Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
File: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft (raw, json)
Hash identifier: jHIa9Ca2TXivd267F0zyCmoqMZqNpCC8uNTVuDvRdR8=
Subject key identifier: 7D:8F:04:33:83:F4:91:F3:E1:B5:99:E2:B4:81:72:F6:B6:D8:38:37
Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Certificate issuer: /CN=e994e74064158e97904990947510eb9941986ca1
Certificate serial: 01958FCED9FB0D3DDDF574A97AD7D613E387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
Manifest number: 0433
Signing time: Thu 13 Mar 2025 14:00:52 +0000
Manifest this update: Thu 13 Mar 2025 14:00:52 +0000
Manifest next update: Fri 14 Mar 2025 14:00:52 +0000
Files and hashes: 1: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl (hash: fXquWct1K9uu5VYKQFalLrTD5KmSkmcwUVOLREQ7K8c=)
2: ADjr28xDnqYwCSe2YSx596u1Q58.roa (hash: ny7Wak3ibQOHmIHDaed11LtkQKFtuzxAsC/NXeIXupI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:ce:d9:fb:0d:3d:dd:f5:74:a9:7a:d7:d6:13:e3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e994e74064158e97904990947510eb9941986ca1
Validity
Not Before: Mar 13 14:00:52 2025 GMT
Not After : Mar 14 14:00:52 2025 GMT
Subject: CN=7d8f043383f491f3e1b599e2b48172f6b6d83837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:ce:6c:24:43:44:5c:d1:27:7f:d8:fd:53:
76:3d:eb:0d:5b:a6:63:dc:72:f1:c7:53:a7:af:43:
dc:59:01:53:01:c0:d5:ff:fb:2b:c9:14:65:bf:74:
32:a6:2b:29:9a:93:93:ca:48:ba:27:b7:c1:2b:bf:
87:96:b6:30:1c:b4:90:20:74:45:b9:e0:b1:9f:65:
b5:e3:79:e3:a1:89:21:64:92:06:ad:32:d8:4e:16:
27:f5:3f:69:37:82:16:c3:e4:e6:59:1a:b5:8e:7a:
60:c6:4f:9b:3a:82:16:08:f5:a2:21:d4:92:e6:81:
d7:95:7b:89:9a:9f:a1:d0:e9:65:a7:00:30:cb:d2:
2c:e6:13:a2:05:78:46:7a:b9:0a:0a:ae:68:36:da:
6f:39:41:61:a8:7d:55:fe:12:27:64:e9:e6:f6:fd:
22:3a:a1:11:b8:1f:49:3c:6d:5a:cb:8f:c0:f7:53:
41:81:27:9d:29:57:b1:0d:dc:d0:ba:8e:8c:08:1a:
5a:4b:ab:e1:b0:27:9d:29:15:b4:1a:f7:4a:1a:23:
9f:67:43:45:69:fa:8a:cb:2d:6a:7d:45:c3:ee:c6:
0a:2d:5f:22:d4:51:69:8f:e2:cc:15:8b:e7:3e:2b:
9a:00:40:ab:46:c8:93:a0:62:e3:cf:87:77:d2:c0:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8F:04:33:83:F4:91:F3:E1:B5:99:E2:B4:81:72:F6:B6:D8:38:37
X509v3 Authority Key Identifier:
keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9b:91:13:01:81:ed:7c:bf:b9:d3:0d:7c:91:37:fd:5f:5a:
e7:96:8f:6c:d4:03:dd:47:8e:e9:ca:ce:cb:bd:b6:79:f0:09:
bf:a7:0a:b6:68:bb:83:a3:7f:f5:25:dd:23:d5:14:92:28:79:
7f:2a:21:ca:b7:51:6d:5d:3f:c6:83:e3:dc:bd:34:05:37:1d:
39:c2:5b:7b:1f:db:70:b6:97:7d:7f:5b:f7:d2:13:3f:c4:9e:
b7:df:7d:ab:43:2c:47:85:1f:69:1a:f5:28:13:ea:83:e6:20:
90:f7:e6:90:35:3b:a0:ac:b9:c7:07:51:3c:e4:fd:bb:d4:57:
99:ca:53:f8:b4:f5:10:6b:d1:80:5a:48:35:2a:08:6b:bb:fe:
10:1c:a2:f7:03:75:9f:eb:86:00:b4:e2:31:1a:f6:6b:64:59:
3a:38:58:05:a8:b4:f1:ec:85:3c:24:7c:d2:b1:73:b0:fd:b2:
75:54:0f:e0:f4:7a:a3:bf:23:f5:25:96:48:76:75:92:dd:2c:
53:ab:b2:2c:23:cc:90:dd:7d:a9:6f:d9:bb:f6:31:c8:d9:4a:
e2:65:74:3d:92:cf:70:9f:d4:00:e7:dd:fb:2e:44:bd:de:f8:
50:93:c3:6e:61:6e:2c:ae:dc:74:fe:8c:2e:14:2f:dd:4b:68:
c3:79:27:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:21 2025 by rpki-client