Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
File: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft (raw, json)
Hash identifier: 1tnRzlmSDtDyIR7Z0OW4f1T5pLO2F3C2WmjHQc6woeM=
Subject key identifier: DF:76:20:CF:2D:ED:40:EC:F0:22:41:4F:30:74:2D:85:10:BE:82:10
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 019642565064BABB9F719C15E394BBA6D535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
Manifest number: 0DF7
Signing time: Thu 17 Apr 2025 06:01:14 +0000
Manifest this update: Thu 17 Apr 2025 06:01:14 +0000
Manifest next update: Fri 18 Apr 2025 06:01:14 +0000
Files and hashes: 1: 6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl (hash: c0WAcDesFH0NywJ9U5od4S8J3CJLTLkgU/RShtbQaYg=)
2: HOKH-4cqRMA_yXERkwbNDzuMfg0.roa (hash: BxrSjj1tg8yper8hXCVO7HyCIeXNMBvlZBpIdnV+E/w=)
3: q-7o-VTmQktM6CANooQxHGpfUPs.roa (hash: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:56:50:64:ba:bb:9f:71:9c:15:e3:94:bb:a6:d5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Apr 17 06:01:14 2025 GMT
Not After : Apr 18 06:01:14 2025 GMT
Subject: CN=df7620cf2ded40ecf022414f30742d8510be8210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:68:ca:37:60:ae:7c:e5:0d:0a:8c:e3:06:
5c:d6:02:ac:1b:74:23:0d:38:ed:4d:28:04:ff:cb:
8c:7e:6a:fb:cf:a0:35:51:ce:a1:46:75:a3:89:03:
a4:6c:27:aa:d7:d6:83:73:70:ea:d5:54:6b:3e:f6:
ed:cc:e2:84:3b:59:b4:c1:d9:c0:b0:9d:6e:5a:31:
95:29:b2:48:5f:14:30:27:1d:da:64:d1:53:36:a7:
b4:38:80:8c:08:11:e6:54:c2:42:26:42:76:af:54:
90:80:29:e6:f6:c9:12:7f:82:20:e2:df:c3:97:a3:
d2:1a:2f:3f:39:3c:3d:45:51:5b:9c:0f:72:a9:32:
d3:79:4e:69:f5:95:ad:43:8a:df:ab:eb:73:c7:0e:
ad:ed:90:4d:54:4b:29:02:ec:8b:67:27:35:81:d2:
f2:ee:ec:81:88:47:90:64:ba:b9:59:e1:fe:c5:3f:
5f:18:12:90:70:5e:ea:56:5a:ec:f4:dd:0e:fb:ab:
94:69:64:68:21:1d:66:14:fc:06:59:a2:33:ad:98:
aa:0f:50:b7:dc:28:de:56:93:24:a0:d6:69:e1:52:
63:b1:5b:33:1e:9e:f9:da:f9:b5:3b:37:29:51:6b:
76:79:52:2d:88:68:06:35:61:fc:42:3d:16:93:59:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:76:20:CF:2D:ED:40:EC:F0:22:41:4F:30:74:2D:85:10:BE:82:10
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d5:55:a8:48:e4:d6:42:45:14:05:5d:06:bd:34:ac:fa:83:
c6:1c:1c:d1:1f:23:89:bf:c1:24:7f:0b:1e:3d:8e:8b:64:cd:
14:b6:b0:c4:95:36:f1:d8:9b:50:30:a7:ae:d1:50:d8:f7:24:
c5:42:b9:48:ed:1a:70:20:a3:3f:92:95:d5:7e:52:90:e5:34:
c1:31:c9:bb:6a:bb:16:c3:95:00:56:cc:85:82:c0:8f:b5:d3:
fb:8f:12:6b:46:4b:6d:43:09:79:71:f0:50:f7:76:20:a6:12:
76:1d:9b:80:e4:24:a5:03:dd:d9:07:98:f7:67:76:03:42:30:
fd:1b:fd:dd:c7:07:6f:2d:72:c1:94:cc:40:0d:d2:e7:0c:5d:
a6:5d:61:60:52:1e:8a:5a:47:be:ee:ad:f0:c9:90:af:01:5b:
60:e1:80:dc:9e:fd:f2:99:95:31:f1:d6:68:37:67:17:16:7d:
8b:50:e2:12:12:79:fb:de:ff:cd:be:75:09:23:f4:61:56:7a:
51:f3:25:69:3b:76:92:b8:45:00:c0:6d:f1:b5:f6:91:97:ca:
5c:88:ab:82:59:d8:2c:68:38:b6:a8:51:62:47:37:9f:4c:17:
20:d7:74:1d:5c:3c:29:4e:22:e5:6c:2d:b9:e8:e9:c6:18:40:
e5:d2:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:45:22 2025 by rpki-client