Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
File: 6KhR3a5aZMw4glOVvppQfalat88.mft (raw, json)
Hash identifier: FDcvHcXC2wiy2FYaATDSN1utrJAbPZXoFX3FI6uJ8Mc=
Subject key identifier: 56:32:6E:1F:C2:FE:DC:BF:AC:AB:BB:EE:8D:9B:E3:E7:61:AF:B1:DE
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 0196C04AF02DA23BA0B80E94CD74CA2D6221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
Manifest number: 154B
Signing time: Sun 11 May 2025 17:00:58 +0000
Manifest this update: Sun 11 May 2025 17:00:58 +0000
Manifest next update: Mon 12 May 2025 17:00:58 +0000
Files and hashes: 1: 6KhR3a5aZMw4glOVvppQfalat88.crl (hash: kM+E1TawIdi3p3SrSrSZ/HKco/1Rz4g5XL3IRN1Sf00=)
2: JeUrUwbFpGu8iDqDZmLLtLX07Uo.roa (hash: AF4y3k0K4M29JKvnm3WAi9rM2wiDZSTI7KiQY/+WwGQ=)
3: LMOHIG2uLaY6GZHZHZ2LuvxqzKM.roa (hash: 4NroWDI/8Q2pwsJ7z2O+ja04jrPKvPKyJQ0j1cEhZ+Q=)
4: oDuQtsfWsb20exJBO7QurYBeWk8.roa (hash: gEKk7yZspSpg2oEhPVCqnu3t/dgmJib8oW+i8A65aR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:f0:2d:a2:3b:a0:b8:0e:94:cd:74:ca:2d:62:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: May 11 17:00:58 2025 GMT
Not After : May 12 17:00:58 2025 GMT
Subject: CN=56326e1fc2fedcbfacabbbee8d9be3e761afb1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:cd:d7:a0:50:6b:8a:f7:d9:60:2e:06:f0:
7f:81:bb:4f:72:ae:35:78:aa:cb:44:41:48:d2:fd:
fb:4f:0d:6c:da:1e:45:eb:b8:d6:40:c6:3a:56:d6:
b1:69:38:d8:e8:30:44:86:ee:2f:b6:aa:20:67:71:
ae:b0:05:e0:a7:44:e3:61:b6:6e:f1:22:0f:a3:f7:
66:b1:9b:60:6d:7c:54:7f:e9:5e:31:ea:cd:a8:5a:
78:61:1c:57:ae:8b:92:f8:74:21:b1:f4:ba:b0:17:
ec:90:af:a4:ac:55:ed:e9:a3:cd:09:a6:d6:99:43:
9a:a2:1e:60:ad:7d:d3:e2:dd:54:bb:db:4b:57:71:
8a:47:92:dc:9c:3e:5f:ab:46:64:e7:95:5f:c4:ab:
68:d1:01:be:b6:0f:c1:11:1c:24:cf:5b:c8:c6:52:
4c:75:96:b7:99:da:eb:cb:34:44:fe:83:38:c6:1f:
60:ea:1c:09:eb:61:30:ad:85:4c:56:50:2d:bf:85:
2d:a2:bb:1b:d1:7f:61:8f:8b:ca:0a:b5:fd:ce:e2:
f0:05:3c:3d:9a:3d:23:b7:c2:19:f2:4a:93:fd:e0:
84:c6:af:77:87:33:08:90:48:ef:a5:54:5a:59:3f:
2a:97:4f:f7:e7:9d:9e:24:f0:13:09:79:3c:16:4a:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:32:6E:1F:C2:FE:DC:BF:AC:AB:BB:EE:8D:9B:E3:E7:61:AF:B1:DE
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0f:c3:b3:e7:1e:a6:31:50:e0:72:18:f1:f2:c4:c3:be:70:
99:be:80:74:e2:c3:6f:e8:36:99:55:bb:a3:45:a4:b7:62:6b:
ef:c8:46:35:26:55:68:f5:82:72:81:24:2f:77:70:7d:6e:94:
20:68:e7:b7:af:2f:e4:9f:0f:c0:c2:fd:94:80:23:a4:71:e8:
1e:09:ea:aa:e5:d9:3f:76:f3:01:9c:10:76:8c:ad:05:b9:c6:
d9:b6:d2:c6:27:58:ce:ec:c5:0f:0c:7f:56:78:0b:a9:4d:0c:
e3:fc:37:6a:fc:21:09:8d:f4:8b:8c:0a:bf:d7:ba:81:33:9d:
75:21:25:b0:7b:79:cd:5f:fa:b1:7f:f0:61:87:fa:1d:b5:c3:
3c:4a:55:da:ad:a3:2d:90:ff:83:19:88:1c:70:c5:5a:77:80:
b3:6b:8f:da:64:38:dc:b9:a8:df:d9:dc:9f:13:e6:ef:8b:ad:
7c:51:68:e4:ea:dc:2e:f9:b7:6c:b5:75:fe:4a:0e:dc:4e:fd:
5e:b8:77:50:eb:49:c3:f6:18:23:c2:08:65:3a:e8:41:4c:e4:
61:91:a0:b8:28:9b:8a:bb:84:f4:aa:f4:6e:04:34:f4:f6:1e:
77:2e:81:95:e8:1c:80:52:54:a2:23:de:82:54:41:59:92:dc:
96:dd:8a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:05:12 2025 by rpki-client