Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
File: 6oRgBs-LnjiPMUUTWAklAs7METY.mft (raw, json)
Hash identifier: 2n6GTRT+Id78o/hZ5AgRbq4qJ4AKRbotWkwOCQoIGQM=
Subject key identifier: 2A:02:70:4D:5B:D7:A1:DB:8F:47:A0:4C:C6:78:04:70:89:F8:D0:C8
Authority key identifier: EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
Certificate issuer: /CN=ea846006cf8b9e388f31451358092502cecc1136
Certificate serial: 0196BDB745CA9DB867351A91D52ACE39EC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
Manifest number: 0D31
Signing time: Sun 11 May 2025 05:00:26 +0000
Manifest this update: Sun 11 May 2025 05:00:26 +0000
Manifest next update: Mon 12 May 2025 05:00:26 +0000
Files and hashes: 1: 6oRgBs-LnjiPMUUTWAklAs7METY.crl (hash: 8/br3fnhCIQu+Z/RvLESKxUE3vRH53ktkggoB0fhbkw=)
2: ProilHJF12XNjqluZhoel5qmzGE.roa (hash: vqODFTpOMw/oRhmj5asnKLbaDrVfLd9DrvwDm7QE1Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:45:ca:9d:b8:67:35:1a:91:d5:2a:ce:39:ec:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea846006cf8b9e388f31451358092502cecc1136
Validity
Not Before: May 11 05:00:26 2025 GMT
Not After : May 12 05:00:26 2025 GMT
Subject: CN=2a02704d5bd7a1db8f47a04cc678047089f8d0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:58:79:be:52:58:02:24:31:db:9e:e9:fc:
cd:c1:b6:94:a1:5a:0a:65:c5:c2:da:7c:2d:52:bc:
5b:fd:95:10:f4:85:0b:6b:f1:53:25:d7:79:c0:a1:
03:c9:56:6f:97:1d:ce:11:bf:e1:a0:83:97:bd:0c:
3e:be:54:cf:6e:cd:ae:61:33:34:59:67:fe:0a:1f:
99:69:d6:78:ee:50:8a:60:a4:f8:d7:0e:df:09:aa:
da:bf:6b:6e:47:ed:9e:75:af:58:b7:df:f6:e8:14:
7c:7c:00:bf:1c:bd:d7:b1:4a:a6:73:a7:65:8b:12:
69:41:8e:48:13:49:55:a3:78:f0:08:23:19:a0:5e:
3c:be:b4:5b:40:e9:0a:ab:85:58:7d:51:a1:06:32:
0d:3b:25:ce:e0:04:62:83:f8:51:18:51:53:9c:86:
b5:21:09:db:58:54:9f:4e:24:61:86:94:ef:2e:c8:
74:1f:5e:dc:e8:63:3c:b1:85:84:81:c1:14:61:19:
3a:86:b3:7c:39:47:f8:81:3e:2c:e9:c4:5b:c6:02:
a8:04:00:9b:27:e6:bb:66:1a:4a:4e:3d:70:0b:6b:
6f:e7:19:bd:b7:fb:f2:48:3c:b2:2f:6c:7b:fc:68:
e7:9f:c8:78:fe:1e:fb:8a:06:db:45:ce:f6:5f:1e:
e0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:02:70:4D:5B:D7:A1:DB:8F:47:A0:4C:C6:78:04:70:89:F8:D0:C8
X509v3 Authority Key Identifier:
keyid:EA:84:60:06:CF:8B:9E:38:8F:31:45:13:58:09:25:02:CE:CC:11:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oRgBs-LnjiPMUUTWAklAs7METY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/21cd77-1eca-46b9-9aba-f74cccc4e0a1/1/6oRgBs-LnjiPMUUTWAklAs7METY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:51:87:98:50:7d:41:4b:32:38:f2:06:10:94:73:14:e7:0e:
5b:3d:9c:ae:ba:d3:e4:0c:6a:bf:37:a2:63:e7:39:68:47:d8:
ec:77:05:ec:01:f2:ce:df:39:cb:1e:34:2d:b9:4b:a1:ff:97:
79:17:cd:36:8e:a7:b1:63:6c:01:70:91:1d:66:49:5b:dd:e8:
ae:eb:20:81:3d:6d:ba:58:f3:b0:76:fa:fa:c1:47:38:06:4a:
c9:e9:5d:1d:08:69:86:5e:10:f6:0d:cd:0c:71:2a:77:63:2b:
0c:66:9c:bf:8f:e0:31:eb:c6:a5:e3:fc:78:c8:26:8a:c4:fa:
a2:f0:e6:3a:41:44:a4:d7:bb:2f:17:b9:2f:1a:8b:dc:5a:dd:
9f:7f:6c:0f:f5:89:6b:8d:30:49:ce:cb:1a:6d:56:03:58:a9:
bb:f4:ab:82:09:56:99:fb:ec:6e:e0:a6:e7:27:c4:34:b4:8d:
64:ea:cd:89:8c:99:cc:6a:8d:83:72:2d:3c:2f:ac:f9:5d:e4:
01:fe:4b:93:34:77:9a:a5:d1:2f:bf:14:68:55:12:91:fd:5c:
45:2f:cf:86:b5:5b:f6:9c:e6:5a:64:f0:c0:a2:c4:c9:b0:ad:
8c:d4:07:ab:4f:ad:7e:18:c6:3d:94:18:e0:e6:2e:71:38:2e:
07:72:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:26:53 2025 by rpki-client