Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
File: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft (raw, json)
Hash identifier: SblqQR3sumnKxPs038l13NlKmfMr+v/ajroo/P1Okf8=
Subject key identifier: 66:D5:C6:DD:D7:8D:4F:29:BA:39:ED:14:2D:97:36:40:DE:D5:1D:DB
Authority key identifier: E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
Certificate issuer: /CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Certificate serial: 01965538570001263785D3530996AE78874E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
Manifest number: 0807
Signing time: Sun 20 Apr 2025 22:01:17 +0000
Manifest this update: Sun 20 Apr 2025 22:01:17 +0000
Manifest next update: Mon 21 Apr 2025 22:01:17 +0000
Files and hashes: 1: 6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl (hash: c/E9Q4QjcVia2B6chZQQoCsmEzpjOOnnv0KeFB6oYI0=)
2: dGlwmlHKZ3Y604U9jPtZsAf1JsI.roa (hash: g6t/bPLMAjqWES1EVRCv4fx129KuT8ofKzhDnvgk+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:57:00:01:26:37:85:d3:53:09:96:ae:78:87:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8393bd1305f6cc4439192119c605f44bbf09bc9
Validity
Not Before: Apr 20 22:01:17 2025 GMT
Not After : Apr 21 22:01:17 2025 GMT
Subject: CN=66d5c6ddd78d4f29ba39ed142d973640ded51ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5e:0e:01:d5:0d:35:aa:5d:a4:9e:6e:55:c2:
e0:9c:ed:7c:69:c5:7a:5d:89:ff:9c:fa:1d:8f:e2:
81:a7:42:28:e9:75:f6:59:01:d8:49:e8:5c:1c:87:
fd:b6:ff:55:8c:61:8f:50:7b:e1:79:3a:c0:11:58:
fd:24:cf:47:79:9b:ac:5d:24:fd:e9:0a:b1:a7:dc:
ba:84:66:47:5e:f6:20:23:78:ce:3e:11:ef:bb:f2:
26:a7:06:78:ad:60:bb:fb:91:b7:87:64:52:7d:a1:
1a:8d:2d:8f:63:e8:0b:cc:de:4c:a3:e3:67:1a:9f:
e2:e0:09:0a:f3:5d:4f:04:14:28:8a:3c:1a:ec:5b:
9a:c7:be:26:05:7b:13:fc:9e:ed:05:ff:69:90:dd:
df:e5:c2:d1:96:9c:a6:86:83:a4:4f:94:11:24:85:
aa:0a:0c:3b:eb:0d:b9:91:b7:62:25:ce:4f:c9:d5:
ca:5d:dc:72:89:5c:56:f7:9e:37:2f:bb:b6:1a:36:
62:cc:88:8a:23:ed:03:b5:3a:be:3e:42:2f:d1:51:
a7:51:c5:0c:39:e9:17:5f:ab:e4:36:2d:26:34:18:
7a:c6:3e:78:96:72:87:24:16:25:c7:97:5b:b6:1f:
6d:1a:69:de:22:d6:00:22:4d:31:48:04:97:5c:a0:
7d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D5:C6:DD:D7:8D:4F:29:BA:39:ED:14:2D:97:36:40:DE:D5:1D:DB
X509v3 Authority Key Identifier:
keyid:E8:39:3B:D1:30:5F:6C:C4:43:91:92:11:9C:60:5F:44:BB:F0:9B:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dk70TBfbMRDkZIRnGBfRLvwm8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/458011-5de1-4680-8255-b06fda01f46c/1/6Dk70TBfbMRDkZIRnGBfRLvwm8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:eb:25:48:15:11:cb:44:dc:1e:1d:fd:50:d2:4e:e2:96:c7:
0a:7c:42:ec:84:d3:00:6a:f4:6b:b6:6e:90:8f:df:57:f8:b1:
cd:e0:b5:aa:c1:f3:59:11:5c:bb:ed:05:74:d6:2d:0e:7d:10:
aa:1d:57:9a:a3:b9:7a:05:48:58:5a:de:1d:52:0b:2c:a8:80:
89:09:88:6c:1a:bb:64:11:58:e2:60:bd:1e:47:aa:c9:86:44:
55:34:00:b2:8d:9f:18:00:43:ad:55:cd:82:57:6e:45:20:18:
5f:6b:d6:95:a9:d0:e0:81:89:dc:f8:34:7d:a0:7a:ec:62:14:
91:56:03:5c:cb:84:2a:4a:e8:62:ec:b5:af:46:c6:aa:65:30:
6d:ad:05:2e:2f:99:42:4e:11:3a:8f:30:9b:72:d5:41:a0:c7:
aa:8f:12:4d:19:d9:ae:95:c0:68:dc:d0:50:48:5f:60:04:6d:
a6:7d:a3:c7:74:2d:8a:83:26:01:8b:2b:28:50:a5:52:48:f7:
96:31:47:41:7d:97:ed:b2:b8:ed:24:61:f9:31:07:06:0f:88:
b8:12:53:2a:09:d4:42:a1:fa:5a:84:af:9b:94:ff:e6:37:db:
fa:73:5e:cf:47:00:cc:9f:87:78:5f:bd:60:a0:87:64:40:ff:
a4:11:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:25 2025 by rpki-client