Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
File: 6XWS8etB1siTzQ3XK2P8NO5VNTM.mft (raw, json)
Hash identifier: IY9RfM++fMZa+StUxF8/2WeSr9WJtYq1Yqo3zW61MMM=
Subject key identifier: 12:43:8C:6F:CB:7D:5A:81:13:B7:80:F5:E1:25:35:A5:62:E7:88:06
Authority key identifier: E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
Certificate issuer: /CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Certificate serial: 0196C502F1AD3E8B80C0659E1C64FD0B1E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 15:00:26 +0000
Manifest this update: Mon 12 May 2025 15:00:26 +0000
Manifest next update: Tue 13 May 2025 15:00:26 +0000
Files and hashes: 1: 6XWS8etB1siTzQ3XK2P8NO5VNTM.crl (hash: 4+d3ce9GrWV/TCeGiwfTNXremNOPILrK/ZbDorV0lm8=)
2: r6T3XlH0NydhUiVntY08YEEt0HY.roa (hash: j+28xx5Rq8KrtlCf807KmCTOzzUVWhkp01bXOIcVWSo=)
3: wPTagVR3pNusa3J3LbaZykmYrdM.roa (hash: k0uAisbBEgTj7/x2tEyMYhIzPLODPGtJvKxV+pOGuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:02:f1:ad:3e:8b:80:c0:65:9e:1c:64:fd:0b:1e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97592f1eb41d6c893cd0dd72b63fc34ee553533
Validity
Not Before: May 12 15:00:26 2025 GMT
Not After : May 13 15:00:26 2025 GMT
Subject: CN=12438c6fcb7d5a8113b780f5e12535a562e78806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:69:47:42:45:57:7f:d1:2a:0c:ec:11:94:
26:3b:f1:00:44:38:e4:2d:22:c1:59:00:7c:b8:21:
fa:0f:b2:17:51:90:8a:a2:da:b6:16:3e:75:a8:7c:
90:3c:6e:18:b8:d5:f0:5d:2e:e5:54:c9:91:57:e9:
b4:e8:23:a0:da:9b:d0:8d:a5:06:04:98:0c:3c:60:
5b:fc:f5:3f:b1:56:54:5a:ee:09:ba:3a:49:45:c2:
e1:3b:ee:8b:8b:81:bc:5f:66:3f:b0:e7:86:d5:5c:
ed:b8:4f:4d:d6:7b:73:5c:5c:ac:2d:15:98:fe:2b:
90:08:df:c8:35:e6:92:41:47:2a:ef:3b:62:d1:dd:
7e:4b:e7:36:07:4f:1c:83:98:33:c4:d3:c9:a9:85:
19:90:2e:0b:08:74:a1:df:8a:47:17:2c:93:ae:fa:
e7:1a:de:64:c9:12:4d:e5:8c:82:cc:3c:76:5e:2d:
89:21:6a:1b:af:2a:4f:d1:c5:b1:c9:1e:16:9a:6a:
1e:3b:39:e1:4c:24:b4:91:ab:29:03:da:81:fc:a5:
dc:19:1d:84:7c:21:c2:1f:3f:84:bf:67:b1:a4:2c:
10:21:cc:56:2c:d5:18:d7:41:f3:3a:99:43:e6:1f:
a0:16:8c:b4:12:45:8f:01:6b:c7:86:cb:28:ac:37:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:43:8C:6F:CB:7D:5A:81:13:B7:80:F5:E1:25:35:A5:62:E7:88:06
X509v3 Authority Key Identifier:
keyid:E9:75:92:F1:EB:41:D6:C8:93:CD:0D:D7:2B:63:FC:34:EE:55:35:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XWS8etB1siTzQ3XK2P8NO5VNTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/42217e-ead0-46be-8ad0-05f90ad24f3e/1/6XWS8etB1siTzQ3XK2P8NO5VNTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dd:55:40:d5:3e:3d:6a:87:d6:61:9b:98:fe:67:53:a6:2d:
ee:4e:53:8c:84:66:7e:a3:ec:8f:92:a7:b2:77:29:80:62:4f:
ba:65:7a:b8:46:2d:48:e8:75:3c:b3:2d:06:77:3b:0d:93:dc:
05:8a:f8:d0:2b:4d:9c:7a:58:8b:35:de:62:30:1b:92:0b:c1:
53:99:69:46:0f:e1:2c:6e:e3:3a:11:89:b8:33:49:6c:02:15:
78:d2:67:d9:73:20:82:87:87:f5:0d:d1:d4:d3:86:41:84:9f:
bd:e0:d8:b6:a0:6b:19:4e:e2:c5:82:b4:38:ee:49:19:6d:10:
c0:43:d2:c0:56:63:e4:5d:05:44:a5:93:80:d9:d7:65:69:9e:
12:a3:49:1e:52:1a:4d:2b:eb:44:70:06:66:a0:cf:03:d7:cd:
fc:e4:39:69:e0:92:45:7a:89:3e:4b:e5:e1:29:a2:2c:06:db:
b6:f2:7f:3a:b0:e4:29:e2:45:0e:28:a7:02:d1:aa:e7:41:f2:
a4:20:54:2c:ad:f6:40:44:08:48:11:56:3f:49:6c:75:c4:ea:
67:ea:29:c5:b3:4e:e0:5e:22:82:3c:87:25:72:2d:85:c8:2e:
13:80:72:cd:e9:6d:8c:46:ac:e3:2f:1f:4b:08:c6:be:f5:60:
8f:ab:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:56:23 2025 by rpki-client