Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: abzqAQwzVU5iecI36Q07NUX3lqCgRjNI5aN/59WvMaI=
Subject key identifier: D6:1F:6C:BE:C0:33:F4:BC:A6:7E:7A:1A:2F:CB:7E:32:62:DA:38:0A
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 0196B1EAD117CB82C9840021AC80FDBC6CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 062B
Signing time: Thu 08 May 2025 22:01:18 +0000
Manifest this update: Thu 08 May 2025 22:01:18 +0000
Manifest next update: Fri 09 May 2025 22:01:18 +0000
Files and hashes: 1: casId6bSRHTNn5PL96DuG2TJvlE.roa (hash: L+JMLEBjCTLo3pT1VkKD/pB+PbvKkE5XXjy3KroLN1g=)
2: kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa (hash: 1P+cwreujhRRyFPgrb8zcY4I1d2u+NU9now7YdN+EEs=)
3: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: G+EPYzuUr9+9ObdvG1kFS4ICn3bWgK2/FuveZcSaGJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:d1:17:cb:82:c9:84:00:21:ac:80:fd:bc:6c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: May 8 22:01:18 2025 GMT
Not After : May 9 22:01:18 2025 GMT
Subject: CN=d61f6cbec033f4bca67e7a1a2fcb7e3262da380a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:63:86:67:b4:28:e7:c7:4d:16:1c:88:50:
77:8f:e6:8a:c7:20:ab:65:d3:6f:2e:f2:38:f2:57:
9a:e0:fe:5b:f3:ab:55:af:06:34:40:e9:ca:30:a2:
dc:eb:c1:10:61:61:3d:b7:fa:ac:b8:3b:c8:0d:7f:
31:12:c4:00:57:bd:4e:d2:65:ba:8c:a7:40:ff:df:
9d:39:45:88:ac:9d:3d:44:7b:67:22:36:70:95:35:
33:77:6b:40:b3:af:7e:03:b5:6e:82:4d:ef:1e:ee:
fc:2c:83:09:7a:41:5b:69:92:a6:e7:61:f6:25:fb:
cd:91:f8:d7:24:ee:75:95:91:bd:8c:68:16:62:33:
bc:c9:7b:62:dc:5e:c5:9e:5c:b9:2f:33:6f:c0:fa:
a7:29:b9:e4:13:20:d6:ff:ec:ee:2d:6a:ec:eb:65:
b3:5f:44:7a:88:9e:a0:84:97:bd:9f:37:79:60:54:
05:24:48:08:3e:6d:01:cc:fa:31:52:27:1b:04:86:
36:60:3a:13:91:93:70:2d:43:6f:fc:52:ec:93:6f:
3e:9a:04:6d:fb:58:c7:8b:14:e2:91:ee:2c:cc:5c:
2f:ed:33:d0:dc:3e:36:59:ba:de:2a:a7:88:69:be:
0d:cb:40:40:a0:3f:95:2d:3e:a1:97:80:d5:76:77:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1F:6C:BE:C0:33:F4:BC:A6:7E:7A:1A:2F:CB:7E:32:62:DA:38:0A
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:37:4f:c6:6d:c6:3f:d6:69:a0:2a:76:08:b1:3c:0c:b6:b2:
56:4d:46:2c:26:ee:1f:9c:28:28:3d:92:ee:ea:31:de:c7:89:
5d:4b:c2:c6:be:6f:13:3e:42:b7:66:2f:02:ee:89:f4:77:d1:
9a:6e:39:fd:ee:77:e0:b9:80:2b:f0:a4:84:cc:ee:e1:41:18:
7a:18:5d:8c:48:bb:47:42:57:70:3c:57:dd:0b:21:65:b7:7e:
0b:4b:6f:b9:ec:b3:66:aa:2e:61:1c:4a:5d:5f:26:90:d1:89:
3b:09:07:b6:7e:33:5e:db:65:db:94:16:f3:94:52:47:0a:0e:
73:d8:25:02:4c:a3:0f:30:c4:c6:85:d2:33:52:28:6e:93:2b:
5a:8d:21:74:44:b4:b7:a8:30:58:c6:c8:56:6e:7c:21:d0:eb:
d0:2c:00:a1:73:c6:8a:c0:b4:bc:06:4c:47:7f:ba:97:70:3d:
fa:2f:80:bb:65:f3:82:04:db:11:df:5c:d8:1e:8c:96:dd:27:
35:e5:6e:9b:70:52:cf:ef:6b:e7:aa:c1:03:af:c7:ab:7e:d5:
a7:68:31:00:1a:a4:f3:ae:fb:77:9d:03:f1:0a:e9:e0:c8:9e:
fe:df:13:64:14:6d:4c:05:01:b3:83:93:0a:fd:26:98:10:9a:
4a:3f:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:53:36 2025 by rpki-client