Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
File: a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft (raw, json)
Hash identifier: FBu6bIYJOVeT0+nkBmZVkQGuoO5+ug4EKXj3GS8//84=
Subject key identifier: 54:45:3E:53:5F:DE:6C:EB:91:96:23:DD:48:43:A8:E4:03:17:69:33
Authority key identifier: 6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
Certificate issuer: /CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Certificate serial: 01969D880BD22D6198399D201B276DF337B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
Manifest number: 06A2
Signing time: Sun 04 May 2025 23:01:00 +0000
Manifest this update: Sun 04 May 2025 23:01:00 +0000
Manifest next update: Mon 05 May 2025 23:01:00 +0000
Files and hashes: 1: a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl (hash: DKqEQlj3U0+y/7IqSK91xMM8jYgOsu/8DnTbctuVp8Q=)
2: tmEAf9ZXZPWYhkKRSKm2RFZwu58.roa (hash: Wy9lKsdp9Di7MryHAEfUWFGv7fEx23Pr2YF9NFfmLVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:88:0b:d2:2d:61:98:39:9d:20:1b:27:6d:f3:37:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Validity
Not Before: May 4 23:01:00 2025 GMT
Not After : May 5 23:01:00 2025 GMT
Subject: CN=54453e535fde6ceb919623dd4843a8e403176933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:72:ca:75:3c:16:52:27:d2:77:54:b2:93:08:
58:cb:02:81:5f:a2:bc:3d:aa:a8:85:78:67:2b:6b:
24:c7:16:5e:1d:3f:4b:7d:52:59:a3:29:db:82:cf:
37:09:2e:be:f7:16:f2:4b:e6:79:3d:29:4e:65:15:
d1:9b:69:60:d1:7e:d5:12:22:cf:ee:83:fa:db:9b:
b0:fa:27:6b:e4:62:96:3f:42:f0:55:de:cc:7a:e5:
02:c4:91:a9:c6:09:0e:2c:0e:f6:66:62:82:e2:aa:
bc:e4:ee:cf:f5:aa:35:6d:26:4f:69:5a:02:44:a1:
55:9e:67:5c:6b:b1:fb:3a:7b:f9:bc:d7:ca:88:95:
11:34:8a:8e:74:d9:2b:26:83:0b:20:07:48:04:5d:
00:a8:77:52:7f:8d:cd:99:ee:20:03:76:72:c8:cf:
5a:5e:bf:5d:7b:87:ac:2f:eb:38:82:7d:15:56:10:
ba:de:4a:29:9f:cc:d8:f5:f0:01:f3:de:d5:5e:59:
cb:b6:b5:ec:81:14:84:9a:60:4a:bb:f9:11:4f:1e:
6e:61:f6:f7:ca:ec:08:80:2a:ec:10:c9:af:c9:a0:
58:5c:23:0e:00:65:81:5a:40:09:29:f7:ea:39:03:
6a:98:5b:5f:9f:6c:91:89:e4:d7:ce:15:ca:36:cf:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:3E:53:5F:DE:6C:EB:91:96:23:DD:48:43:A8:E4:03:17:69:33
X509v3 Authority Key Identifier:
keyid:6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b5:55:6a:be:58:09:27:51:64:53:91:09:be:29:08:fd:04:
b9:b4:97:f0:c1:84:ec:46:57:33:6f:42:4e:ad:7e:27:c2:c1:
a8:fa:47:49:0b:7c:db:3d:76:8c:41:ed:3b:65:19:72:52:fd:
9e:30:65:ad:2e:0f:42:fd:43:a5:00:6f:31:e0:b8:a1:db:7d:
0a:46:4b:8e:44:ba:b0:8b:6c:41:45:89:d9:5a:d0:fd:b4:f8:
43:6b:8f:51:26:32:e6:93:57:f1:e1:69:b5:7a:38:d3:47:33:
d2:65:72:28:40:9e:17:6c:d0:ad:34:e6:81:28:a7:4d:49:e6:
6e:22:de:2f:14:95:5d:ee:93:b9:c3:e8:8d:d5:32:93:a1:c2:
30:b2:18:a4:13:28:b0:c8:25:32:f2:f2:07:cd:16:3e:fc:9b:
10:e9:d8:f8:64:ad:f3:fa:19:a0:7f:7d:c6:2e:49:0c:f2:92:
99:1d:5a:ac:bf:94:97:ce:41:56:88:95:99:43:14:63:13:f3:
29:8a:0d:55:4e:b1:c9:2c:0e:b4:25:c5:ce:95:dd:2a:91:9b:
f9:39:b7:3d:90:58:a3:03:16:cd:e8:50:7e:3a:d6:79:1f:e9:
fc:32:5a:31:bb:30:d9:ad:ec:17:19:d7:47:3a:37:9a:40:66:
dc:79:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:23:15 2025 by rpki-client