
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
File: 6czfaVmJN585hMGGQek367aCJZs.mft (raw, json)
Hash identifier: eNgq2eljx5NQ89ADdmtt7VvcURdVpD+XoHx39XH9mo0=
Subject key identifier: 32:F6:C9:A5:BE:09:BE:16:2B:2F:93:18:60:13:7F:58:BE:B5:63:B7
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 0196B9DAAAAE325E4E81B22AB5AC6164F13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
Manifest number: 0483
Signing time: Sat 10 May 2025 11:00:37 +0000
Manifest this update: Sat 10 May 2025 11:00:37 +0000
Manifest next update: Sun 11 May 2025 11:00:37 +0000
Files and hashes: 1: 6czfaVmJN585hMGGQek367aCJZs.crl (hash: qFafdbdVW18u+rQqac3nXIO+K1AmxVoNstbdfB8G3nI=)
2: UonFdVxRB-HOOyUD446SJsVcabg.roa (hash: 11kZuTKWQH6OP3cuxM8FLHDKW4RaMfeFdGuijw+tO1s=)
3: e2Jeqb9Uzg6EG4YHbxV47PgTWzk.roa (hash: j8o4Nte6arS2S28o9H96r23GZrhvfGEjib56R7pWjcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:aa:ae:32:5e:4e:81:b2:2a:b5:ac:61:64:f1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: May 10 11:00:37 2025 GMT
Not After : May 11 11:00:37 2025 GMT
Subject: CN=32f6c9a5be09be162b2f931860137f58beb563b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:e4:ab:62:5a:a9:9b:02:af:fe:db:a4:37:
f8:8a:f2:2d:09:f7:03:ac:62:2f:a6:65:f3:55:c4:
b7:a7:f9:fb:c3:70:df:d3:41:57:cb:45:74:3b:6c:
e9:62:4f:73:35:34:aa:a2:56:e6:a5:f0:19:b1:9e:
85:c8:9f:07:86:a7:57:2c:6c:b6:76:20:40:c9:a4:
50:69:bb:e9:d0:0c:0e:12:1e:d0:26:80:c1:61:ac:
af:ab:0e:cb:bb:b0:ff:da:b4:a6:dc:ff:3a:df:39:
e7:aa:43:da:4c:38:5e:93:03:c2:45:83:1c:05:1b:
1b:5c:80:15:69:ba:58:1f:65:36:57:cd:6d:bf:38:
4b:5b:f6:f1:cc:77:6d:dc:ae:d2:0d:ae:fd:f1:7a:
cb:a5:60:86:38:2f:3e:17:62:1a:59:e0:72:5c:69:
d3:40:3e:12:0c:cd:2e:00:5e:33:4e:03:1e:e7:15:
dd:a2:00:a4:f7:d9:a6:90:9d:70:f1:a0:1c:c2:63:
51:2c:08:1f:5f:7f:61:4b:54:e5:d6:da:52:15:34:
ab:74:28:81:ab:73:16:fd:0a:59:b0:d1:67:e7:a2:
1c:84:c1:01:d0:fa:1d:ec:18:8b:d6:db:67:3e:10:
9f:c5:f4:23:9b:c6:97:89:dc:62:e5:cc:47:a0:98:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F6:C9:A5:BE:09:BE:16:2B:2F:93:18:60:13:7F:58:BE:B5:63:B7
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:8a:f5:e1:11:b7:14:43:87:75:1b:54:d8:82:6c:d1:9a:5c:
c7:9b:df:17:cc:a5:2d:ad:4a:5d:52:56:3c:ec:a1:e6:8d:46:
be:f4:d6:6e:58:8a:47:67:06:f7:38:38:80:bb:2b:96:f1:be:
b3:e7:16:91:3a:5f:b7:f9:f8:56:c5:33:6e:b9:84:1f:64:e4:
b5:98:48:66:3b:23:a1:ba:5a:00:54:c5:5a:3e:d6:8a:83:0f:
c6:20:5d:4f:b5:38:55:2e:83:41:01:a7:a5:9b:1d:da:9b:8d:
e1:8b:ba:23:f1:55:5e:b6:15:74:ed:5f:2e:99:58:66:72:9e:
58:b4:f0:76:9a:ab:78:17:7e:3e:09:15:55:25:08:dd:4c:a1:
d3:0e:75:8f:ff:c3:ac:76:f4:e9:12:87:2d:7e:45:03:36:8c:
35:79:b6:1b:8f:7c:a0:91:54:e2:4d:d1:94:da:3a:c3:04:56:
f3:d1:29:a3:ec:89:1d:89:c0:9a:5e:69:72:43:ae:19:c9:b6:
71:37:c9:c3:37:85:bd:f7:be:e0:af:56:b3:bf:c8:e5:29:98:
31:44:16:2f:21:ea:53:0e:5f:eb:c7:74:ec:5f:9f:3c:73:e3:
a1:ff:54:e2:eb:e3:c4:82:1f:43:6f:16:1e:bb:9a:2c:e4:5a:
d4:46:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:19:59 2025 by rpki-client