Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
File: 6wK1I7069vxsN93WbN9HmT24Yys.mft (raw, json)
Hash identifier: sCNHMXvIZQlsZHu0N0KdSi0YCzjDwSM2w/vrDph51nM=
Subject key identifier: D0:DE:0A:93:DB:E0:69:0A:5D:1B:C1:F5:56:B0:FF:3B:53:14:47:44
Authority key identifier: EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
Certificate issuer: /CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Certificate serial: 0196C427BCE86E8B68BCAC2BEB2FBE818C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
Manifest number: 07B3
Signing time: Mon 12 May 2025 11:01:00 +0000
Manifest this update: Mon 12 May 2025 11:01:00 +0000
Manifest next update: Tue 13 May 2025 11:01:00 +0000
Files and hashes: 1: 1zUeCNsyUySRrcIIfazZmjAut_s.roa (hash: WXspWFEbktg81y3mrIdyXASjQtA7MBr6Jnt3pUsHMi4=)
2: 6wK1I7069vxsN93WbN9HmT24Yys.crl (hash: 3ib5bgpoEFMeKxlq7y3TxgrMa6Ls+JU3kv4YAGUGxDY=)
3: zd1TadsFdkDRbaDn6de93U3QGzg.roa (hash: 3y34pfznptay8iJNHTIdskxBHxaww5H8QXxFU6fcGRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:bc:e8:6e:8b:68:bc:ac:2b:eb:2f:be:81:8c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Validity
Not Before: May 12 11:01:00 2025 GMT
Not After : May 13 11:01:00 2025 GMT
Subject: CN=d0de0a93dbe0690a5d1bc1f556b0ff3b53144744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:10:1e:e8:e2:75:91:36:02:95:74:09:48:bf:
39:4e:56:6e:9d:43:46:a2:c4:0c:7b:f3:e7:82:ea:
15:71:95:8a:d6:b8:b8:fc:32:d2:69:91:a9:ce:ce:
0c:bd:42:01:fd:a8:f5:f8:ab:05:fb:f3:71:01:39:
38:58:0a:05:19:25:88:07:b6:a7:83:0f:31:e4:57:
cd:af:ff:7e:9a:a4:c6:d2:18:a5:96:f2:ca:1c:5e:
b0:66:d1:fe:f1:26:c1:d6:ab:94:d5:0a:f7:85:96:
15:18:db:8d:ad:89:b3:e1:9b:f3:3d:d4:5e:fd:c4:
76:33:25:d7:c8:a7:f1:f1:88:c3:7f:6b:9c:1d:dd:
2b:a1:f4:1c:aa:5d:c0:ac:12:07:41:38:e7:1e:7c:
dc:6c:c4:33:88:93:d1:3d:36:2c:65:81:38:1f:4d:
02:c4:43:b0:17:2c:12:bc:e5:02:4a:00:e0:64:5c:
06:9e:80:8f:88:46:34:1c:03:c3:d1:68:a8:04:4f:
ad:14:58:88:5e:33:01:54:2f:ac:07:6a:5b:0f:55:
ce:3a:cf:49:57:cf:88:1f:61:39:c3:1d:ea:3a:37:
9e:0d:b5:32:31:67:b2:0f:0c:94:21:1c:37:7e:a6:
c7:8d:6f:82:c5:e9:7a:b3:de:8c:b6:ab:e2:d4:5c:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:0A:93:DB:E0:69:0A:5D:1B:C1:F5:56:B0:FF:3B:53:14:47:44
X509v3 Authority Key Identifier:
keyid:EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:87:36:d2:08:ab:24:c6:a0:5d:8f:f6:5e:44:60:c3:34:df:
34:94:ff:0a:2b:82:b4:61:f4:ff:33:e1:e4:ed:c5:98:85:80:
46:b7:02:e5:e6:a1:64:b8:3b:ea:da:99:dc:d7:54:63:15:69:
34:a3:41:65:ec:34:ed:bd:e4:f5:3b:2a:be:a2:d2:02:57:1a:
a8:95:12:be:9a:ac:36:06:d1:16:bf:ea:c4:cf:fc:5a:cf:7e:
1b:6d:81:6b:9c:ec:2e:1f:fe:73:63:08:c6:8e:5e:19:dd:e1:
8f:30:76:33:e2:58:e1:d6:ce:85:b5:c0:58:95:06:19:18:01:
ac:52:59:30:ca:22:31:b7:e7:72:56:68:7c:26:b5:3a:0f:22:
43:cf:e5:6c:de:b8:61:0a:66:e3:ed:1f:d0:48:b7:57:9b:01:
21:53:5e:41:ff:cb:bc:7f:4f:ea:e0:50:cc:ef:b0:cd:73:af:
30:b9:09:b1:dd:67:ec:e7:4e:d6:65:50:0d:59:c5:6a:6f:cc:
38:8d:68:04:77:d0:55:e3:0e:47:ae:0c:34:5d:b0:a5:c0:ef:
e9:7c:64:40:28:0e:20:c3:d0:9f:df:6d:69:d3:37:a5:7c:5c:
00:13:48:43:8b:d6:12:95:b1:e1:ca:13:96:41:bb:48:a3:38:
73:cb:c1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:10:11 2025 by rpki-client