Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
File: 6w649Uh9dBqMxtbfOzkhke0-7T8.mft (raw, json)
Hash identifier: yLNs1VCYasFv+GdQqRDWQtfQv+Xu54J8zUfYAkvkuxU=
Subject key identifier: 6A:83:22:A1:93:81:0D:BE:08:E5:F5:0E:2A:12:29:19:C4:35:1B:0F
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Certificate issuer: /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial: 0196594B1870F55D09DEF0E9F0714478E461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
Manifest number: 0AAC
Signing time: Mon 21 Apr 2025 17:00:15 +0000
Manifest this update: Mon 21 Apr 2025 17:00:15 +0000
Manifest next update: Tue 22 Apr 2025 17:00:15 +0000
Files and hashes: 1: 6w649Uh9dBqMxtbfOzkhke0-7T8.crl (hash: l8YvGtW6iH7jDH9PYx6Z/uKZsBS703BYH+EjWXzT4nc=)
2: aNZ_w4ct0s6F9JNwvU81Pvph6xA.roa (hash: DMpkzc/SEQWOGXDtkCkwGEzbNT7zz+eYHoA6cnEiN1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:18:70:f5:5d:09:de:f0:e9:f0:71:44:78:e4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Validity
Not Before: Apr 21 17:00:15 2025 GMT
Not After : Apr 22 17:00:15 2025 GMT
Subject: CN=6a8322a193810dbe08e5f50e2a122919c4351b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:67:57:b2:17:8f:ca:57:66:f1:b3:06:67:
c9:e3:e8:e4:83:d6:47:ad:36:f4:c0:d0:67:fe:41:
10:1d:f9:48:58:b9:ef:7e:91:80:b8:f4:83:89:32:
30:7a:1d:54:9d:01:db:31:90:bd:d1:9f:16:bd:25:
0e:da:7e:eb:97:5a:db:62:a3:56:bd:37:60:ff:87:
bd:a4:a2:4b:04:b6:20:19:92:2f:f1:0f:42:14:8e:
15:ee:77:8b:92:2c:a8:b0:e0:2b:cd:51:85:35:e0:
25:57:85:92:58:c7:ae:72:8c:12:5d:e0:78:7a:19:
75:fa:88:95:fe:7d:90:39:f4:74:52:a6:40:64:90:
05:00:e2:6f:df:5d:ef:db:8c:70:b3:d8:f6:64:48:
df:dc:ec:0b:1b:20:8e:bc:b5:9d:e6:15:e3:46:cd:
16:e2:c2:3d:4b:3b:78:ea:c0:47:b7:44:b2:20:21:
0f:ce:2b:fe:86:28:b8:82:56:8a:d0:ba:eb:ea:72:
78:72:9c:67:6d:69:0a:20:8e:2b:ad:de:0e:14:f9:
20:bb:f3:2f:a8:8f:4d:fc:1c:9c:34:d3:ff:49:76:
c6:e5:02:a0:dd:45:d7:13:77:31:d1:1f:3a:4b:e6:
58:44:d6:24:68:f0:1f:67:b9:78:f8:43:99:07:bd:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:83:22:A1:93:81:0D:BE:08:E5:F5:0E:2A:12:29:19:C4:35:1B:0F
X509v3 Authority Key Identifier:
keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:9c:1b:5a:e7:ca:fa:74:e8:df:54:d4:81:af:55:7e:18:09:
fb:1a:ab:fb:e1:81:bc:93:9b:26:0f:30:33:46:8a:17:b4:83:
79:bc:23:2d:78:ad:3b:ad:61:2a:f4:d9:35:86:4d:4e:8d:61:
19:27:c3:d7:7e:d9:26:25:3d:0f:3e:bf:62:0a:9e:28:f4:1d:
ba:f7:88:2c:ff:75:0c:25:69:c0:54:42:c1:31:3f:02:c5:eb:
ed:ba:2b:a9:9d:34:5d:3c:98:48:41:e8:2e:a8:d8:0a:a9:9d:
cb:26:00:14:d5:bb:ac:a5:95:a7:81:36:7f:81:7d:b9:f7:48:
5d:ce:ff:a7:db:92:9f:87:46:57:27:7d:66:18:d5:0f:48:f6:
a7:e7:2e:52:69:e6:dd:aa:56:35:ef:00:0c:dc:8c:71:39:37:
db:fb:67:99:1f:7d:e7:82:c9:74:9b:9b:5a:20:da:f6:3a:ea:
48:89:b7:2d:53:35:b2:46:3e:5c:31:2d:b9:0e:83:3d:fa:33:
2c:3d:1c:1c:26:4c:e4:3a:93:0b:e6:6b:1f:36:29:ee:ee:de:
0d:b1:ec:f7:ec:85:ce:58:9c:8a:bc:d2:e4:5e:09:44:47:f3:
00:26:08:62:cb:39:5c:97:5f:72:ca:bd:c7:97:a6:ed:3a:2e:
c0:ea:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:38 2025 by rpki-client