Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
File: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft (raw, json)
Hash identifier: VhLPJvKWZB9V3nCQsu6x1ccK2ElYNsDCzSjEVCSyQAY=
Subject key identifier: AC:04:EE:3B:ED:DA:63:F7:BD:80:0C:36:A3:C5:B1:00:8C:01:A6:6F
Authority key identifier: E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
Certificate issuer: /CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Certificate serial: 0196B1EA38517D4BF0A4B5805002B50536B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
Manifest number: 0969
Signing time: Thu 08 May 2025 22:00:39 +0000
Manifest this update: Thu 08 May 2025 22:00:39 +0000
Manifest next update: Fri 09 May 2025 22:00:39 +0000
Files and hashes: 1: 6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl (hash: uIppXQ6AxY2bNbjslE4Tc186GH7ArYN3bDn8eWcLGZM=)
2: ClZdr1wg9-gyvQ2UI0rc36Tkqn8.roa (hash: kpxqL73T43lKVSu7/H7qyZ0Ta1r2r6Ekr0F6N2fIhsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:38:51:7d:4b:f0:a4:b5:80:50:02:b5:05:36:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c3469d1e735ae4d60837b7709c33ff427c8e84
Validity
Not Before: May 8 22:00:39 2025 GMT
Not After : May 9 22:00:39 2025 GMT
Subject: CN=ac04ee3bedda63f7bd800c36a3c5b1008c01a66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:9c:62:09:75:30:b7:7e:8d:1d:19:43:c3:
71:b4:5a:1d:d4:e3:c4:f9:03:82:02:24:00:86:54:
98:ed:bd:26:09:0f:ee:12:87:db:f5:da:c6:e0:25:
b9:95:0d:19:f7:2d:42:6e:f1:ce:a5:c1:6f:52:87:
2e:f0:44:6c:b0:c5:60:af:c2:98:06:76:3d:5a:ed:
24:f2:81:93:dc:06:81:98:e8:72:cb:92:82:a0:58:
5e:20:7b:ad:9c:2e:b6:2e:31:1e:05:3b:34:13:ec:
f7:fb:b0:0d:ab:d7:4d:d9:24:27:ea:ea:6c:da:e5:
95:11:91:41:41:d7:50:07:cf:e2:4e:ab:cc:ef:a3:
ab:63:49:97:f2:01:6c:dd:00:3e:57:2d:b5:fc:98:
32:1d:10:da:5b:d5:c8:cd:f1:7b:50:7b:2a:7c:89:
66:0a:e4:b1:d6:65:4a:45:a7:b5:92:a5:aa:79:86:
9a:aa:e9:3b:8a:26:f4:a5:8a:1c:52:48:4c:b5:b9:
e1:2d:31:f3:ee:ff:6c:f7:19:2e:de:d8:6f:c4:a8:
e7:7a:35:eb:9d:ec:40:e4:69:3f:d0:35:b8:44:18:
52:ee:d1:ce:95:90:fe:d8:81:54:ff:6e:83:51:89:
7d:2f:dd:ea:16:18:30:1d:b6:5b:34:ab:e0:5e:e5:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:04:EE:3B:ED:DA:63:F7:BD:80:0C:36:A3:C5:B1:00:8C:01:A6:6F
X509v3 Authority Key Identifier:
keyid:E8:C3:46:9D:1E:73:5A:E4:D6:08:37:B7:70:9C:33:FF:42:7C:8E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MNGnR5zWuTWCDe3cJwz_0J8joQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4505ee-5fe0-448c-b621-8924850d95d6/1/6MNGnR5zWuTWCDe3cJwz_0J8joQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6e:a4:31:ec:81:5c:dc:91:e8:c0:28:f0:80:b8:82:fc:28:
d9:a7:58:32:d4:7a:98:ea:7c:cb:ea:54:e3:d6:f2:0c:fd:62:
52:ed:b8:c7:ed:db:27:c2:6c:79:34:0e:48:6d:90:12:e6:9c:
4e:6d:27:6a:e6:cf:81:96:32:0a:ec:36:aa:a9:e2:c3:9a:cb:
ca:91:b6:56:0f:95:ed:3a:6a:dc:78:94:8c:cf:6f:3b:d8:11:
7e:62:49:e8:b8:f4:f5:e9:5c:93:06:30:68:43:37:94:fa:48:
47:df:3c:83:59:d6:4e:e3:55:81:a0:a2:71:40:f0:b5:c6:6c:
d2:31:7d:af:b4:5b:72:5b:3e:96:fc:2f:bb:b8:b5:2a:4d:b9:
1d:51:db:84:91:c3:4b:d6:bb:fc:c9:8a:11:f2:f5:a1:b5:da:
58:2f:6e:16:13:52:6d:45:84:24:dc:5f:e9:c1:cc:bf:b7:af:
ac:26:e8:b1:6b:56:f3:59:5c:97:e6:42:b6:de:3c:48:ec:d1:
9c:21:57:0a:cf:04:5a:e7:22:c5:0a:5b:5d:97:31:68:ce:d5:
34:f0:1f:5d:7c:1b:03:0b:a4:b5:95:6d:74:6f:5e:c4:90:14:
41:af:53:e2:d8:00:6c:c1:88:60:c8:93:9f:87:93:d4:de:5c:
7d:a4:51:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:49:09 2025 by rpki-client