Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
File: 6-MkxP_wckDusfAOY-Y198uQL5g.mft (raw, json)
Hash identifier: tyDwAPCql5L0IWuSnkXmubjTXqbsxI/GlFHyEtGi0XI=
Subject key identifier: 13:96:1B:95:8A:38:B9:2F:DE:CB:C5:17:B7:52:65:3E:D2:E0:BB:F3
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial: 01958F2A98EA2F35160781F8B096485B145F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
Manifest number: 0BCE
Signing time: Thu 13 Mar 2025 11:01:28 +0000
Manifest this update: Thu 13 Mar 2025 11:01:28 +0000
Manifest next update: Fri 14 Mar 2025 11:01:28 +0000
Files and hashes: 1: 6-MkxP_wckDusfAOY-Y198uQL5g.crl (hash: Llu35zJC98mlZnXKyTW5bq+tbTP2jKZVP+64D6O70Yc=)
2: DFaeiuG21JQh7LgP1wreIhkJwBQ.roa (hash: wxSUZZvHSXnKRZev5eL/xbvmkg1KjmEbGMojvHEIEo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:98:ea:2f:35:16:07:81:f8:b0:96:48:5b:14:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Validity
Not Before: Mar 13 11:01:28 2025 GMT
Not After : Mar 14 11:01:28 2025 GMT
Subject: CN=13961b958a38b92fdecbc517b752653ed2e0bbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:bd:f8:a2:19:fc:e9:a0:c7:21:9f:5b:8d:
b3:e8:3a:d7:8a:38:9e:f3:6b:99:5d:7a:40:4f:2f:
37:73:40:03:a5:3e:d1:3f:9d:35:e7:f5:c2:dc:e9:
09:a3:5e:7a:d5:8e:df:93:a5:63:be:aa:e3:60:00:
95:7c:93:a3:e7:05:2c:7f:39:78:c6:e8:01:9a:d4:
f9:fc:97:98:d5:5f:c6:51:7a:da:57:16:27:e7:15:
64:5f:59:ef:74:a4:89:b0:6e:ec:93:f3:6e:5b:4c:
54:1b:d2:9f:79:9c:41:b9:60:22:dd:df:78:91:8d:
f4:29:a5:5f:f6:bc:ca:c0:b3:11:29:6d:74:1d:74:
00:2c:31:9a:92:e3:7d:51:58:9a:ef:69:26:dc:4d:
b0:06:cf:16:30:3d:a7:5b:e7:0a:9d:95:3a:c4:69:
6b:df:45:e2:b8:01:e2:9d:d4:18:6e:d9:cf:58:86:
18:1f:1f:5b:8a:c2:db:53:4f:c1:ac:eb:40:c9:72:
75:b1:d3:95:53:d7:0c:86:11:5a:54:e5:fe:11:aa:
6b:b2:b4:ee:7e:0c:0d:03:ea:45:d0:e6:51:9c:dc:
99:f7:2a:0f:65:38:4a:8c:0e:21:18:a1:23:bb:a2:
62:06:27:09:5c:84:5d:4f:78:db:24:6a:60:ba:25:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:96:1B:95:8A:38:B9:2F:DE:CB:C5:17:B7:52:65:3E:D2:E0:BB:F3
X509v3 Authority Key Identifier:
keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ff:0d:2a:af:63:39:bf:87:6b:62:e7:60:80:94:eb:2c:ed:
6b:9a:a5:06:2f:f9:53:f7:15:e0:f5:81:1d:42:d1:fb:67:2b:
5c:6d:3f:47:36:74:af:e3:e1:f4:80:69:6e:73:10:9e:7d:36:
8f:16:c6:c0:f0:49:c1:31:24:18:d1:75:a8:7c:dc:4e:d5:2c:
9c:ee:b1:33:65:a2:4c:f5:53:55:d0:0b:5e:c1:96:6b:6d:3e:
51:fe:f3:87:00:e5:2c:27:1d:98:0d:b5:ff:d3:86:a0:f0:e1:
86:80:7a:db:c5:e7:49:a9:97:e1:2e:2d:a2:94:f9:33:bd:90:
e9:64:e8:54:8b:e7:80:80:01:85:ca:93:ce:fd:83:a7:f8:48:
4d:26:57:15:ab:94:23:47:31:f1:0c:63:d9:7f:f9:9d:db:05:
8f:e3:1e:7b:95:91:20:f3:8f:69:c4:a1:f0:cd:59:58:e1:59:
85:01:08:9a:a7:5f:49:4d:d0:a0:4e:e5:27:8b:ec:14:0b:8d:
6f:b1:98:ad:69:8a:a1:1b:50:19:e7:56:f1:78:bc:bf:7d:70:
ed:78:01:39:7d:db:eb:09:72:8e:20:d8:e3:dd:05:2e:92:5d:
fc:94:2a:6c:24:fc:7b:36:d0:dd:3b:f2:b9:34:3f:b5:38:22:
9a:a4:1f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:06 2025 by rpki-client