Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
File: b6rlVhP8iVhve9beDtygl7hhWmo.mft (raw, json)
Hash identifier: mzGj14ElDrQ9txOjZfz+dv/3A5WTiG1cOFJYrPSQ0mU=
Subject key identifier: 99:54:22:FC:3D:8C:73:64:A0:16:DB:DA:B0:56:10:C5:C3:4D:EB:BF
Authority key identifier: 6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
Certificate issuer: /CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Certificate serial: 019642FA46DA5A546961C02724C1D4B25607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
Manifest number: 085F
Signing time: Thu 17 Apr 2025 09:00:20 +0000
Manifest this update: Thu 17 Apr 2025 09:00:20 +0000
Manifest next update: Fri 18 Apr 2025 09:00:20 +0000
Files and hashes: 1: aOtm6U59mShACrUP4z50hrZCIxk.roa (hash: 8fQIVCesiryqBUIZoQ97a4j4i55DYNAa5i2DNRlMQ5M=)
2: b6rlVhP8iVhve9beDtygl7hhWmo.crl (hash: ixEPgEy+vC0dzTsOiWlNoD07KahrRQd61xJG1lE6FVU=)
3: y4zgX7Lvz7a-J26BXsPiVoxb_IM.roa (hash: NtJpJ4/+lfRrM4AtabmrS2+ljg+xewyFLniZOgVUMdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:fa:46:da:5a:54:69:61:c0:27:24:c1:d4:b2:56:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faae55613fc89586f7bd6de0edca097b8615a6a
Validity
Not Before: Apr 17 09:00:20 2025 GMT
Not After : Apr 18 09:00:20 2025 GMT
Subject: CN=995422fc3d8c7364a016dbdab05610c5c34debbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:cc:ec:a2:da:22:f6:54:7a:b4:13:82:b8:
ba:65:ba:fc:eb:b8:37:b0:37:1c:1e:b3:27:2a:fa:
8f:40:1c:f5:8f:6d:31:26:f1:4e:f5:67:4d:bc:6f:
76:77:fd:a4:a6:28:86:41:52:8f:d0:7f:5f:5e:07:
3e:19:ea:18:7f:95:0d:97:ed:78:51:a1:74:87:0b:
b3:8f:6b:9a:a0:fc:ed:c5:44:6d:24:58:50:b9:1d:
6b:69:c1:3b:04:49:b7:9e:f7:2b:b4:54:94:6e:df:
b1:8a:28:3f:5c:ac:09:d6:69:cd:91:c1:b9:24:0a:
91:bd:0c:db:0f:a4:59:25:4b:dd:92:f7:12:4f:50:
f2:87:41:04:ef:33:db:a9:8b:63:d9:bd:49:f3:83:
59:0d:15:98:2d:db:fc:be:54:2c:96:60:09:a6:ec:
2a:d4:4e:bc:f6:7b:d7:44:c8:56:f6:42:93:8a:c1:
1e:8a:1a:64:39:10:aa:c0:26:7b:92:68:bb:af:e3:
0d:58:19:a9:16:6e:76:fd:fb:28:ec:4e:43:1e:69:
cd:23:6b:ba:ef:bc:f7:a7:17:66:eb:30:7f:06:30:
55:c3:fb:d6:7a:84:e3:b1:a5:8a:47:09:5f:9e:29:
1e:25:9e:16:fd:20:81:61:d0:ae:45:8b:cc:b9:bc:
e4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:22:FC:3D:8C:73:64:A0:16:DB:DA:B0:56:10:C5:C3:4D:EB:BF
X509v3 Authority Key Identifier:
keyid:6F:AA:E5:56:13:FC:89:58:6F:7B:D6:DE:0E:DC:A0:97:B8:61:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6rlVhP8iVhve9beDtygl7hhWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/57889a-50df-4abf-81e5-1b12641f493b/1/b6rlVhP8iVhve9beDtygl7hhWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b8:e1:55:c4:de:e8:84:01:80:5d:17:cf:f0:96:dd:da:49:
76:2e:42:02:b7:8a:72:18:79:21:0e:26:0c:d9:2a:6b:e0:0e:
6f:80:21:93:da:c0:1b:0d:fa:0e:25:54:54:c1:b9:9c:74:75:
d2:d3:82:4b:c5:87:08:a4:f5:dc:89:4d:8e:a7:80:24:8a:9d:
20:da:ef:ed:82:b1:c6:94:4a:9e:d5:b0:e5:34:9b:98:e9:6e:
d9:70:4a:56:b9:7d:0c:b4:19:b6:ce:a9:21:50:81:3b:fc:4f:
59:19:dc:0e:33:d4:ea:e4:cc:d4:d8:71:a9:49:ac:e0:28:7f:
4a:da:3d:c3:e1:f9:7c:48:5e:8b:c8:9c:75:d6:08:ca:59:4d:
02:5b:ef:eb:57:b5:61:25:c2:61:2d:a0:b3:88:b7:e6:d5:a4:
2a:4c:69:d8:12:1c:3a:97:e1:6c:2a:88:ff:57:2e:67:d4:b6:
ee:43:ab:75:93:c2:ba:77:ff:cc:56:41:83:2d:45:2b:8b:92:
eb:52:f1:e9:82:a3:fd:23:12:0c:4d:ed:89:7a:09:a9:92:6f:
cc:30:00:f7:e0:15:4c:86:79:9d:b1:82:64:c0:1e:67:c1:0e:
c7:b3:fb:dc:7b:2d:72:a0:7c:33:6a:4a:b0:da:e7:99:b2:3c:
59:a4:10:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:58:54 2025 by rpki-client