Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
File: 1e6pLEJFQFBGvpuMpsDCDmorFA0.mft (raw, json)
Hash identifier: yyhbEwD2lwNJZv3FYzcgpGudetfTqncrXdQ7T+JudEw=
Subject key identifier: 53:86:36:D4:41:A3:41:65:6E:5F:51:F1:8F:45:70:0B:5E:C1:E5:28
Authority key identifier: D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D
Certificate issuer: /CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
Certificate serial: 01969D877FDADE24D57B931C691F056DB9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
Manifest number: 030E
Signing time: Sun 04 May 2025 23:00:25 +0000
Manifest this update: Sun 04 May 2025 23:00:25 +0000
Manifest next update: Mon 05 May 2025 23:00:25 +0000
Files and hashes: 1: 1e6pLEJFQFBGvpuMpsDCDmorFA0.crl (hash: /jUkXBAnDhBSvGkjBS3oZp7k+jAfxDaKvDhM9QBszIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:7f:da:de:24:d5:7b:93:1c:69:1f:05:6d:b9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
Validity
Not Before: May 4 23:00:25 2025 GMT
Not After : May 5 23:00:25 2025 GMT
Subject: CN=538636d441a341656e5f51f18f45700b5ec1e528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:86:ca:91:c6:cf:c7:d3:ae:07:7f:9d:6e:
db:b5:bb:d7:b0:dd:e2:80:a9:7e:c2:c7:3d:c5:4f:
a9:6c:e5:8e:fb:74:90:60:87:0f:28:96:83:9f:28:
2d:76:4d:4b:b0:d5:c5:74:f6:5e:19:5d:8c:0b:2c:
80:4c:f6:c0:76:4e:7b:5d:6a:e2:44:f6:c4:bd:7b:
ac:cd:82:86:7d:78:88:6c:24:45:03:cf:27:a8:9e:
05:6c:50:54:6c:e9:7c:98:0c:b6:c9:ca:eb:82:3e:
12:66:eb:c1:cc:e6:b6:c7:47:c1:ef:9f:77:ee:30:
5e:3b:c2:1c:bb:b0:30:cb:70:40:98:ec:28:b8:0b:
14:ab:b4:29:6d:35:71:cc:e9:db:cf:a7:1d:95:92:
13:bd:a4:19:86:89:8d:a5:17:6d:a0:ef:6e:51:5c:
34:b4:c4:8a:7e:f7:9d:e1:f1:23:23:4c:e8:bc:c8:
75:5a:8f:93:32:b4:72:10:cf:60:96:6d:6b:48:c5:
0d:81:eb:0a:bc:af:35:8f:ed:0e:8b:2a:3b:bd:d2:
9e:82:61:cd:81:67:46:3e:a6:7e:2d:4d:f2:f3:e1:
a9:0b:34:d4:9a:22:4f:25:ff:c9:52:c4:b5:13:61:
be:e5:76:2a:ac:d3:d5:19:d7:07:f4:55:5e:24:99:
65:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:86:36:D4:41:A3:41:65:6E:5F:51:F1:8F:45:70:0B:5E:C1:E5:28
X509v3 Authority Key Identifier:
keyid:D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c3:4d:a2:9b:28:9c:c6:9e:6f:39:eb:17:32:c5:b0:c8:46:
7d:29:9e:38:6f:9a:da:93:60:0f:f1:df:59:62:12:fc:f8:fa:
dc:0d:20:c9:af:4f:9c:10:19:14:13:f7:bd:34:2d:5f:a6:74:
5b:90:cd:b3:04:98:2e:c8:69:c0:ad:88:e3:8c:2f:7f:9b:f2:
13:56:3e:c7:09:41:aa:5f:4d:ea:18:36:b1:50:0f:3d:e3:8a:
83:72:73:d7:46:cd:96:24:f6:30:87:3e:48:06:61:ab:ff:03:
02:8b:6c:b1:37:af:0d:c4:a6:5a:fd:2a:63:28:b6:ad:5f:90:
92:15:30:8d:e4:12:47:aa:da:d5:5a:a8:2e:96:d2:59:c4:90:
69:32:9c:a7:a5:22:fc:b5:61:ec:07:20:fc:27:8b:07:6c:ed:
13:aa:23:a5:c0:fa:8f:29:50:2e:2b:9e:e0:69:1f:59:ef:13:
a8:7e:f6:3f:6c:78:cf:cd:08:c0:e8:93:7f:7d:a8:fc:78:1a:
78:90:5f:5c:2e:c0:92:3b:a2:42:af:53:24:10:d5:95:67:dc:
73:2b:28:b3:3b:21:7b:3c:27:9e:9d:ed:7a:2d:3a:ef:68:53:
cc:fe:97:a5:36:61:a0:5f:1f:fb:47:a8:30:81:be:47:2f:24:
39:7a:5b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:12:52 2025 by rpki-client