:ab:98:54:
49:4a:0e:4b:11:64:f9:92:cb:30:21:ac:56:1c:9e:
50:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:08:2B:8A:EB:E7:46:B6:EB:73:C8:5D:50:3D:DD:D1:FC:80:82:9A
X509v3 Authority Key Identifier:
keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f8:45:5e:f5:9a:75:03:0c:1e:39:c5:4c:43:88:13:e6:56:
21:d4:0d:dd:70:23:f8:6c:b5:e0:3e:5d:79:31:42:4f:33:3a:
2b:91:a3:1a:c6:38:51:e4:e5:1f:9a:ff:6f:c8:c9:87:a7:d1:
34:33:b2:cb:7e:66:fe:9a:8c:98:22:87:c6:7f:a6:03:e6:4d:
7e:83:c4:81:29:4f:74:7c:98:b2:4c:ea:96:fa:f0:98:2a:1d:
b5:fc:d4:73:e2:01:eb:94:50:e8:e8:da:2b:92:aa:3a:3c:13:
70:bc:f4:24:54:13:f2:10:73:f3:10:ef:0d:54:34:5f:0f:e2:
d6:76:8b:1f:aa:dd:e2:8a:06:92:bf:ef:9c:48:9a:a5:81:65:
dc:01:18:c4:5d:0a:e7:45:c9:d3:27:ae:28:f4:5d:f7:a9:64:
19:25:00:90:c9:c9:fc:b8:e4:18:1a:37:80:29:0e:99:1b:6f:
dd:56:02:25:1d:d6:7f:16:82:53:7d:5e:77:a0:ca:7c:08:95:
de:c6:59:5d:9d:0d:ce:ab:9b:fb:ef:11:9b:a6:b8:14:29:68:
da:81:54:d7:fd:59:c1:e4:99:53:c6:9b:76:c0:a1:de:ac:1d:
b0:af:1c:99:15:4e:65:5a:a6:8d:ec:19:e9:88:f7:95:b5:7a:
3b:9e:62:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:41:02 2025 by rpki-client