Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
File: S6_0itEUWxAMeD-3r7bzAovY804.mft (raw, json)
Hash identifier: 7Kd/C/UYC6ec9mmBeZz/JKXvbD4kdc3L4Vx6Z5mqTv4=
Subject key identifier: D3:5F:4D:C4:60:D0:98:0B:BA:D1:4F:03:D6:49:D0:E0:57:5F:A5:D8
Authority key identifier: 4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
Certificate issuer: /CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Certificate serial: 0196C26FC0DA0BF8AA0F8C49ECE173C81161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
Manifest number: 0C6F
Signing time: Mon 12 May 2025 03:00:25 +0000
Manifest this update: Mon 12 May 2025 03:00:25 +0000
Manifest next update: Tue 13 May 2025 03:00:25 +0000
Files and hashes: 1: 07VM5GQDyy0wcSk66eg9Nc4GYr0.roa (hash: tZR04Bh0g3Sbqjc1Ej/IqbvRwZJEdNyq0qHOrpzegq8=)
2: S6_0itEUWxAMeD-3r7bzAovY804.crl (hash: pLTw8GEFojcrZj5aX4O9ADZhMy8QH3DwNu6brBgLJLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:c0:da:0b:f8:aa:0f:8c:49:ec:e1:73:c8:11:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4baff48ad1145b100c783fb7afb6f3028bd8f34e
Validity
Not Before: May 12 03:00:25 2025 GMT
Not After : May 13 03:00:25 2025 GMT
Subject: CN=d35f4dc460d0980bbad14f03d649d0e0575fa5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:21:e5:ba:5f:7c:67:11:20:2a:6a:a4:33:
a5:05:c7:de:21:fe:be:b8:59:2c:da:fa:e0:72:cd:
aa:9a:23:a1:99:bf:e1:1e:b5:6c:02:48:f0:2d:67:
78:af:58:56:a1:4a:c9:6c:06:03:8f:48:6e:c1:9e:
37:95:a3:5e:88:3f:c1:a5:71:2b:66:a0:36:39:7f:
be:29:81:4e:47:4a:df:e6:37:17:56:3b:48:c7:f3:
15:33:42:32:be:27:36:a5:73:b7:f6:23:98:41:61:
a7:54:9d:04:24:3c:8e:90:80:ff:c7:19:92:74:fa:
3f:d9:2a:6e:12:83:f9:91:08:1d:83:78:0c:b5:6d:
d4:54:1b:1e:4b:74:c2:96:76:10:03:c9:bb:91:b5:
c4:49:ac:5f:71:c1:3d:3c:90:87:a9:e8:c1:bb:11:
4a:43:5d:49:58:cb:cb:3d:51:6a:0e:0c:3e:7f:b0:
f7:49:6a:a0:21:ca:1b:96:65:96:3c:0c:bd:29:13:
e5:b9:44:a8:1c:25:aa:3a:9f:9b:a4:09:2f:66:d9:
c4:fa:c1:7f:d7:4e:38:12:6b:9c:55:01:3d:07:97:
4f:41:dd:36:6a:eb:c2:cb:b4:2d:57:7c:42:a9:ad:
e9:e7:49:f6:cc:19:cf:be:f0:21:d1:ff:97:ef:83:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5F:4D:C4:60:D0:98:0B:BA:D1:4F:03:D6:49:D0:E0:57:5F:A5:D8
X509v3 Authority Key Identifier:
keyid:4B:AF:F4:8A:D1:14:5B:10:0C:78:3F:B7:AF:B6:F3:02:8B:D8:F3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6_0itEUWxAMeD-3r7bzAovY804.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e4ffc5-fb8d-4c40-8b73-bfeb7cea209d/1/S6_0itEUWxAMeD-3r7bzAovY804.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4d:9b:65:13:fc:fa:28:b9:2e:84:ed:e3:d6:70:9c:ac:36:
ec:91:8c:5a:bc:de:de:78:2f:71:cb:d1:ca:39:f7:51:c7:b9:
28:b8:9c:57:14:94:a1:b9:72:8d:1a:e5:f7:de:6a:49:88:09:
c8:24:40:66:f8:b8:40:87:51:16:9a:e4:e1:90:d4:29:ea:0d:
54:1a:53:b9:0c:7d:9c:8a:78:b4:ca:01:39:8d:4c:c0:96:d2:
83:0d:fe:3e:19:d7:a8:cb:3a:c6:a2:ca:19:0e:76:8b:58:2a:
0f:93:89:37:45:6a:e2:7e:b5:27:8c:72:69:05:d8:24:c5:de:
b4:02:c2:fe:0c:bf:65:94:62:33:c2:21:bf:fc:52:f1:88:8b:
8b:b8:22:95:5e:20:86:8a:f9:bd:b7:b9:05:ef:dd:a6:5b:f4:
2f:3d:68:7a:92:d1:ef:dc:ef:9d:c5:68:e3:ac:e3:c4:e8:6f:
0a:3b:a2:ae:34:4e:20:fe:46:6c:6d:b0:d2:f5:b5:68:6e:04:
08:bc:1d:41:6c:47:f1:1c:b5:64:58:28:40:03:e8:2e:b8:6f:
8c:9a:0c:16:1f:f5:8e:2b:18:99:45:d5:b3:7c:02:97:a6:f1:
86:c5:a9:3b:4e:b3:da:04:0e:bf:0e:ce:f0:33:34:36:3c:ec:
06:18:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:58:55 2025 by rpki-client