Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
File: 6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft (raw, json)
Hash identifier: g9Ykz+rNz9mmYo6K+fz1KLcUpJn6rlhuGgIjEehIHd8=
Subject key identifier: E4:2E:BB:4C:5C:5B:47:A6:D5:E2:35:57:FA:E7:9B:2F:FE:5D:A9:E2
Authority key identifier: E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33
Certificate issuer: /CN=e8697eeb84673d81c3b7c07166d96cac1645f833
Certificate serial: 0196BE25B74BDD4EAEE0718282F66C004E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
Manifest number: 5A
Signing time: Sun 11 May 2025 07:01:04 +0000
Manifest this update: Sun 11 May 2025 07:01:04 +0000
Manifest next update: Mon 12 May 2025 07:01:04 +0000
Files and hashes: 1: 6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl (hash: KhOCuIcN8PurGcKoo8QktanGHM0qr3kPevydraP5rjs=)
2: gPEIYB37Zc_OzakKWk3m7XL2shI.roa (hash: ogeQ+ihI5RkgX54TXQ3mk3J6Yi4w+GDOualWoIRTMes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:b7:4b:dd:4e:ae:e0:71:82:82:f6:6c:00:4e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8697eeb84673d81c3b7c07166d96cac1645f833
Validity
Not Before: May 11 07:01:04 2025 GMT
Not After : May 12 07:01:04 2025 GMT
Subject: CN=e42ebb4c5c5b47a6d5e23557fae79b2ffe5da9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:9c:74:81:f0:33:1d:85:0d:0d:85:ef:b1:
a5:f9:bf:73:08:67:7e:5d:ce:d1:80:47:67:f1:ec:
3c:9d:ce:bd:f0:5d:6c:ce:24:57:44:11:48:6d:18:
93:38:76:a7:bd:0f:68:de:2b:de:cb:6f:8a:74:c7:
d6:58:6b:36:d9:98:aa:2c:4a:d2:56:50:82:99:78:
a9:c2:00:9d:b9:25:27:6d:21:5e:a5:e9:75:62:9f:
72:45:1a:8d:dd:01:7e:99:7e:b8:d1:6f:a0:7d:3a:
31:63:f5:c4:cb:af:2f:89:e7:39:67:e5:55:92:f3:
2c:ca:49:44:76:d8:02:e8:aa:08:bd:86:83:09:3c:
ea:19:b6:97:e9:35:e2:d6:ae:ba:4b:21:9d:3e:6d:
81:09:e6:a9:9a:fa:39:55:7d:e2:c1:5a:ac:ef:a6:
80:71:40:20:93:dc:63:c8:69:20:7c:ef:72:4c:8e:
6c:51:1b:51:8b:de:3e:3d:b6:07:29:6a:a4:34:24:
b5:92:45:3c:29:2a:9f:2f:0b:b0:14:4d:7f:1b:21:
a5:1c:3b:7a:3f:52:34:98:65:a6:cb:14:4f:05:fb:
93:c4:91:27:2b:08:a1:d7:85:d8:7d:d6:b7:98:73:
9b:87:0f:9e:72:63:a2:35:07:dc:00:a6:ee:24:f3:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2E:BB:4C:5C:5B:47:A6:D5:E2:35:57:FA:E7:9B:2F:FE:5D:A9:E2
X509v3 Authority Key Identifier:
keyid:E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:95:d3:00:32:2d:33:d1:da:28:3b:b0:04:4d:74:01:47:d7:
df:68:b2:5f:e6:4b:dd:81:5a:21:35:87:98:ad:a6:e4:19:79:
9c:4e:75:82:59:e2:f2:df:2b:78:ea:ba:7f:19:92:e5:96:df:
e4:58:eb:68:0f:15:9f:b9:44:1f:81:7b:c1:61:8a:87:da:9b:
46:bb:19:d6:b8:79:ff:fd:99:9d:d8:2b:16:3f:f4:59:e4:ef:
b0:cd:6b:f6:22:e1:7f:8f:26:9d:35:01:9d:bc:af:e4:ce:08:
7f:9b:d7:03:e2:b9:dd:4f:77:3b:c5:93:77:d6:6c:10:bb:8d:
e8:29:17:28:4e:a6:a1:11:55:c5:cf:88:59:d9:e1:1b:f3:fd:
89:ce:76:c7:7e:fd:dd:9a:24:2d:5f:13:4c:e2:b4:e6:8a:85:
96:3c:1c:27:3a:87:b7:87:0a:e6:fa:76:10:f9:1a:4a:b5:5d:
c1:32:06:3b:88:50:14:d8:06:85:65:59:82:59:e5:fe:a6:f8:
62:86:8f:ae:1a:4a:ea:62:89:18:2d:a4:cc:02:19:00:b2:75:
22:fe:85:9e:b0:0e:99:51:99:52:87:34:81:3d:50:45:87:15:
e6:80:fb:43:4c:c5:cb:5f:d3:10:84:8e:6b:d4:6c:ef:47:f4:
f0:c3:a7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:37:53 2025 by rpki-client