Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
File: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft (raw, json)
Hash identifier: 6Hfo70PMqAZGSuIu6YvmHGJiGV4BhsgdkP5qeA1E/P0=
Subject key identifier: FD:FF:9B:DB:9A:E8:4F:EA:15:E0:62:66:95:32:56:FB:C0:77:8C:F6
Authority key identifier: 9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8
Certificate issuer: /CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
Certificate serial: 0196BC000EBF0F35928CB9D3013322226808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
Manifest number: 6E
Signing time: Sat 10 May 2025 21:00:42 +0000
Manifest this update: Sat 10 May 2025 21:00:42 +0000
Manifest next update: Sun 11 May 2025 21:00:42 +0000
Files and hashes: 1: W8iTYjU2Evc2p5yDOFlKPLpAZr0.roa (hash: +1HDTD3+F6qn6zfwt9WbeLBT9ppZuriPW/cOhjwp96g=)
2: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl (hash: TVht9h6tKvn8rFYp1KsAG1gLoBXJRt8NSmC7x22EbIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:0e:bf:0f:35:92:8c:b9:d3:01:33:22:22:68:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8
Validity
Not Before: May 10 21:00:42 2025 GMT
Not After : May 11 21:00:42 2025 GMT
Subject: CN=fdff9bdb9ae84fea15e06266953256fbc0778cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:c9:5e:aa:f5:42:e3:7e:6e:c1:e6:59:f1:
13:2d:89:73:41:16:c8:e7:01:e3:f2:d4:8c:19:cd:
8e:07:dd:22:fe:a9:e3:3e:d3:80:ca:d2:64:92:a2:
e1:a3:19:c6:63:9d:ed:da:f4:84:1d:21:f1:04:66:
e0:58:92:ab:79:35:3e:2f:62:a8:1f:24:a6:1d:21:
dc:b8:05:35:1d:90:63:28:21:74:1c:8e:3c:e2:9d:
04:9e:f4:94:3b:36:0a:57:0e:d7:42:5f:fb:0c:70:
9a:fa:a1:c4:e2:5a:af:fe:e8:f5:ff:75:a6:7d:f3:
42:00:41:0a:69:8a:68:e7:21:c6:83:ff:ed:b8:a5:
10:b5:79:d6:6e:73:fe:e2:1d:05:28:21:c3:8f:18:
88:11:69:69:09:c6:ba:55:0b:f4:1c:ba:b0:8d:06:
2f:c4:1c:3d:7a:2d:a5:0a:92:12:4f:d1:13:65:2c:
c7:41:4f:72:8a:80:a6:03:42:a0:66:99:7d:ee:62:
16:d8:c0:c3:5e:c4:54:d7:91:17:98:36:ac:8c:71:
31:6e:0d:40:c8:2b:31:ab:01:c8:24:dc:45:be:82:
79:e2:c0:7b:29:8d:71:10:fb:08:01:37:c5:4f:85:
bb:bc:15:d1:05:9e:74:a0:b8:97:e1:d7:fe:97:91:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FF:9B:DB:9A:E8:4F:EA:15:E0:62:66:95:32:56:FB:C0:77:8C:F6
X509v3 Authority Key Identifier:
keyid:9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3b:ef:a5:21:20:51:1c:e2:73:a4:95:e4:c3:54:df:02:2f:
e8:33:8e:d0:d5:f3:a1:81:e3:c1:70:5a:6c:03:cb:7d:33:90:
89:59:b5:28:4f:4c:9b:8d:be:33:c7:70:98:3f:c0:bd:93:77:
8a:d7:6e:15:58:4d:a3:01:1d:43:d5:56:d5:a6:e3:4a:ff:4b:
88:41:dd:6c:e7:f2:a8:bc:fa:56:d3:e4:9b:25:5e:24:83:9e:
9e:02:84:b6:d0:6b:35:20:e8:f7:56:ff:54:16:25:73:21:97:
38:aa:58:61:53:80:b6:47:ac:2c:73:83:c1:31:73:ef:92:db:
86:15:a1:04:8e:bb:9a:31:e2:77:6e:04:49:b5:7f:b3:8b:c1:
d0:37:a9:00:c2:7a:7a:fc:2b:a6:d0:e6:18:3c:5e:21:d0:a6:
96:5c:71:fb:16:a2:b2:6d:c2:d2:7a:2a:29:4b:4c:d8:37:b2:
d0:90:b8:19:f4:a2:46:db:93:e1:a0:b4:50:4e:01:f4:a3:6a:
8d:e1:7b:b8:08:7c:4f:36:ce:6b:15:3d:63:6a:e5:a5:ca:bc:
89:d8:38:ad:ab:86:58:bb:6a:58:04:5e:70:88:4b:db:5b:17:
de:98:db:70:3e:fc:bb:e5:69:23:9f:e7:61:79:d0:9a:2e:c9:
eb:fd:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:10:11 2025 by rpki-client