Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
File: 6-T90XLfhZdWyoUd3eE2cPSBfuA.mft (raw, json)
Hash identifier: evsfhy8HBQ5L5ywLHcTVcUpbbkBXH9rSEudX1LYrbbQ=
Subject key identifier: BF:33:19:68:3D:F5:A0:8D:C6:B1:C9:F2:0D:CC:B4:A4:09:4D:C6:16
Authority key identifier: EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
Certificate issuer: /CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Certificate serial: 0196C2DD86B1B01CFA803A79844E5D090D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 05:00:19 +0000
Manifest this update: Mon 12 May 2025 05:00:19 +0000
Manifest next update: Tue 13 May 2025 05:00:19 +0000
Files and hashes: 1: 6-T90XLfhZdWyoUd3eE2cPSBfuA.crl (hash: Lqb+tOq5npbO5IV1Hn/UX8OmL/3fe9OEEuOGUqJclGY=)
2: Z9aXtfZOLHLUJRH7QqPi1mqGj3U.roa (hash: pwgtrLZ9ZWVWEXXmTENsA08mvoGu1JfrrcaBMhazJW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:86:b1:b0:1c:fa:80:3a:79:84:4e:5d:09:0d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe4fdd172df859756ca851ddde13670f4817ee0
Validity
Not Before: May 12 05:00:19 2025 GMT
Not After : May 13 05:00:19 2025 GMT
Subject: CN=bf3319683df5a08dc6b1c9f20dccb4a4094dc616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:56:38:11:ac:da:45:bd:1f:05:86:2f:d9:
cc:38:e8:17:e5:3c:18:a0:06:8f:28:9a:84:59:20:
4a:3e:e5:64:18:c7:9a:54:22:72:4a:a7:f1:3f:5b:
1d:61:0d:e1:e3:e0:92:e6:a2:f5:b0:79:78:9a:37:
ff:84:74:5c:33:98:99:c0:5b:7c:88:0f:04:90:e2:
6d:df:0f:2a:a6:50:a0:a2:d8:e8:e3:29:08:a5:58:
15:0e:98:63:fd:35:02:7f:b3:ff:07:f0:9c:a6:a9:
e4:12:f1:f7:6b:5e:24:58:e6:0f:59:35:a0:72:cd:
54:39:f0:ed:73:50:8a:a7:51:95:be:30:ae:63:04:
09:98:b0:7d:72:77:8a:a1:7c:dc:36:ad:b9:d4:75:
68:f0:3b:31:3e:32:ea:f0:ac:4e:92:3f:57:5a:83:
f2:6b:48:33:dd:e3:76:21:f7:a2:d4:36:a3:37:2e:
17:96:7b:fe:93:8a:42:50:4d:7e:7c:be:a7:79:64:
d1:94:0a:34:b4:9b:0e:fd:77:c7:e1:30:9c:65:b1:
dc:f6:69:72:35:e2:6c:df:64:74:8c:3e:bf:eb:b3:
d4:5b:f0:2d:ec:75:3f:88:d0:70:2c:4d:55:91:aa:
6a:c8:fa:f3:5b:32:06:ab:2f:9d:d7:54:e3:4a:13:
71:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:33:19:68:3D:F5:A0:8D:C6:B1:C9:F2:0D:CC:B4:A4:09:4D:C6:16
X509v3 Authority Key Identifier:
keyid:EB:E4:FD:D1:72:DF:85:97:56:CA:85:1D:DD:E1:36:70:F4:81:7E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-T90XLfhZdWyoUd3eE2cPSBfuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5969f-c016-4533-9cba-696703736621/1/6-T90XLfhZdWyoUd3eE2cPSBfuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ba:41:15:e1:14:e4:8b:10:54:02:9f:0f:34:9d:1d:05:4d:
44:db:fa:e8:98:87:35:a1:a5:d4:69:21:29:46:67:d6:12:a6:
fb:7a:ed:91:24:43:c9:14:85:d5:18:50:5d:43:56:b6:4d:38:
45:7e:82:c8:b0:23:c8:a6:df:69:57:21:47:0b:37:f8:f5:3e:
86:1f:a9:ae:d1:d0:94:6e:26:5d:88:82:ab:eb:ac:68:4b:bc:
61:44:e7:ff:ac:65:7d:60:83:11:fd:75:56:b3:ef:cb:fc:ac:
ff:c6:33:c8:45:38:e1:06:7a:b1:92:60:28:24:49:69:de:2a:
c8:bf:40:b1:19:d1:af:f1:3a:63:cd:70:82:d1:82:f3:df:6b:
73:5c:2c:a4:5a:93:c1:5f:f9:5f:33:ac:f8:da:d0:ed:93:cf:
41:31:65:16:0c:28:ed:01:98:55:e1:a6:49:11:33:21:12:3b:
47:7d:4c:07:ea:2d:b1:9a:32:08:1b:a2:5e:b3:3b:87:3c:a5:
04:0b:a7:d6:cb:5c:78:d1:48:98:be:bc:f5:37:d1:1c:b2:db:
77:59:86:d0:88:15:98:04:83:2d:c5:5c:90:97:54:51:9d:c5:
ed:03:37:6e:62:fb:1b:42:d6:f8:e3:e4:94:af:60:a9:48:22:
56:ef:32:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:12:26 2025 by rpki-client