
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
File: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json)
Hash identifier: DIqXDbKiRdXcgi7W4aT/Oq6goa8yCT1SyWVh/jQD9Og=
Subject key identifier: D3:1A:44:0D:21:DA:48:23:C6:44:2A:F9:F6:88:31:E4:9D:47:5F:D9
Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Certificate issuer: /CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Certificate serial: 0196439F1A3B310D2CA9059BBB61C1EA1C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
Manifest number: 02B5
Signing time: Thu 17 Apr 2025 12:00:22 +0000
Manifest this update: Thu 17 Apr 2025 12:00:22 +0000
Manifest next update: Fri 18 Apr 2025 12:00:22 +0000
Files and hashes: 1: DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa (hash: HmRJXl6KdbWQ5yFSi3ORZiwzeQcQdEBbSpqG5+7FJoc=)
2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: cSrfu3eS36QH5JXleXy7OIpufkKbA3Bj8Q5o1VyesPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:9f:1a:3b:31:0d:2c:a9:05:9b:bb:61:c1:ea:1c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Validity
Not Before: Apr 17 12:00:22 2025 GMT
Not After : Apr 18 12:00:22 2025 GMT
Subject: CN=d31a440d21da4823c6442af9f68831e49d475fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:c7:a2:23:97:ef:4d:3a:58:b6:77:61:30:
00:7f:d1:00:2b:19:43:a1:24:54:db:a8:41:18:0d:
2d:69:35:e0:76:dd:2f:ee:d9:ac:d7:5b:fc:6e:ba:
3b:15:ac:48:84:09:39:a5:51:71:72:8d:df:d5:31:
a4:d4:40:29:9e:19:a7:22:39:29:bc:5f:75:e1:a2:
81:5b:9e:9f:82:f1:4c:17:e7:82:e1:0c:5b:b5:97:
7a:c0:ce:f5:20:14:af:e5:b1:6a:ee:06:01:60:9a:
39:5f:fe:5c:4b:20:01:63:a8:ba:2a:5c:ea:d2:d5:
d1:20:74:17:e3:ad:d1:44:8a:af:64:cc:53:21:9a:
86:03:63:f5:b4:52:e7:3a:0e:60:7c:46:09:32:cc:
89:7e:27:d9:78:bd:d6:f1:cf:6a:d7:9c:68:89:6e:
48:8c:fb:01:92:13:64:fd:69:b7:f9:6e:6d:65:9a:
29:37:17:bc:05:bf:14:63:62:79:0a:d8:7c:39:d4:
86:b0:a8:d4:bb:2d:85:67:f4:a8:e2:6e:f3:1e:02:
80:88:fb:a0:ab:2f:2f:d5:47:18:2d:92:59:48:0a:
d8:d7:65:a0:a0:90:85:f6:57:3d:80:0d:96:dd:68:
c5:a1:de:dc:6d:4e:e8:9a:74:cb:f3:b9:5c:33:1b:
16:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1A:44:0D:21:DA:48:23:C6:44:2A:F9:F6:88:31:E4:9D:47:5F:D9
X509v3 Authority Key Identifier:
keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:74:7d:24:c6:6b:30:84:bd:10:1b:0c:b6:24:4b:5f:5c:bf:
3e:4e:41:b8:33:1f:ef:e9:c9:84:2c:0d:fd:09:77:55:ce:45:
ad:7b:2b:d6:a3:74:ce:e8:0a:c1:26:68:91:83:5e:df:e5:89:
5d:69:73:21:35:21:d3:51:8d:d1:8b:57:a6:9e:e2:64:bb:92:
cd:ca:cb:a5:9c:e0:84:91:43:69:59:95:8a:b0:2f:34:5d:60:
39:a4:00:02:b4:fd:98:eb:f5:cc:ac:1b:c8:c4:bc:8a:69:58:
64:8f:a4:17:0c:d2:48:87:44:a2:f7:fc:13:cb:7f:85:49:87:
b4:47:65:9d:09:1f:e0:47:09:e4:cf:42:56:31:8c:af:46:7b:
c7:45:d8:c3:60:98:ef:6c:29:da:4f:7a:49:0f:93:3a:f8:03:
bc:12:0a:93:23:7f:13:03:d6:ab:ed:37:00:04:74:63:88:6e:
9c:d2:0d:51:4b:ea:16:f1:65:fc:d2:0f:2b:c7:e7:8d:8f:86:
de:97:f7:47:37:05:ff:bf:a5:ce:53:14:9a:1f:dd:99:86:09:
a0:2e:82:15:18:09:a7:62:90:6b:02:87:13:c0:58:aa:aa:9a:
47:60:b4:cf:c4:9a:0f:44:f3:6c:2d:8d:29:e8:c9:78:96:5c:
9d:a3:d6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:34:14 2025 by rpki-client