Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
File: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft (raw, json)
Hash identifier: aL8/yX5sf3Kml1Vei4EXD877PhzrT4ZSTVpE8Dl66n4=
Subject key identifier: DA:56:78:1A:A9:13:11:DA:D8:75:22:64:16:70:38:5E:AB:8B:F8:55
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 0196BECA200F2F38068A6B3EBEAE1524E012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
Manifest number: 0A82
Signing time: Sun 11 May 2025 10:00:39 +0000
Manifest this update: Sun 11 May 2025 10:00:39 +0000
Manifest next update: Mon 12 May 2025 10:00:39 +0000
Files and hashes: 1: 0XabXlC7deISiRQU33Gmn1-hwRM.roa (hash: XChkodvgKF7pFZfRd54zjJi0OLTiUwtDb3v0CScHm/A=)
2: 6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl (hash: kbFJ5RQ1NKTVTl/FoThM2BWXDN1qdZYR2weQyvaRJ6Q=)
3: Jkdiv5bBO_BKcgc0OerouNuGE1k.roa (hash: VbBTlFGzjAjrvA9wRAtB5k6JdTD926ZHlAXAShcRc2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:20:0f:2f:38:06:8a:6b:3e:be:ae:15:24:e0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: May 11 10:00:39 2025 GMT
Not After : May 12 10:00:39 2025 GMT
Subject: CN=da56781aa91311dad87522641670385eab8bf855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:86:a6:53:5d:4f:e8:04:09:34:12:56:5b:
33:cb:a4:3b:14:86:14:91:27:1b:04:6d:5d:5c:50:
4c:9e:28:7b:a6:6b:d9:79:0e:65:67:88:31:aa:a7:
ce:80:bd:19:cc:fa:70:de:78:3f:31:f6:fa:76:ee:
0b:4b:93:8c:a2:a7:a8:14:70:bc:f4:6f:77:c3:55:
da:99:55:15:7c:62:bf:11:98:85:91:55:00:44:d4:
3d:53:53:9b:3a:e7:37:fc:9d:43:26:20:a5:f1:73:
af:ab:3a:d3:3b:4d:35:7c:07:73:27:5c:d2:01:4e:
8b:be:f3:6e:79:75:ff:77:0a:81:f6:e9:64:23:92:
9c:40:72:fa:6a:47:5b:22:a1:34:76:79:63:a9:f5:
3c:a1:e7:95:81:e0:1a:a9:81:07:3f:aa:b0:ff:6a:
53:57:1a:7d:8c:17:fc:81:bb:b4:ed:e9:32:c7:cb:
2d:27:41:ab:87:7e:e7:41:83:42:b1:d9:40:49:bd:
99:35:b1:9f:ad:2b:63:d2:63:70:43:f2:fa:2e:2e:
ec:bb:09:f7:3c:c0:25:22:94:2c:50:af:03:6e:d2:
fd:38:3f:d3:26:93:14:c1:c5:b0:05:85:50:4b:52:
58:f5:67:87:58:72:1c:f8:e1:f1:10:85:a0:c5:fa:
05:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:56:78:1A:A9:13:11:DA:D8:75:22:64:16:70:38:5E:AB:8B:F8:55
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:21:30:50:db:16:28:32:dd:0f:ee:c3:0b:b9:d4:02:b6:d0:
9b:49:c0:9d:b5:49:8c:c3:b7:59:61:a4:c0:a4:b8:ab:59:4d:
34:a9:bc:62:74:f8:6c:90:a1:da:14:52:0b:d8:54:7b:eb:e7:
00:4c:54:34:ae:45:a8:9c:59:d4:0e:73:7f:d7:3b:e7:00:3c:
ab:40:56:8a:85:c9:ab:90:a4:98:4a:36:db:ad:d2:d7:1a:38:
02:33:91:f7:39:d4:84:69:c5:6c:9c:46:81:a9:fb:89:ce:85:
38:c7:a7:a7:f9:e8:8b:23:34:bd:a7:a1:64:5c:f4:7b:cb:57:
57:8c:eb:fd:59:b9:6b:cd:bd:e7:68:62:04:ad:93:83:97:69:
e8:78:88:7b:f1:a7:9e:01:88:6f:50:72:2d:dc:70:28:fc:0a:
7a:01:1e:56:94:55:c3:0c:21:69:f0:81:71:0a:a3:84:a3:23:
c4:d7:44:a5:b3:0f:07:56:7b:6d:8c:23:71:e9:87:84:b8:4c:
ab:84:27:47:f9:6a:61:a8:f4:ba:0f:ea:bc:a4:b3:17:ba:db:
90:a0:12:6a:1f:30:37:96:a0:0c:fe:38:1f:6f:0a:2d:66:e9:
6f:1d:61:ba:f8:80:bf:66:2d:01:88:00:2e:f2:57:e4:24:fa:
9a:7e:36:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:29:26 2025 by rpki-client